1. Packages
  2. Alibaba Cloud Provider
  3. API Docs
  4. cloudfirewall
  5. getVpcFirewallControlPolicies
Alibaba Cloud v3.88.1 published on Saturday, Nov 8, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-alicloud

alicloud.cloudfirewall.getVpcFirewallControlPolicies

alicloud logo
Alibaba Cloud v3.88.1 published on Saturday, Nov 8, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-alicloud

    This data source provides the Cloud Firewall Vpc Firewall Control Policies of the current Alibaba Cloud user.

    NOTE: Available since v1.194.0.

    Example Usage

    Basic Usage

    import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const ids = alicloud.cloudfirewall.getVpcFirewallControlPolicies({
    vpcFirewallId: "example_value",
    ids: [
        "example_value-1",
        "example_value-2",
    ],
});
export const alicloudCloudFirewallVpcFirewallControlPoliciesId1 = ids.then(ids => ids.policies?.[0]?.id);

    import pulumi
import pulumi_alicloud as alicloud

ids = alicloud.cloudfirewall.get_vpc_firewall_control_policies(vpc_firewall_id="example_value",
    ids=[
        "example_value-1",
        "example_value-2",
    ])
pulumi.export("alicloudCloudFirewallVpcFirewallControlPoliciesId1", ids.policies[0].id)

    package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cloudfirewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		ids, err := cloudfirewall.GetVpcFirewallControlPolicies(ctx, &cloudfirewall.GetVpcFirewallControlPoliciesArgs{
			VpcFirewallId: "example_value",
			Ids: []string{
				"example_value-1",
				"example_value-2",
			},
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("alicloudCloudFirewallVpcFirewallControlPoliciesId1", ids.Policies[0].Id)
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var ids = AliCloud.CloudFirewall.GetVpcFirewallControlPolicies.Invoke(new()
    {
        VpcFirewallId = "example_value",
        Ids = new[]
        {
            "example_value-1",
            "example_value-2",
        },
    });

    return new Dictionary<string, object?>
    {
        ["alicloudCloudFirewallVpcFirewallControlPoliciesId1"] = ids.Apply(getVpcFirewallControlPoliciesResult => getVpcFirewallControlPoliciesResult.Policies[0]?.Id),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.cloudfirewall.CloudfirewallFunctions;
import com.pulumi.alicloud.cloudfirewall.inputs.GetVpcFirewallControlPoliciesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var ids = CloudfirewallFunctions.getVpcFirewallControlPolicies(GetVpcFirewallControlPoliciesArgs.builder()
            .vpcFirewallId("example_value")
            .ids(            
                "example_value-1",
                "example_value-2")
            .build());

        ctx.export("alicloudCloudFirewallVpcFirewallControlPoliciesId1", ids.policies()[0].id());
    }
}

    variables:
  ids:
    fn::invoke:
      function: alicloud:cloudfirewall:getVpcFirewallControlPolicies
      arguments:
        vpcFirewallId: example_value
        ids:
          - example_value-1
          - example_value-2
outputs:
  alicloudCloudFirewallVpcFirewallControlPoliciesId1: ${ids.policies[0].id}

    Using getVpcFirewallControlPolicies

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getVpcFirewallControlPolicies(args: GetVpcFirewallControlPoliciesArgs, opts?: InvokeOptions): Promise<GetVpcFirewallControlPoliciesResult>
function getVpcFirewallControlPoliciesOutput(args: GetVpcFirewallControlPoliciesOutputArgs, opts?: InvokeOptions): Output<GetVpcFirewallControlPoliciesResult>
    def get_vpc_firewall_control_policies(acl_action: Optional[str] = None,
                                      acl_uuid: Optional[str] = None,
                                      description: Optional[str] = None,
                                      destination: Optional[str] = None,
                                      ids: Optional[Sequence[str]] = None,
                                      lang: Optional[str] = None,
                                      member_uid: Optional[str] = None,
                                      output_file: Optional[str] = None,
                                      page_number: Optional[int] = None,
                                      page_size: Optional[int] = None,
                                      proto: Optional[str] = None,
                                      release: Optional[bool] = None,
                                      source: Optional[str] = None,
                                      vpc_firewall_id: Optional[str] = None,
                                      opts: Optional[InvokeOptions] = None) -> GetVpcFirewallControlPoliciesResult
def get_vpc_firewall_control_policies_output(acl_action: Optional[pulumi.Input[str]] = None,
                                      acl_uuid: Optional[pulumi.Input[str]] = None,
                                      description: Optional[pulumi.Input[str]] = None,
                                      destination: Optional[pulumi.Input[str]] = None,
                                      ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                                      lang: Optional[pulumi.Input[str]] = None,
                                      member_uid: Optional[pulumi.Input[str]] = None,
                                      output_file: Optional[pulumi.Input[str]] = None,
                                      page_number: Optional[pulumi.Input[int]] = None,
                                      page_size: Optional[pulumi.Input[int]] = None,
                                      proto: Optional[pulumi.Input[str]] = None,
                                      release: Optional[pulumi.Input[bool]] = None,
                                      source: Optional[pulumi.Input[str]] = None,
                                      vpc_firewall_id: Optional[pulumi.Input[str]] = None,
                                      opts: Optional[InvokeOptions] = None) -> Output[GetVpcFirewallControlPoliciesResult]
    func GetVpcFirewallControlPolicies(ctx *Context, args *GetVpcFirewallControlPoliciesArgs, opts ...InvokeOption) (*GetVpcFirewallControlPoliciesResult, error)
func GetVpcFirewallControlPoliciesOutput(ctx *Context, args *GetVpcFirewallControlPoliciesOutputArgs, opts ...InvokeOption) GetVpcFirewallControlPoliciesResultOutput

    > Note: This function is named GetVpcFirewallControlPolicies in the Go SDK.

    public static class GetVpcFirewallControlPolicies 
{
    public static Task<GetVpcFirewallControlPoliciesResult> InvokeAsync(GetVpcFirewallControlPoliciesArgs args, InvokeOptions? opts = null)
    public static Output<GetVpcFirewallControlPoliciesResult> Invoke(GetVpcFirewallControlPoliciesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetVpcFirewallControlPoliciesResult> getVpcFirewallControlPolicies(GetVpcFirewallControlPoliciesArgs args, InvokeOptions options)
public static Output<GetVpcFirewallControlPoliciesResult> getVpcFirewallControlPolicies(GetVpcFirewallControlPoliciesArgs args, InvokeOptions options)

    fn::invoke:
  function: alicloud:cloudfirewall/getVpcFirewallControlPolicies:getVpcFirewallControlPolicies
  arguments:
    # arguments dictionary

    The following arguments are supported:

    VpcFirewallId string
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    AclAction string
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    AclUuid string
    Access control over VPC firewalls strategy unique identifier.
    Description string
    Access control over VPC firewalls description of the strategy information.
    Destination string
    Access control over VPC firewalls strategy the destination address in.
    Ids List<string>
    A list of Vpc Firewall Control Policy IDs.
    Lang string
    The language of the content within the request and response. Valid values: zh, en.
    MemberUid string
    The UID of the member account of the current Alibaba cloud account.
    OutputFile string
    File name where to save data source results (after running pulumi preview).
    PageNumber int
    PageSize int
    Proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    Release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    Source string
    Access control over VPC firewalls strategy in the source address.
    VpcFirewallId string
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    AclAction string
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    AclUuid string
    Access control over VPC firewalls strategy unique identifier.
    Description string
    Access control over VPC firewalls description of the strategy information.
    Destination string
    Access control over VPC firewalls strategy the destination address in.
    Ids []string
    A list of Vpc Firewall Control Policy IDs.
    Lang string
    The language of the content within the request and response. Valid values: zh, en.
    MemberUid string
    The UID of the member account of the current Alibaba cloud account.
    OutputFile string
    File name where to save data source results (after running pulumi preview).
    PageNumber int
    PageSize int
    Proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    Release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    Source string
    Access control over VPC firewalls strategy in the source address.
    vpcFirewallId String
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    aclAction String
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    aclUuid String
    Access control over VPC firewalls strategy unique identifier.
    description String
    Access control over VPC firewalls description of the strategy information.
    destination String
    Access control over VPC firewalls strategy the destination address in.
    ids List<String>
    A list of Vpc Firewall Control Policy IDs.
    lang String
    The language of the content within the request and response. Valid values: zh, en.
    memberUid String
    The UID of the member account of the current Alibaba cloud account.
    outputFile String
    File name where to save data source results (after running pulumi preview).
    pageNumber Integer
    pageSize Integer
    proto String
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release Boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source String
    Access control over VPC firewalls strategy in the source address.
    vpcFirewallId string
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    aclAction string
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    aclUuid string
    Access control over VPC firewalls strategy unique identifier.
    description string
    Access control over VPC firewalls description of the strategy information.
    destination string
    Access control over VPC firewalls strategy the destination address in.
    ids string[]
    A list of Vpc Firewall Control Policy IDs.
    lang string
    The language of the content within the request and response. Valid values: zh, en.
    memberUid string
    The UID of the member account of the current Alibaba cloud account.
    outputFile string
    File name where to save data source results (after running pulumi preview).
    pageNumber number
    pageSize number
    proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source string
    Access control over VPC firewalls strategy in the source address.
    vpc_firewall_id str
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    acl_action str
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    acl_uuid str
    Access control over VPC firewalls strategy unique identifier.
    description str
    Access control over VPC firewalls description of the strategy information.
    destination str
    Access control over VPC firewalls strategy the destination address in.
    ids Sequence[str]
    A list of Vpc Firewall Control Policy IDs.
    lang str
    The language of the content within the request and response. Valid values: zh, en.
    member_uid str
    The UID of the member account of the current Alibaba cloud account.
    output_file str
    File name where to save data source results (after running pulumi preview).
    page_number int
    page_size int
    proto str
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source str
    Access control over VPC firewalls strategy in the source address.
    vpcFirewallId String
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    aclAction String
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    aclUuid String
    Access control over VPC firewalls strategy unique identifier.
    description String
    Access control over VPC firewalls description of the strategy information.
    destination String
    Access control over VPC firewalls strategy the destination address in.
    ids List<String>
    A list of Vpc Firewall Control Policy IDs.
    lang String
    The language of the content within the request and response. Valid values: zh, en.
    memberUid String
    The UID of the member account of the current Alibaba cloud account.
    outputFile String
    File name where to save data source results (after running pulumi preview).
    pageNumber Number
    pageSize Number
    proto String
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release Boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source String
    Access control over VPC firewalls strategy in the source address.

    getVpcFirewallControlPolicies Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Ids List<string>
    Policies List<Pulumi.AliCloud.CloudFirewall.Outputs.GetVpcFirewallControlPoliciesPolicy>
    A list of Cloud Firewall Vpc Firewall Control Policies. Each element contains the following attributes:
    VpcFirewallId string
    The ID of the VPC firewall instance.
    AclAction string
    Access control over VPC firewalls are set in the access traffic via Alibaba cloud firewall way (ACT).
    AclUuid string
    Access control over VPC firewalls strategy unique identifier.
    Description string
    Access control over VPC firewalls description of the strategy information.
    Destination string
    Access control over VPC firewalls strategy the destination address in.
    Lang string
    MemberUid string
    The UID of the member account of the current Alibaba cloud account.
    OutputFile string
    PageNumber int
    PageSize int
    Proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    Release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:
    Source string
    Access control over VPC firewalls strategy in the source address.
    Id string
    The provider-assigned unique ID for this managed resource.
    Ids []string
    Policies []GetVpcFirewallControlPoliciesPolicy
    A list of Cloud Firewall Vpc Firewall Control Policies. Each element contains the following attributes:
    VpcFirewallId string
    The ID of the VPC firewall instance.
    AclAction string
    Access control over VPC firewalls are set in the access traffic via Alibaba cloud firewall way (ACT).
    AclUuid string
    Access control over VPC firewalls strategy unique identifier.
    Description string
    Access control over VPC firewalls description of the strategy information.
    Destination string
    Access control over VPC firewalls strategy the destination address in.
    Lang string
    MemberUid string
    The UID of the member account of the current Alibaba cloud account.
    OutputFile string
    PageNumber int
    PageSize int
    Proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    Release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:
    Source string
    Access control over VPC firewalls strategy in the source address.
    id String
    The provider-assigned unique ID for this managed resource.
    ids List<String>
    policies List<GetVpcFirewallControlPoliciesPolicy>
    A list of Cloud Firewall Vpc Firewall Control Policies. Each element contains the following attributes:
    vpcFirewallId String
    The ID of the VPC firewall instance.
    aclAction String
    Access control over VPC firewalls are set in the access traffic via Alibaba cloud firewall way (ACT).
    aclUuid String
    Access control over VPC firewalls strategy unique identifier.
    description String
    Access control over VPC firewalls description of the strategy information.
    destination String
    Access control over VPC firewalls strategy the destination address in.
    lang String
    memberUid String
    The UID of the member account of the current Alibaba cloud account.
    outputFile String
    pageNumber Integer
    pageSize Integer
    proto String
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release Boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:
    source String
    Access control over VPC firewalls strategy in the source address.
    id string
    The provider-assigned unique ID for this managed resource.
    ids string[]
    policies GetVpcFirewallControlPoliciesPolicy[]
    A list of Cloud Firewall Vpc Firewall Control Policies. Each element contains the following attributes:
    vpcFirewallId string
    The ID of the VPC firewall instance.
    aclAction string
    Access control over VPC firewalls are set in the access traffic via Alibaba cloud firewall way (ACT).
    aclUuid string
    Access control over VPC firewalls strategy unique identifier.
    description string
    Access control over VPC firewalls description of the strategy information.
    destination string
    Access control over VPC firewalls strategy the destination address in.
    lang string
    memberUid string
    The UID of the member account of the current Alibaba cloud account.
    outputFile string
    pageNumber number
    pageSize number
    proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:
    source string
    Access control over VPC firewalls strategy in the source address.
    id str
    The provider-assigned unique ID for this managed resource.
    ids Sequence[str]
    policies Sequence[GetVpcFirewallControlPoliciesPolicy]
    A list of Cloud Firewall Vpc Firewall Control Policies. Each element contains the following attributes:
    vpc_firewall_id str
    The ID of the VPC firewall instance.
    acl_action str
    Access control over VPC firewalls are set in the access traffic via Alibaba cloud firewall way (ACT).
    acl_uuid str
    Access control over VPC firewalls strategy unique identifier.
    description str
    Access control over VPC firewalls description of the strategy information.
    destination str
    Access control over VPC firewalls strategy the destination address in.
    lang str
    member_uid str
    The UID of the member account of the current Alibaba cloud account.
    output_file str
    page_number int
    page_size int
    proto str
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:
    source str
    Access control over VPC firewalls strategy in the source address.
    id String
    The provider-assigned unique ID for this managed resource.
    ids List<String>
    policies List<Property Map>
    A list of Cloud Firewall Vpc Firewall Control Policies. Each element contains the following attributes:
    vpcFirewallId String
    The ID of the VPC firewall instance.
    aclAction String
    Access control over VPC firewalls are set in the access traffic via Alibaba cloud firewall way (ACT).
    aclUuid String
    Access control over VPC firewalls strategy unique identifier.
    description String
    Access control over VPC firewalls description of the strategy information.
    destination String
    Access control over VPC firewalls strategy the destination address in.
    lang String
    memberUid String
    The UID of the member account of the current Alibaba cloud account.
    outputFile String
    pageNumber Number
    pageSize Number
    proto String
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release Boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:
    source String
    Access control over VPC firewalls strategy in the source address.

    Supporting Types

    GetVpcFirewallControlPoliciesPolicy

    AclAction string
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    AclUuid string
    Access control over VPC firewalls strategy unique identifier.
    ApplicationId string
    Policy specifies the application ID.
    ApplicationName string
    Access control over VPC firewalls policies support the application types.
    Description string
    Access control over VPC firewalls description of the strategy information.
    DestPort string
    Access control over VPC firewalls strategy access traffic of the destination port.
    DestPortGroup string
    Access control policy in the access traffic of the destination port address book name.
    DestPortGroupPorts List<string>
    Port Address Book port list.
    DestPortType string
    Access control over VPC firewalls strategy access traffic of the destination port type.
    Destination string
    Access control over VPC firewalls strategy the destination address in.
    DestinationGroupCidrs List<string>
    Destination address book defined in the address list.
    DestinationGroupType string
    The destination address book type in the access control policy. Value: ip, domain.
    DestinationType string
    Access control over VPC firewalls strategy in the destination address of the type.
    HitTimes int
    Control strategy of hits per second.
    Id string
    The ID of the Cloud Firewall Vpc Firewall Control Policy.
    MemberUid string
    The UID of the member account of the current Alibaba cloud account.
    Order int
    Access control over VPC firewalls policies will go into effect of priority. The priority value starts from 1, the smaller the priority number, the higher the priority. -1 represents the lowest priority.
    Proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    Release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    Source string
    Access control over VPC firewalls strategy in the source address.
    SourceGroupCidrs List<string>
    SOURCE address of the address list.
    SourceGroupType string
    The source address type in the access control policy. Unique value: ip. The IP address book contains one or more IP address segments.
    SourceType string
    Access control over VPC firewalls policy source address type.
    VpcFirewallId string
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    AclAction string
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    AclUuid string
    Access control over VPC firewalls strategy unique identifier.
    ApplicationId string
    Policy specifies the application ID.
    ApplicationName string
    Access control over VPC firewalls policies support the application types.
    Description string
    Access control over VPC firewalls description of the strategy information.
    DestPort string
    Access control over VPC firewalls strategy access traffic of the destination port.
    DestPortGroup string
    Access control policy in the access traffic of the destination port address book name.
    DestPortGroupPorts []string
    Port Address Book port list.
    DestPortType string
    Access control over VPC firewalls strategy access traffic of the destination port type.
    Destination string
    Access control over VPC firewalls strategy the destination address in.
    DestinationGroupCidrs []string
    Destination address book defined in the address list.
    DestinationGroupType string
    The destination address book type in the access control policy. Value: ip, domain.
    DestinationType string
    Access control over VPC firewalls strategy in the destination address of the type.
    HitTimes int
    Control strategy of hits per second.
    Id string
    The ID of the Cloud Firewall Vpc Firewall Control Policy.
    MemberUid string
    The UID of the member account of the current Alibaba cloud account.
    Order int
    Access control over VPC firewalls policies will go into effect of priority. The priority value starts from 1, the smaller the priority number, the higher the priority. -1 represents the lowest priority.
    Proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    Release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    Source string
    Access control over VPC firewalls strategy in the source address.
    SourceGroupCidrs []string
    SOURCE address of the address list.
    SourceGroupType string
    The source address type in the access control policy. Unique value: ip. The IP address book contains one or more IP address segments.
    SourceType string
    Access control over VPC firewalls policy source address type.
    VpcFirewallId string
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    aclAction String
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    aclUuid String
    Access control over VPC firewalls strategy unique identifier.
    applicationId String
    Policy specifies the application ID.
    applicationName String
    Access control over VPC firewalls policies support the application types.
    description String
    Access control over VPC firewalls description of the strategy information.
    destPort String
    Access control over VPC firewalls strategy access traffic of the destination port.
    destPortGroup String
    Access control policy in the access traffic of the destination port address book name.
    destPortGroupPorts List<String>
    Port Address Book port list.
    destPortType String
    Access control over VPC firewalls strategy access traffic of the destination port type.
    destination String
    Access control over VPC firewalls strategy the destination address in.
    destinationGroupCidrs List<String>
    Destination address book defined in the address list.
    destinationGroupType String
    The destination address book type in the access control policy. Value: ip, domain.
    destinationType String
    Access control over VPC firewalls strategy in the destination address of the type.
    hitTimes Integer
    Control strategy of hits per second.
    id String
    The ID of the Cloud Firewall Vpc Firewall Control Policy.
    memberUid String
    The UID of the member account of the current Alibaba cloud account.
    order Integer
    Access control over VPC firewalls policies will go into effect of priority. The priority value starts from 1, the smaller the priority number, the higher the priority. -1 represents the lowest priority.
    proto String
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release Boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source String
    Access control over VPC firewalls strategy in the source address.
    sourceGroupCidrs List<String>
    SOURCE address of the address list.
    sourceGroupType String
    The source address type in the access control policy. Unique value: ip. The IP address book contains one or more IP address segments.
    sourceType String
    Access control over VPC firewalls policy source address type.
    vpcFirewallId String
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    aclAction string
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    aclUuid string
    Access control over VPC firewalls strategy unique identifier.
    applicationId string
    Policy specifies the application ID.
    applicationName string
    Access control over VPC firewalls policies support the application types.
    description string
    Access control over VPC firewalls description of the strategy information.
    destPort string
    Access control over VPC firewalls strategy access traffic of the destination port.
    destPortGroup string
    Access control policy in the access traffic of the destination port address book name.
    destPortGroupPorts string[]
    Port Address Book port list.
    destPortType string
    Access control over VPC firewalls strategy access traffic of the destination port type.
    destination string
    Access control over VPC firewalls strategy the destination address in.
    destinationGroupCidrs string[]
    Destination address book defined in the address list.
    destinationGroupType string
    The destination address book type in the access control policy. Value: ip, domain.
    destinationType string
    Access control over VPC firewalls strategy in the destination address of the type.
    hitTimes number
    Control strategy of hits per second.
    id string
    The ID of the Cloud Firewall Vpc Firewall Control Policy.
    memberUid string
    The UID of the member account of the current Alibaba cloud account.
    order number
    Access control over VPC firewalls policies will go into effect of priority. The priority value starts from 1, the smaller the priority number, the higher the priority. -1 represents the lowest priority.
    proto string
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source string
    Access control over VPC firewalls strategy in the source address.
    sourceGroupCidrs string[]
    SOURCE address of the address list.
    sourceGroupType string
    The source address type in the access control policy. Unique value: ip. The IP address book contains one or more IP address segments.
    sourceType string
    Access control over VPC firewalls policy source address type.
    vpcFirewallId string
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    acl_action str
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    acl_uuid str
    Access control over VPC firewalls strategy unique identifier.
    application_id str
    Policy specifies the application ID.
    application_name str
    Access control over VPC firewalls policies support the application types.
    description str
    Access control over VPC firewalls description of the strategy information.
    dest_port str
    Access control over VPC firewalls strategy access traffic of the destination port.
    dest_port_group str
    Access control policy in the access traffic of the destination port address book name.
    dest_port_group_ports Sequence[str]
    Port Address Book port list.
    dest_port_type str
    Access control over VPC firewalls strategy access traffic of the destination port type.
    destination str
    Access control over VPC firewalls strategy the destination address in.
    destination_group_cidrs Sequence[str]
    Destination address book defined in the address list.
    destination_group_type str
    The destination address book type in the access control policy. Value: ip, domain.
    destination_type str
    Access control over VPC firewalls strategy in the destination address of the type.
    hit_times int
    Control strategy of hits per second.
    id str
    The ID of the Cloud Firewall Vpc Firewall Control Policy.
    member_uid str
    The UID of the member account of the current Alibaba cloud account.
    order int
    Access control over VPC firewalls policies will go into effect of priority. The priority value starts from 1, the smaller the priority number, the higher the priority. -1 represents the lowest priority.
    proto str
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release bool
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source str
    Access control over VPC firewalls strategy in the source address.
    source_group_cidrs Sequence[str]
    SOURCE address of the address list.
    source_group_type str
    The source address type in the access control policy. Unique value: ip. The IP address book contains one or more IP address segments.
    source_type str
    Access control over VPC firewalls policy source address type.
    vpc_firewall_id str
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.
    aclAction String
    The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.
    aclUuid String
    Access control over VPC firewalls strategy unique identifier.
    applicationId String
    Policy specifies the application ID.
    applicationName String
    Access control over VPC firewalls policies support the application types.
    description String
    Access control over VPC firewalls description of the strategy information.
    destPort String
    Access control over VPC firewalls strategy access traffic of the destination port.
    destPortGroup String
    Access control policy in the access traffic of the destination port address book name.
    destPortGroupPorts List<String>
    Port Address Book port list.
    destPortType String
    Access control over VPC firewalls strategy access traffic of the destination port type.
    destination String
    Access control over VPC firewalls strategy the destination address in.
    destinationGroupCidrs List<String>
    Destination address book defined in the address list.
    destinationGroupType String
    The destination address book type in the access control policy. Value: ip, domain.
    destinationType String
    Access control over VPC firewalls strategy in the destination address of the type.
    hitTimes Number
    Control strategy of hits per second.
    id String
    The ID of the Cloud Firewall Vpc Firewall Control Policy.
    memberUid String
    The UID of the member account of the current Alibaba cloud account.
    order Number
    Access control over VPC firewalls policies will go into effect of priority. The priority value starts from 1, the smaller the priority number, the higher the priority. -1 represents the lowest priority.
    proto String
    Access control over VPC firewalls strategy access traffic of the protocol type.
    release Boolean
    The enabled status of the access control policy. The policy is enabled by default after it is created. Value:

    • true: Enable access control policies
    • false: does not enable access control policies.
    source String
    Access control over VPC firewalls strategy in the source address.
    sourceGroupCidrs List<String>
    SOURCE address of the address list.
    sourceGroupType String
    The source address type in the access control policy. Unique value: ip. The IP address book contains one or more IP address segments.
    sourceType String
    Access control over VPC firewalls policy source address type.
    vpcFirewallId String
    The ID of the VPC firewall instance. Value:

    • When the VPC firewall protects traffic between two VPCs connected through the cloud enterprise network, the policy group ID uses the cloud enterprise network instance ID.
    • When the VPC firewall protects traffic between two VPCs connected through the express connection, the policy group ID uses the ID of the VPC firewall instance.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the alicloud Terraform Provider.
    alicloud logo
    Alibaba Cloud v3.88.1 published on Saturday, Nov 8, 2025 by Pulumi
    Schema (JSON)
    pulumi/pulumi-alicloud
      Meet Neo: Your AI Platform Teammate