alicloud.vpc.TrafficMirrorFilterEgressRule
Explore with Pulumi AI
Provides a VPC Traffic Mirror Filter Egress Rule resource.
For information about VPC Traffic Mirror Filter Egress Rule and how to use it, see What is Traffic Mirror Filter Egress Rule.
NOTE: Available since v1.140.0.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const example = new alicloud.vpc.TrafficMirrorFilter("example", {trafficMirrorFilterName: "example_value"});
const _default = new alicloud.vpc.TrafficMirrorFilterEgressRule("default", {
action: "drop",
priority: 2,
sourceCidrBlock: "10.0.0.0/11",
destinationCidrBlock: "10.0.0.0/12",
trafficMirrorFilterId: example.id,
protocol: "ALL",
});
import pulumi
import pulumi_alicloud as alicloud
example = alicloud.vpc.TrafficMirrorFilter("example", traffic_mirror_filter_name="example_value")
default = alicloud.vpc.TrafficMirrorFilterEgressRule("default",
action="drop",
priority=2,
source_cidr_block="10.0.0.0/11",
destination_cidr_block="10.0.0.0/12",
traffic_mirror_filter_id=example.id,
protocol="ALL")
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpc"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := vpc.NewTrafficMirrorFilter(ctx, "example", &vpc.TrafficMirrorFilterArgs{
TrafficMirrorFilterName: pulumi.String("example_value"),
})
if err != nil {
return err
}
_, err = vpc.NewTrafficMirrorFilterEgressRule(ctx, "default", &vpc.TrafficMirrorFilterEgressRuleArgs{
Action: pulumi.String("drop"),
Priority: pulumi.Int(2),
SourceCidrBlock: pulumi.String("10.0.0.0/11"),
DestinationCidrBlock: pulumi.String("10.0.0.0/12"),
TrafficMirrorFilterId: example.ID(),
Protocol: pulumi.String("ALL"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var example = new AliCloud.Vpc.TrafficMirrorFilter("example", new()
{
TrafficMirrorFilterName = "example_value",
});
var @default = new AliCloud.Vpc.TrafficMirrorFilterEgressRule("default", new()
{
Action = "drop",
Priority = 2,
SourceCidrBlock = "10.0.0.0/11",
DestinationCidrBlock = "10.0.0.0/12",
TrafficMirrorFilterId = example.Id,
Protocol = "ALL",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.vpc.TrafficMirrorFilter;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterArgs;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterEgressRule;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterEgressRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new TrafficMirrorFilter("example", TrafficMirrorFilterArgs.builder()
.trafficMirrorFilterName("example_value")
.build());
var default_ = new TrafficMirrorFilterEgressRule("default", TrafficMirrorFilterEgressRuleArgs.builder()
.action("drop")
.priority("2")
.sourceCidrBlock("10.0.0.0/11")
.destinationCidrBlock("10.0.0.0/12")
.trafficMirrorFilterId(example.id())
.protocol("ALL")
.build());
}
}
resources:
example:
type: alicloud:vpc:TrafficMirrorFilter
properties:
trafficMirrorFilterName: example_value
default:
type: alicloud:vpc:TrafficMirrorFilterEgressRule
properties:
action: drop
priority: '2'
sourceCidrBlock: 10.0.0.0/11
destinationCidrBlock: 10.0.0.0/12
trafficMirrorFilterId: ${example.id}
protocol: ALL
Create TrafficMirrorFilterEgressRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new TrafficMirrorFilterEgressRule(name: string, args: TrafficMirrorFilterEgressRuleArgs, opts?: CustomResourceOptions);
@overload
def TrafficMirrorFilterEgressRule(resource_name: str,
args: TrafficMirrorFilterEgressRuleInitArgs,
opts: Optional[ResourceOptions] = None)
@overload
def TrafficMirrorFilterEgressRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
destination_cidr_block: Optional[str] = None,
priority: Optional[int] = None,
protocol: Optional[str] = None,
source_cidr_block: Optional[str] = None,
traffic_mirror_filter_id: Optional[str] = None,
action: Optional[str] = None,
destination_port_range: Optional[str] = None,
dry_run: Optional[bool] = None,
rule_action: Optional[str] = None,
source_port_range: Optional[str] = None)
func NewTrafficMirrorFilterEgressRule(ctx *Context, name string, args TrafficMirrorFilterEgressRuleArgs, opts ...ResourceOption) (*TrafficMirrorFilterEgressRule, error)
public TrafficMirrorFilterEgressRule(string name, TrafficMirrorFilterEgressRuleArgs args, CustomResourceOptions? opts = null)
public TrafficMirrorFilterEgressRule(String name, TrafficMirrorFilterEgressRuleArgs args)
public TrafficMirrorFilterEgressRule(String name, TrafficMirrorFilterEgressRuleArgs args, CustomResourceOptions options)
type: alicloud:vpc:TrafficMirrorFilterEgressRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args TrafficMirrorFilterEgressRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args TrafficMirrorFilterEgressRuleInitArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args TrafficMirrorFilterEgressRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args TrafficMirrorFilterEgressRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args TrafficMirrorFilterEgressRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var trafficMirrorFilterEgressRuleResource = new AliCloud.Vpc.TrafficMirrorFilterEgressRule("trafficMirrorFilterEgressRuleResource", new()
{
DestinationCidrBlock = "string",
Priority = 0,
Protocol = "string",
SourceCidrBlock = "string",
TrafficMirrorFilterId = "string",
Action = "string",
DestinationPortRange = "string",
DryRun = false,
SourcePortRange = "string",
});
example, err := vpc.NewTrafficMirrorFilterEgressRule(ctx, "trafficMirrorFilterEgressRuleResource", &vpc.TrafficMirrorFilterEgressRuleArgs{
DestinationCidrBlock: pulumi.String("string"),
Priority: pulumi.Int(0),
Protocol: pulumi.String("string"),
SourceCidrBlock: pulumi.String("string"),
TrafficMirrorFilterId: pulumi.String("string"),
Action: pulumi.String("string"),
DestinationPortRange: pulumi.String("string"),
DryRun: pulumi.Bool(false),
SourcePortRange: pulumi.String("string"),
})
var trafficMirrorFilterEgressRuleResource = new TrafficMirrorFilterEgressRule("trafficMirrorFilterEgressRuleResource", TrafficMirrorFilterEgressRuleArgs.builder()
.destinationCidrBlock("string")
.priority(0)
.protocol("string")
.sourceCidrBlock("string")
.trafficMirrorFilterId("string")
.action("string")
.destinationPortRange("string")
.dryRun(false)
.sourcePortRange("string")
.build());
traffic_mirror_filter_egress_rule_resource = alicloud.vpc.TrafficMirrorFilterEgressRule("trafficMirrorFilterEgressRuleResource",
destination_cidr_block="string",
priority=0,
protocol="string",
source_cidr_block="string",
traffic_mirror_filter_id="string",
action="string",
destination_port_range="string",
dry_run=False,
source_port_range="string")
const trafficMirrorFilterEgressRuleResource = new alicloud.vpc.TrafficMirrorFilterEgressRule("trafficMirrorFilterEgressRuleResource", {
destinationCidrBlock: "string",
priority: 0,
protocol: "string",
sourceCidrBlock: "string",
trafficMirrorFilterId: "string",
action: "string",
destinationPortRange: "string",
dryRun: false,
sourcePortRange: "string",
});
type: alicloud:vpc:TrafficMirrorFilterEgressRule
properties:
action: string
destinationCidrBlock: string
destinationPortRange: string
dryRun: false
priority: 0
protocol: string
sourceCidrBlock: string
sourcePortRange: string
trafficMirrorFilterId: string
TrafficMirrorFilterEgressRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The TrafficMirrorFilterEgressRule resource accepts the following input properties:
- Destination
Cidr stringBlock - The destination CIDR block of the outbound traffic.
- Priority int
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - Protocol string
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - Source
Cidr stringBlock - The source CIDR block of the outbound traffic.
- Traffic
Mirror stringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- Action string
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - Destination
Port stringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - Dry
Run bool - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- Rule
Action string - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- Source
Port stringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- Destination
Cidr stringBlock - The destination CIDR block of the outbound traffic.
- Priority int
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - Protocol string
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - Source
Cidr stringBlock - The source CIDR block of the outbound traffic.
- Traffic
Mirror stringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- Action string
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - Destination
Port stringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - Dry
Run bool - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- Rule
Action string - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- Source
Port stringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination
Cidr StringBlock - The destination CIDR block of the outbound traffic.
- priority Integer
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol String
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - source
Cidr StringBlock - The source CIDR block of the outbound traffic.
- traffic
Mirror StringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action String
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination
Port StringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry
Run Boolean - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- rule
Action String - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source
Port StringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination
Cidr stringBlock - The destination CIDR block of the outbound traffic.
- priority number
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol string
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - source
Cidr stringBlock - The source CIDR block of the outbound traffic.
- traffic
Mirror stringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action string
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination
Port stringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry
Run boolean - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- rule
Action string - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source
Port stringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination_
cidr_ strblock - The destination CIDR block of the outbound traffic.
- priority int
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol str
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - source_
cidr_ strblock - The source CIDR block of the outbound traffic.
- traffic_
mirror_ strfilter_ id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action str
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination_
port_ strrange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry_
run bool - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- rule_
action str - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source_
port_ strrange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination
Cidr StringBlock - The destination CIDR block of the outbound traffic.
- priority Number
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol String
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - source
Cidr StringBlock - The source CIDR block of the outbound traffic.
- traffic
Mirror StringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action String
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination
Port StringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry
Run Boolean - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- rule
Action String - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source
Port StringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
Outputs
All input properties are implicitly available as output properties. Additionally, the TrafficMirrorFilterEgressRule resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Status string
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - Traffic
Mirror stringFilter Egress Rule Id - The ID of the outbound rule.
- Id string
- The provider-assigned unique ID for this managed resource.
- Status string
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - Traffic
Mirror stringFilter Egress Rule Id - The ID of the outbound rule.
- id String
- The provider-assigned unique ID for this managed resource.
- status String
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic
Mirror StringFilter Egress Rule Id - The ID of the outbound rule.
- id string
- The provider-assigned unique ID for this managed resource.
- status string
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic
Mirror stringFilter Egress Rule Id - The ID of the outbound rule.
- id str
- The provider-assigned unique ID for this managed resource.
- status str
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic_
mirror_ strfilter_ egress_ rule_ id - The ID of the outbound rule.
- id String
- The provider-assigned unique ID for this managed resource.
- status String
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic
Mirror StringFilter Egress Rule Id - The ID of the outbound rule.
Look up Existing TrafficMirrorFilterEgressRule Resource
Get an existing TrafficMirrorFilterEgressRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: TrafficMirrorFilterEgressRuleState, opts?: CustomResourceOptions): TrafficMirrorFilterEgressRule
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
action: Optional[str] = None,
destination_cidr_block: Optional[str] = None,
destination_port_range: Optional[str] = None,
dry_run: Optional[bool] = None,
priority: Optional[int] = None,
protocol: Optional[str] = None,
rule_action: Optional[str] = None,
source_cidr_block: Optional[str] = None,
source_port_range: Optional[str] = None,
status: Optional[str] = None,
traffic_mirror_filter_egress_rule_id: Optional[str] = None,
traffic_mirror_filter_id: Optional[str] = None) -> TrafficMirrorFilterEgressRule
func GetTrafficMirrorFilterEgressRule(ctx *Context, name string, id IDInput, state *TrafficMirrorFilterEgressRuleState, opts ...ResourceOption) (*TrafficMirrorFilterEgressRule, error)
public static TrafficMirrorFilterEgressRule Get(string name, Input<string> id, TrafficMirrorFilterEgressRuleState? state, CustomResourceOptions? opts = null)
public static TrafficMirrorFilterEgressRule get(String name, Output<String> id, TrafficMirrorFilterEgressRuleState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Action string
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - Destination
Cidr stringBlock - The destination CIDR block of the outbound traffic.
- Destination
Port stringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - Dry
Run bool - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- Priority int
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - Protocol string
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - Rule
Action string - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- Source
Cidr stringBlock - The source CIDR block of the outbound traffic.
- Source
Port stringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - Status string
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - Traffic
Mirror stringFilter Egress Rule Id - The ID of the outbound rule.
- Traffic
Mirror stringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- Action string
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - Destination
Cidr stringBlock - The destination CIDR block of the outbound traffic.
- Destination
Port stringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - Dry
Run bool - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- Priority int
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - Protocol string
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - Rule
Action string - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- Source
Cidr stringBlock - The source CIDR block of the outbound traffic.
- Source
Port stringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - Status string
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - Traffic
Mirror stringFilter Egress Rule Id - The ID of the outbound rule.
- Traffic
Mirror stringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action String
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination
Cidr StringBlock - The destination CIDR block of the outbound traffic.
- destination
Port StringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry
Run Boolean - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- priority Integer
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol String
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - rule
Action String - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source
Cidr StringBlock - The source CIDR block of the outbound traffic.
- source
Port StringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - status String
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic
Mirror StringFilter Egress Rule Id - The ID of the outbound rule.
- traffic
Mirror StringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action string
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination
Cidr stringBlock - The destination CIDR block of the outbound traffic.
- destination
Port stringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry
Run boolean - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- priority number
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol string
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - rule
Action string - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source
Cidr stringBlock - The source CIDR block of the outbound traffic.
- source
Port stringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - status string
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic
Mirror stringFilter Egress Rule Id - The ID of the outbound rule.
- traffic
Mirror stringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action str
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination_
cidr_ strblock - The destination CIDR block of the outbound traffic.
- destination_
port_ strrange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry_
run bool - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- priority int
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol str
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - rule_
action str - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source_
cidr_ strblock - The source CIDR block of the outbound traffic.
- source_
port_ strrange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - status str
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic_
mirror_ strfilter_ egress_ rule_ id - The ID of the outbound rule.
- traffic_
mirror_ strfilter_ id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
- action String
- The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic. - destination
Cidr StringBlock - The destination CIDR block of the outbound traffic.
- destination
Port StringRange - The destination CIDR block of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - dry
Run Boolean - Whether to PreCheck this request only. Value:
- true: sends a check request and does not create inbound or outbound rules. Check items include whether required parameters are filled in, request format, and restrictions. If the check fails, the corresponding error is returned. If the check passes, the error code 'DryRunOperation' is returned '.
- false (default): Sends a normal request and directly creates an inbound or outbound direction rule after checking.
- priority Number
- The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter. - protocol String
- The transport protocol used by outbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
. - rule
Action String - . Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.
- source
Cidr StringBlock - The source CIDR block of the outbound traffic.
- source
Port StringRange - The source port range of the outbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid. - status String
- The state of the inbound rule.
Creating
,Created
,Modifying
andDeleting
. - traffic
Mirror StringFilter Egress Rule Id - The ID of the outbound rule.
- traffic
Mirror StringFilter Id The ID of the filter.
The following arguments will be discarded. Please use new fields as soon as possible:
Import
VPC Traffic Mirror Filter Egress Rule can be imported using the id, e.g.
$ pulumi import alicloud:vpc/trafficMirrorFilterEgressRule:TrafficMirrorFilterEgressRule example <traffic_mirror_filter_id>:<traffic_mirror_filter_egress_rule_id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Alibaba Cloud pulumi/pulumi-alicloud
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
alicloud
Terraform Provider.