published on Friday, Jun 19, 2026 by tencentcloudstack
published on Friday, Jun 19, 2026 by tencentcloudstack
Provides a resource to manage CFW (Cloud Firewall) cluster firewall bypass configuration.
Example Usage
VPC_FW type
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.CfwClusterFwBypassConfig("example", {
fwType: "VPC_FW",
ccnId: "ccn-p3mlp0tj",
enable: false,
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.CfwClusterFwBypassConfig("example",
fw_type="VPC_FW",
ccn_id="ccn-p3mlp0tj",
enable=False)
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewCfwClusterFwBypassConfig(ctx, "example", &tencentcloud.CfwClusterFwBypassConfigArgs{
FwType: pulumi.String("VPC_FW"),
CcnId: pulumi.String("ccn-p3mlp0tj"),
Enable: pulumi.Bool(false),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.CfwClusterFwBypassConfig("example", new()
{
FwType = "VPC_FW",
CcnId = "ccn-p3mlp0tj",
Enable = false,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.CfwClusterFwBypassConfig;
import com.pulumi.tencentcloud.CfwClusterFwBypassConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new CfwClusterFwBypassConfig("example", CfwClusterFwBypassConfigArgs.builder()
.fwType("VPC_FW")
.ccnId("ccn-p3mlp0tj")
.enable(false)
.build());
}
}
resources:
example:
type: tencentcloud:CfwClusterFwBypassConfig
properties:
fwType: VPC_FW
ccnId: ccn-p3mlp0tj
enable: false
Example coming soon!
NAT_FW type
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.CfwClusterFwBypassConfig("example", {
fwType: "NAT_FW",
ccnId: "ccn-p3mlp0tj",
natInsId: "nat-h1i1mf4n",
enable: true,
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.CfwClusterFwBypassConfig("example",
fw_type="NAT_FW",
ccn_id="ccn-p3mlp0tj",
nat_ins_id="nat-h1i1mf4n",
enable=True)
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewCfwClusterFwBypassConfig(ctx, "example", &tencentcloud.CfwClusterFwBypassConfigArgs{
FwType: pulumi.String("NAT_FW"),
CcnId: pulumi.String("ccn-p3mlp0tj"),
NatInsId: pulumi.String("nat-h1i1mf4n"),
Enable: pulumi.Bool(true),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.CfwClusterFwBypassConfig("example", new()
{
FwType = "NAT_FW",
CcnId = "ccn-p3mlp0tj",
NatInsId = "nat-h1i1mf4n",
Enable = true,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.CfwClusterFwBypassConfig;
import com.pulumi.tencentcloud.CfwClusterFwBypassConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new CfwClusterFwBypassConfig("example", CfwClusterFwBypassConfigArgs.builder()
.fwType("NAT_FW")
.ccnId("ccn-p3mlp0tj")
.natInsId("nat-h1i1mf4n")
.enable(true)
.build());
}
}
resources:
example:
type: tencentcloud:CfwClusterFwBypassConfig
properties:
fwType: NAT_FW
ccnId: ccn-p3mlp0tj
natInsId: nat-h1i1mf4n
enable: true
Example coming soon!
Create CfwClusterFwBypassConfig Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new CfwClusterFwBypassConfig(name: string, args: CfwClusterFwBypassConfigArgs, opts?: CustomResourceOptions);@overload
def CfwClusterFwBypassConfig(resource_name: str,
args: CfwClusterFwBypassConfigArgs,
opts: Optional[ResourceOptions] = None)
@overload
def CfwClusterFwBypassConfig(resource_name: str,
opts: Optional[ResourceOptions] = None,
ccn_id: Optional[str] = None,
enable: Optional[bool] = None,
fw_type: Optional[str] = None,
cfw_cluster_fw_bypass_config_id: Optional[str] = None,
nat_ins_id: Optional[str] = None)func NewCfwClusterFwBypassConfig(ctx *Context, name string, args CfwClusterFwBypassConfigArgs, opts ...ResourceOption) (*CfwClusterFwBypassConfig, error)public CfwClusterFwBypassConfig(string name, CfwClusterFwBypassConfigArgs args, CustomResourceOptions? opts = null)
public CfwClusterFwBypassConfig(String name, CfwClusterFwBypassConfigArgs args)
public CfwClusterFwBypassConfig(String name, CfwClusterFwBypassConfigArgs args, CustomResourceOptions options)
type: tencentcloud:CfwClusterFwBypassConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "tencentcloud_cfwclusterfwbypassconfig" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args CfwClusterFwBypassConfigArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CfwClusterFwBypassConfigArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CfwClusterFwBypassConfigArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CfwClusterFwBypassConfigArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CfwClusterFwBypassConfigArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
CfwClusterFwBypassConfig Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The CfwClusterFwBypassConfig resource accepts the following input properties:
- Ccn
Id string - CCN instance ID.
- Enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - Fw
Type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - Cfw
Cluster stringFw Bypass Config Id - ID of the resource.
- Nat
Ins stringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- Ccn
Id string - CCN instance ID.
- Enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - Fw
Type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - Cfw
Cluster stringFw Bypass Config Id - ID of the resource.
- Nat
Ins stringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn_
id string - CCN instance ID.
- enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw_
type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - cfw_
cluster_ stringfw_ bypass_ config_ id - ID of the resource.
- nat_
ins_ stringid - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn
Id String - CCN instance ID.
- enable Boolean
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw
Type String - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - cfw
Cluster StringFw Bypass Config Id - ID of the resource.
- nat
Ins StringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn
Id string - CCN instance ID.
- enable boolean
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw
Type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - cfw
Cluster stringFw Bypass Config Id - ID of the resource.
- nat
Ins stringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn_
id str - CCN instance ID.
- enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw_
type str - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - cfw_
cluster_ strfw_ bypass_ config_ id - ID of the resource.
- nat_
ins_ strid - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn
Id String - CCN instance ID.
- enable Boolean
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw
Type String - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - cfw
Cluster StringFw Bypass Config Id - ID of the resource.
- nat
Ins StringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
Outputs
All input properties are implicitly available as output properties. Additionally, the CfwClusterFwBypassConfig resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing CfwClusterFwBypassConfig Resource
Get an existing CfwClusterFwBypassConfig resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CfwClusterFwBypassConfigState, opts?: CustomResourceOptions): CfwClusterFwBypassConfig@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
ccn_id: Optional[str] = None,
cfw_cluster_fw_bypass_config_id: Optional[str] = None,
enable: Optional[bool] = None,
fw_type: Optional[str] = None,
nat_ins_id: Optional[str] = None) -> CfwClusterFwBypassConfigfunc GetCfwClusterFwBypassConfig(ctx *Context, name string, id IDInput, state *CfwClusterFwBypassConfigState, opts ...ResourceOption) (*CfwClusterFwBypassConfig, error)public static CfwClusterFwBypassConfig Get(string name, Input<string> id, CfwClusterFwBypassConfigState? state, CustomResourceOptions? opts = null)public static CfwClusterFwBypassConfig get(String name, Output<String> id, CfwClusterFwBypassConfigState state, CustomResourceOptions options)resources: _: type: tencentcloud:CfwClusterFwBypassConfig get: id: ${id}import {
to = tencentcloud_cfwclusterfwbypassconfig.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Ccn
Id string - CCN instance ID.
- Cfw
Cluster stringFw Bypass Config Id - ID of the resource.
- Enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - Fw
Type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - Nat
Ins stringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- Ccn
Id string - CCN instance ID.
- Cfw
Cluster stringFw Bypass Config Id - ID of the resource.
- Enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - Fw
Type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - Nat
Ins stringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn_
id string - CCN instance ID.
- cfw_
cluster_ stringfw_ bypass_ config_ id - ID of the resource.
- enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw_
type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - nat_
ins_ stringid - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn
Id String - CCN instance ID.
- cfw
Cluster StringFw Bypass Config Id - ID of the resource.
- enable Boolean
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw
Type String - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - nat
Ins StringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn
Id string - CCN instance ID.
- cfw
Cluster stringFw Bypass Config Id - ID of the resource.
- enable boolean
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw
Type string - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - nat
Ins stringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn_
id str - CCN instance ID.
- cfw_
cluster_ strfw_ bypass_ config_ id - ID of the resource.
- enable bool
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw_
type str - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - nat_
ins_ strid - NAT firewall instance ID. Required when fw_type is
NAT_FW.
- ccn
Id String - CCN instance ID.
- cfw
Cluster StringFw Bypass Config Id - ID of the resource.
- enable Boolean
- Bypass switch.
true- enable Bypass (traffic bypasses firewall),false- disable Bypass (traffic goes through firewall). - fw
Type String - Firewall type.
VPC_FW- VPC firewall,NAT_FW- NAT firewall. - nat
Ins StringId - NAT firewall instance ID. Required when fw_type is
NAT_FW.
Import
CFW cluster firewall bypass config can be imported using the composite ID.
For VPC_FW type, the format is {fw_type}#{ccn_id}:
$ pulumi import tencentcloud:index/cfwClusterFwBypassConfig:CfwClusterFwBypassConfig example VPC_FW#ccn-p3mlp0tj
For NAT_FW type, the format is {fw_type}#{nat_ins_id},{ccn_id}:
$ pulumi import tencentcloud:index/cfwClusterFwBypassConfig:CfwClusterFwBypassConfig example NAT_FW#nat-h1i1mf4n,ccn-p3mlp0tj
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloudTerraform Provider.
published on Friday, Jun 19, 2026 by tencentcloudstack