文档

alicloud_security_group

更新时间:
一键部署

Provides a Security Group resource.

For information about Security Group and how to use it, see What is Security Group.

-> NOTE: Available since v1.0.0.

-> NOTE: alicloud_security_group is used to build and manage a security group, and alicloud_security_group_rule can define ingress or egress rules for it.

-> NOTE: From version 1.7.2, alicloud_security_group has supported to segregate different ECS instance in which the same security group.

Example Usage

Basic Usage

resource "alicloud_security_group" "default" {
  name        = "terraform-example"
  description = "New security group"
}

Basic Usage for VPC

resource "alicloud_vpc" "vpc" {
  vpc_name   = "terraform-example"
  cidr_block = "10.1.0.0/21"
}

resource "alicloud_security_group" "group" {
  name   = "terraform-example"
  vpc_id = alicloud_vpc.vpc.id
}

Module Support

You can use the existing security-group module to create a security group and add several rules one-click.

Argument Reference

The following arguments are supported:

  • vpc_id - (Optional, ForceNew) The ID of the VPC.
  • security_group_type - (Optional, ForceNew, Available since v1.58.0) The type of the security group. Valid values:
  • name - (Optional) The name of the security group. Defaults to null.
  • description - (Optional) The security group description. Defaults to null.
  • resource_group_id - (Optional, Available since v1.58.0) The ID of the resource group to which the security group belongs. NOTE: From version 1.115.0, resource_group_id can be modified.
  • inner_access_policy - (Optional, Available since v1.55.3) The internal access control policy of the security group. Valid values: Accept, Drop.
  • tags - (Optional) A mapping of tags to assign to the resource.
  • inner_access - (Deprecated since v1.55.3) Field inner_access has been deprecated from provider version 1.55.3. New field inner_access_policy instead.

Combining security group rules, the policy can define multiple application scenario. Default to true. It is valid from version 1.7.2.

Attributes Reference

The following attributes are exported:

  • id - The resource ID in terraform of Security Group.

Timeouts

-> NOTE: Available since v1.214.0.

The timeouts block allows you to specify timeouts for certain actions:

  • delete - (Defaults to 6 mins) Used when delete the Security Group.

Import

Security Group can be imported using the id, e.g.

$ terraform import alicloud_security_group.example sg-abc123456

  • 本页导读 (0)