Overview

Set up Terraform

Choose the environment that fits your workflow:

• Use Terraform in Cloud Shell

• Install and configure Terraform on a local machine — Install Terraform locally and configure provider credentials for use in your own environment or CI/CD pipelines.

Common operations

• Activate Cloud Firewall — Subscribe to Cloud Firewall and enable protection for your account before configuring any policies.

• Create an access control policy for the Internet firewall — Define allow or deny rules for inbound and outbound internet traffic based on IP addresses, domains, or application protocols.

• Change the priority of an access control policy for the Internet firewall — Adjust the evaluation order of existing Internet firewall policies when rule conflicts arise.

• Create an address book — Group IP addresses, ports, or domains into a reusable address book that you can reference across multiple access control policies.

• Create a VPC firewall for traffic between a VPC and a CEN network instance — Protect east-west traffic between a VPC and a network instance attached to a Basic Edition transit router of a Cloud Enterprise Network (CEN) instance.

• Create a VPC firewall for traffic between two VPCs over Express Connect — Protect traffic between two VPCs connected by an Express Connect circuit.

• Create an access control policy for a VPC firewall policy group — Add traffic control rules to a specific policy group within a VPC firewall.

• Add a member to Cloud Firewall — Extend Cloud Firewall protection to a member account in a multi-account setup.