All Products
Search
Document Center

Cloud Firewall:Add a member account to Cloud Firewall

Last Updated:Sep 18, 2025

This topic describes how to use Terraform to add a member account to Cloud Firewall.

Usage notes

Prerequisites

  • An Alibaba Cloud account and an AccessKey pair have been created. For more information, see Create an AccessKey pair.

  • Terraform is installed and configured.

Add a member account to Cloud Firewall

  1. In your Terraform working directory, add the following content to the terraform.tf file.

    The following code shows an example:

    provider "alicloud" {
      version = "~> 1.203.0"
    }
    
    resource "alicloud_cloud_firewall_instance_member" "default" {
      member_desc = "Added memberUid by Terraform"
      member_uid  = 180998553943****
    }

  1. Run terraform init to initialize the environment.

    The following code shows an example:

    Initializing the backend...
    
    Initializing provider plugins...
    - Checking for available provider plugins...
    - Downloading plugin for provider "alicloud" (hashicorp/alicloud) 1.203.0...
    
    
    Warning: registry.terraform.io: For users on Terraform 0.13 or greater, this provider has moved to aliyun/alicloud. Please update your source in required_providers.
    
    
    Terraform has been successfully initialized!
    
    You may now begin working with Terraform. Try running "terraform plan" to see
    any changes that are required for your infrastructure. All Terraform commands
    should now work.
    
    If you ever set or change modules or backend configuration for Terraform,
    rerun this command to reinitialize your working directory. If you forget, other
    commands will detect it and remind you to do so if necessary.

  1. Run terraform apply. After the configuration information is displayed, review the configuration and enter yes to apply the changes.

    The following code shows an example:

    Terraform will perform the following actions:
    
      # alicloud_cloud_firewall_instance_member.default will be created
      + resource "alicloud_cloud_firewall_instance_member" "default" {
          + create_time         = (known after apply)
          + id                  = (known after apply)
          + member_desc         = "Added memberUid by Terraform"
          + member_display_name = (known after apply)
          + member_uid          = "180998553943****"
          + modify_time         = (known after apply)
          + status              = (known after apply)
        }
    
    Plan: 1 to add, 0 to change, 0 to destroy.
    
    Do you want to perform these actions?
      Terraform will perform the actions described above.
      Only 'yes' will be accepted to approve.
    
      Enter a value: yes
    
    alicloud_cloud_firewall_instance_member.default: Creating...
    alicloud_cloud_firewall_instance_member.default: Creation complete after 9s [id=180998553943****]
    
    Apply complete! Resources: 1 added, 0 changed, 0 destroyed.

    After the member account is created, an ID similar to 180998553943**** is returned.

  2. View the results.

    • Run terraform show to view the details of the Cloud Firewall member account.

      # alicloud_cloud_firewall_instance_member.default:
      resource "alicloud_cloud_firewall_instance_member" "default" {
          create_time         = 1681899524
          id                  = "180998553943****"
          member_desc         = "Added memberUid by Terraform"
          member_display_name = "beaver_qa3"
          member_uid          = "180998553943****"
          modify_time         = 1681899524
          status              = "normal"
      }
    • Log on to the Cloud Firewall console. On the System Settings > Multi-account Management page, you can view the details of the Cloud Firewall member account.