Cloud Firewall:ModifyNatFirewallControlPolicy

The language of the request and response. Valid values:

• zh (default): Chinese.

• en: English.

The action that is performed on traffic that hits the access control policy. Valid values:

• accept: allows the traffic.

• drop: denies the traffic.

• log: monitors the traffic.

The description of the access control policy. Fuzzy query is supported.

The destination port for traffic in the access control policy.

The destination address in the access control policy.

• If DestinationType is `net`, set Destination to a destination CIDR block. Example: 1.2.3.4/24

• If DestinationType is `group`, set Destination to the name of a destination address book. Example: db_group

• If DestinationType is `domain`, set Destination to a destination domain name. Example: *.aliyuncs.com

• If DestinationType is `location`, set Destination to a destination region. Example: ["BJ11", "ZB"]

The type of the destination address in the access control policy. Valid values:

• net: CIDR block

• group: address book

• domain: domain name

• location: region

The ID of the NAT Gateway.

The protocol type for traffic that the access control policy applies to. Valid values:

• ANY

• TCP

• UDP

• ICMP

The source address in the access control policy. Valid values:

• If SourceType is net, set Source to a source CIDR block. Example: 10.2.XX.XX/24

• If SourceType is group, set Source to the name of a source address book. Example: db_group.

The unique ID of the access control policy.

To modify an access control policy, provide its unique ID. Call the DescribeNatFirewallControlPolicy operation to obtain the ID.

The traffic direction of the access control policy. Valid values:

• out: outbound traffic.

The type of the source address in the access control policy. Valid values:

• net: source CIDR block

• group: source address book

The type of the destination port for traffic in the access control policy.

• port: port

• group: port address book

The name of the destination port address book for traffic in the access control policy.

The status of the access control policy. Valid values:

• true: The policy is enabled.

• false: The policy is disabled.

The domain name resolution method of the access control policy. Valid values:

• 0: FQDN-based

• 1: dynamic DNS-based

• 2: FQDN- and dynamic DNS-based

The recurrence type for the policy validity period. Valid values:

• Permanent (default): The policy is always valid.

• None: The policy is valid for a specific period.

• Daily: The policy is valid daily.

• Weekly: The policy is valid weekly.

• Monthly: The policy is valid monthly.

The start time of the recurrence. For example: 08:00. The time must be on the hour or half-hour, and at least 30 minutes earlier than the end time.

The end time of the recurrence. For example: 23:30. The time must be on the hour or half-hour, and at least 30 minutes later than the start time.

The start time of the policy validity period. This is a UNIX timestamp. The time must be on the hour or half-hour, and at least 30 minutes earlier than the end time.

The end time of the policy validity period. This is a UNIX timestamp. The time must be on the hour or half-hour, and at least 30 minutes later than the start time.