Dear Alibaba Cloud users,
Starting May 8, 2025, Cloud Firewall that uses the pay-as-you-go billing method officially supports additional access control policies. If you use Cloud Firewall that uses the pay-as-you-go billing method, you can configure additional access control policies for the Internet firewall, NAT firewalls, and virtual private cloud (VPC) firewalls based on your business requirements. This helps enterprises and organizations meet the requirements for larger-scale policy configuration.
Scenarios
The following list describes the default quotas for access control policies in Cloud Firewall that uses the pay-as-you-go billing method:
Internet firewall: 2,000
NAT firewalls: 2,000
VPC firewalls: 10,000
For more information, see Quota consumed by access control policies.
If the default quotas do not meet your business requirements, you can configure additional access control policies. Bills are generated based on the number of additional access control policies that you configure.
Billing
Fee of additional access control policies: USD 0.003 per 100 policies-hour.
If the number of configured additional access control policies is less than 100, it is calculated as 100. Bills are generated on an hourly basis and are settled on the next day.
Related operations
You can log on to the Cloud Firewall console and view the usage details on the Quota for Additional Policy tab of the page.
If your default quotas for access control policies in Cloud Firewall that uses the pay-as-you-go billing method are exceeded before May 8, 2025, you can continue to use the policies for free until May 31, 2025. Starting June 1, 2025, you are charged for the additional policies based on the preceding billing rules. We recommend that you check whether your access control policies need to be adjusted.
You can view the billing rules of Cloud Firewall that uses the pay-as-you-go billing method. You can also use pay-as-you-go savings plans to reduce costs.
You can refer to the tutorials in Best practices for access control to improve configuration efficiency and security.
If you have any questions, submit a ticket for technical support.