pulumi-alicloud 3.53.0a1713354491__py3-none-any.whl → 3.73.0a1736850863__py3-none-any.whl

pulumi_alicloud/cloudfirewall/control_policy.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['ControlPolicyArgs', 'ControlPolicy']
@@ -15,7 +20,6 @@ __all__ = ['ControlPolicyArgs', 'ControlPolicy']
 class ControlPolicyArgs:
     def __init__(__self__, *,
                  acl_action: pulumi.Input[str],
-                 application_name: pulumi.Input[str],
                  description: pulumi.Input[str],
                  destination: pulumi.Input[str],
                  destination_type: pulumi.Input[str],
@@ -23,35 +27,65 @@ class ControlPolicyArgs:
                  proto: pulumi.Input[str],
                  source: pulumi.Input[str],
                  source_type: pulumi.Input[str],
+                 application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
                  dest_port_type: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
-                 source_ip: Optional[pulumi.Input[str]] = None):
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
+                 source_ip: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None):
         """
         The set of arguments for constructing a ControlPolicy resource.
         :param pulumi.Input[str] acl_action: The action that Cloud Firewall performs on the traffic. Valid values: `accept`, `drop`, `log`.
+        :param pulumi.Input[str] description: The description of the access control policy.
+        :param pulumi.Input[str] destination: The destination address in the access control policy.
+        :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
+        :param pulumi.Input[str] direction: The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
+        :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
+        :param pulumi.Input[str] source: The source address in the access control policy.
+        :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
         :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
                > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
-        :param pulumi.Input[str] description: The description of the access control policy.
-        :param pulumi.Input[str] destination: The destination address defined in the access control policy.
-        :param pulumi.Input[str] destination_type: DestinationType. Valid values: If Direction is `in`, the valid values are `net`, `group`. If `direction` is `out`, the valid values are `net`, `group`, `domain`, `location`.
-        :param pulumi.Input[str] direction: Direction. Valid values: `in`, `out`.
-        :param pulumi.Input[str] proto: Proto. Valid values: ` TCP`, ` UDP`, `ANY`, `ICMP`.
-        :param pulumi.Input[str] source: Source.
-        :param pulumi.Input[str] source_type: SourceType. Valid values: If `direction` is `in`, the valid values are `net`, `group`, `location`. If `direction` is `out`, the valid values are `net`, `group`.
-        :param pulumi.Input[str] dest_port: The destination port defined in the access control policy.
-        :param pulumi.Input[str] dest_port_group: The destination port address book defined in the access control policy.
-        :param pulumi.Input[str] dest_port_type: The destination port type defined in the access control policy. Valid values: `group`, `port`.
-        :param pulumi.Input[str] ip_version: The ip version.
-        :param pulumi.Input[str] lang: DestPortGroupPorts. Valid values: `en`, `zh`.
-        :param pulumi.Input[str] release: Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: `true`, `false`.
-        :param pulumi.Input[str] source_ip: The source ip.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
+        :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
+        :param pulumi.Input[str] dest_port_type: The type of the destination port in the access control policy. Valid values: `port`, `group`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
+        :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
+        :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
+        :param pulumi.Input[str] source_ip: The source IP address of the request.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         pulumi.set(__self__, "acl_action", acl_action)
-        pulumi.set(__self__, "application_name", application_name)
         pulumi.set(__self__, "description", description)
         pulumi.set(__self__, "destination", destination)
         pulumi.set(__self__, "destination_type", destination_type)
@@ -59,20 +93,38 @@ class ControlPolicyArgs:
         pulumi.set(__self__, "proto", proto)
         pulumi.set(__self__, "source", source)
         pulumi.set(__self__, "source_type", source_type)
+        if application_name is not None:
+            pulumi.set(__self__, "application_name", application_name)
+        if application_name_lists is not None:
+            pulumi.set(__self__, "application_name_lists", application_name_lists)
         if dest_port is not None:
             pulumi.set(__self__, "dest_port", dest_port)
         if dest_port_group is not None:
             pulumi.set(__self__, "dest_port_group", dest_port_group)
         if dest_port_type is not None:
             pulumi.set(__self__, "dest_port_type", dest_port_type)
+        if domain_resolve_type is not None:
+            pulumi.set(__self__, "domain_resolve_type", domain_resolve_type)
+        if end_time is not None:
+            pulumi.set(__self__, "end_time", end_time)
         if ip_version is not None:
             pulumi.set(__self__, "ip_version", ip_version)
         if lang is not None:
             pulumi.set(__self__, "lang", lang)
         if release is not None:
             pulumi.set(__self__, "release", release)
+        if repeat_days is not None:
+            pulumi.set(__self__, "repeat_days", repeat_days)
+        if repeat_end_time is not None:
+            pulumi.set(__self__, "repeat_end_time", repeat_end_time)
+        if repeat_start_time is not None:
+            pulumi.set(__self__, "repeat_start_time", repeat_start_time)
+        if repeat_type is not None:
+            pulumi.set(__self__, "repeat_type", repeat_type)
         if source_ip is not None:
             pulumi.set(__self__, "source_ip", source_ip)
+        if start_time is not None:
+            pulumi.set(__self__, "start_time", start_time)
 
     @property
     @pulumi.getter(name="aclAction")
@@ -86,19 +138,6 @@ class ControlPolicyArgs:
     def acl_action(self, value: pulumi.Input[str]):
         pulumi.set(self, "acl_action", value)
 
-    @property
-    @pulumi.getter(name="applicationName")
-    def application_name(self) -> pulumi.Input[str]:
-        """
-        The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
-        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
-        """
-        return pulumi.get(self, "application_name")
-
-    @application_name.setter
-    def application_name(self, value: pulumi.Input[str]):
-        pulumi.set(self, "application_name", value)
-
     @property
     @pulumi.getter
     def description(self) -> pulumi.Input[str]:
@@ -115,7 +154,7 @@ class ControlPolicyArgs:
     @pulumi.getter
     def destination(self) -> pulumi.Input[str]:
         """
-        The destination address defined in the access control policy.
+        The destination address in the access control policy.
         """
         return pulumi.get(self, "destination")
 
@@ -127,7 +166,7 @@ class ControlPolicyArgs:
     @pulumi.getter(name="destinationType")
     def destination_type(self) -> pulumi.Input[str]:
         """
-        DestinationType. Valid values: If Direction is `in`, the valid values are `net`, `group`. If `direction` is `out`, the valid values are `net`, `group`, `domain`, `location`.
+        The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
         """
         return pulumi.get(self, "destination_type")
 
@@ -139,7 +178,7 @@ class ControlPolicyArgs:
     @pulumi.getter
     def direction(self) -> pulumi.Input[str]:
         """
-        Direction. Valid values: `in`, `out`.
+        The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
         """
         return pulumi.get(self, "direction")
 
@@ -151,7 +190,7 @@ class ControlPolicyArgs:
     @pulumi.getter
     def proto(self) -> pulumi.Input[str]:
         """
-        Proto. Valid values: ` TCP`, ` UDP`, `ANY`, `ICMP`.
+        The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
         """
         return pulumi.get(self, "proto")
 
@@ -163,7 +202,7 @@ class ControlPolicyArgs:
     @pulumi.getter
     def source(self) -> pulumi.Input[str]:
         """
-        Source.
+        The source address in the access control policy.
         """
         return pulumi.get(self, "source")
 
@@ -175,7 +214,7 @@ class ControlPolicyArgs:
     @pulumi.getter(name="sourceType")
     def source_type(self) -> pulumi.Input[str]:
         """
-        SourceType. Valid values: If `direction` is `in`, the valid values are `net`, `group`, `location`. If `direction` is `out`, the valid values are `net`, `group`.
+        The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
         """
         return pulumi.get(self, "source_type")
 
@@ -183,11 +222,37 @@ class ControlPolicyArgs:
     def source_type(self, value: pulumi.Input[str]):
         pulumi.set(self, "source_type", value)
 
+    @property
+    @pulumi.getter(name="applicationName")
+    def application_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        """
+        return pulumi.get(self, "application_name")
+
+    @application_name.setter
+    def application_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "application_name", value)
+
+    @property
+    @pulumi.getter(name="applicationNameLists")
+    def application_name_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The application types supported by the access control policy.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        """
+        return pulumi.get(self, "application_name_lists")
+
+    @application_name_lists.setter
+    def application_name_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "application_name_lists", value)
+
     @property
     @pulumi.getter(name="destPort")
     def dest_port(self) -> Optional[pulumi.Input[str]]:
         """
-        The destination port defined in the access control policy.
+        The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
         """
         return pulumi.get(self, "dest_port")
 
@@ -199,7 +264,7 @@ class ControlPolicyArgs:
     @pulumi.getter(name="destPortGroup")
     def dest_port_group(self) -> Optional[pulumi.Input[str]]:
         """
-        The destination port address book defined in the access control policy.
+        The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
         """
         return pulumi.get(self, "dest_port_group")
 
@@ -211,7 +276,7 @@ class ControlPolicyArgs:
     @pulumi.getter(name="destPortType")
     def dest_port_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The destination port type defined in the access control policy. Valid values: `group`, `port`.
+        The type of the destination port in the access control policy. Valid values: `port`, `group`.
         """
         return pulumi.get(self, "dest_port_type")
 
@@ -219,11 +284,39 @@ class ControlPolicyArgs:
     def dest_port_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "dest_port_type", value)
 
+    @property
+    @pulumi.getter(name="domainResolveType")
+    def domain_resolve_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The domain name resolution method of the access control policy. Valid values:
+        - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+        - `DNS`: DNS-based dynamic resolution.
+        - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        """
+        return pulumi.get(self, "domain_resolve_type")
+
+    @domain_resolve_type.setter
+    def domain_resolve_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "domain_resolve_type", value)
+
+    @property
+    @pulumi.getter(name="endTime")
+    def end_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        """
+        return pulumi.get(self, "end_time")
+
+    @end_time.setter
+    def end_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "end_time", value)
+
     @property
     @pulumi.getter(name="ipVersion")
     def ip_version(self) -> Optional[pulumi.Input[str]]:
         """
-        The ip version.
+        The IP version supported by the access control policy. Default value: `4`. Valid values:
         """
         return pulumi.get(self, "ip_version")
 
@@ -235,7 +328,7 @@ class ControlPolicyArgs:
     @pulumi.getter
     def lang(self) -> Optional[pulumi.Input[str]]:
         """
-        DestPortGroupPorts. Valid values: `en`, `zh`.
+        The language of the content within the request and response. Valid values: `zh`, `en`.
         """
         return pulumi.get(self, "lang")
 
@@ -247,7 +340,7 @@ class ControlPolicyArgs:
     @pulumi.getter
     def release(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: `true`, `false`.
+        The status of the access control policy. Valid values: `true`, `false`.
         """
         return pulumi.get(self, "release")
 
@@ -255,11 +348,68 @@ class ControlPolicyArgs:
     def release(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "release", value)
 
+    @property
+    @pulumi.getter(name="repeatDays")
+    def repeat_days(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]:
+        """
+        The days of a week or of a month on which the access control policy takes effect. Valid values:
+        - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+        - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+        > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        """
+        return pulumi.get(self, "repeat_days")
+
+    @repeat_days.setter
+    def repeat_days(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]):
+        pulumi.set(self, "repeat_days", value)
+
+    @property
+    @pulumi.getter(name="repeatEndTime")
+    def repeat_end_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        """
+        return pulumi.get(self, "repeat_end_time")
+
+    @repeat_end_time.setter
+    def repeat_end_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_end_time", value)
+
+    @property
+    @pulumi.getter(name="repeatStartTime")
+    def repeat_start_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "repeat_start_time")
+
+    @repeat_start_time.setter
+    def repeat_start_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_start_time", value)
+
+    @property
+    @pulumi.getter(name="repeatType")
+    def repeat_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+        - `Permanent`: The policy always takes effect.
+        - `None`: The policy takes effect for only once.
+        - `Daily`: The policy takes effect on a daily basis.
+        - `Weekly`: The policy takes effect on a weekly basis.
+        - `Monthly`: The policy takes effect on a monthly basis.
+        """
+        return pulumi.get(self, "repeat_type")
+
+    @repeat_type.setter
+    def repeat_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_type", value)
+
     @property
     @pulumi.getter(name="sourceIp")
     def source_ip(self) -> Optional[pulumi.Input[str]]:
         """
-        The source ip.
+        The source IP address of the request.
         """
         return pulumi.get(self, "source_ip")
 
@@ -267,6 +417,18 @@ class ControlPolicyArgs:
     def source_ip(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "source_ip", value)
 
+    @property
+    @pulumi.getter(name="startTime")
+    def start_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "start_time")
+
+    @start_time.setter
+    def start_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "start_time", value)
+
 
 @pulumi.input_type
 class _ControlPolicyState:
@@ -274,6 +436,8 @@ class _ControlPolicyState:
                  acl_action: Optional[pulumi.Input[str]] = None,
                  acl_uuid: Optional[pulumi.Input[str]] = None,
                  application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 create_time: Optional[pulumi.Input[str]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -281,33 +445,63 @@ class _ControlPolicyState:
                  destination: Optional[pulumi.Input[str]] = None,
                  destination_type: Optional[pulumi.Input[str]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  proto: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
                  source: Optional[pulumi.Input[str]] = None,
                  source_ip: Optional[pulumi.Input[str]] = None,
-                 source_type: Optional[pulumi.Input[str]] = None):
+                 source_type: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None):
         """
         Input properties used for looking up and filtering ControlPolicy resources.
         :param pulumi.Input[str] acl_action: The action that Cloud Firewall performs on the traffic. Valid values: `accept`, `drop`, `log`.
         :param pulumi.Input[str] acl_uuid: (Available since v1.148.0) The unique ID of the access control policy.
         :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
                > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        :param pulumi.Input[str] create_time: (Available since v1.232.0) The time when the access control policy was created.
         :param pulumi.Input[str] description: The description of the access control policy.
-        :param pulumi.Input[str] dest_port: The destination port defined in the access control policy.
-        :param pulumi.Input[str] dest_port_group: The destination port address book defined in the access control policy.
-        :param pulumi.Input[str] dest_port_type: The destination port type defined in the access control policy. Valid values: `group`, `port`.
-        :param pulumi.Input[str] destination: The destination address defined in the access control policy.
-        :param pulumi.Input[str] destination_type: DestinationType. Valid values: If Direction is `in`, the valid values are `net`, `group`. If `direction` is `out`, the valid values are `net`, `group`, `domain`, `location`.
-        :param pulumi.Input[str] direction: Direction. Valid values: `in`, `out`.
-        :param pulumi.Input[str] ip_version: The ip version.
-        :param pulumi.Input[str] lang: DestPortGroupPorts. Valid values: `en`, `zh`.
-        :param pulumi.Input[str] proto: Proto. Valid values: ` TCP`, ` UDP`, `ANY`, `ICMP`.
-        :param pulumi.Input[str] release: Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: `true`, `false`.
-        :param pulumi.Input[str] source: Source.
-        :param pulumi.Input[str] source_ip: The source ip.
-        :param pulumi.Input[str] source_type: SourceType. Valid values: If `direction` is `in`, the valid values are `net`, `group`, `location`. If `direction` is `out`, the valid values are `net`, `group`.
+        :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
+        :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
+        :param pulumi.Input[str] dest_port_type: The type of the destination port in the access control policy. Valid values: `port`, `group`.
+        :param pulumi.Input[str] destination: The destination address in the access control policy.
+        :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
+        :param pulumi.Input[str] direction: The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
+        :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
+        :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
+        :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
+        :param pulumi.Input[str] source: The source address in the access control policy.
+        :param pulumi.Input[str] source_ip: The source IP address of the request.
+        :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         if acl_action is not None:
             pulumi.set(__self__, "acl_action", acl_action)
@@ -315,6 +509,10 @@ class _ControlPolicyState:
             pulumi.set(__self__, "acl_uuid", acl_uuid)
         if application_name is not None:
             pulumi.set(__self__, "application_name", application_name)
+        if application_name_lists is not None:
+            pulumi.set(__self__, "application_name_lists", application_name_lists)
+        if create_time is not None:
+            pulumi.set(__self__, "create_time", create_time)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if dest_port is not None:
@@ -329,6 +527,10 @@ class _ControlPolicyState:
             pulumi.set(__self__, "destination_type", destination_type)
         if direction is not None:
             pulumi.set(__self__, "direction", direction)
+        if domain_resolve_type is not None:
+            pulumi.set(__self__, "domain_resolve_type", domain_resolve_type)
+        if end_time is not None:
+            pulumi.set(__self__, "end_time", end_time)
         if ip_version is not None:
             pulumi.set(__self__, "ip_version", ip_version)
         if lang is not None:
@@ -337,12 +539,22 @@ class _ControlPolicyState:
             pulumi.set(__self__, "proto", proto)
         if release is not None:
             pulumi.set(__self__, "release", release)
+        if repeat_days is not None:
+            pulumi.set(__self__, "repeat_days", repeat_days)
+        if repeat_end_time is not None:
+            pulumi.set(__self__, "repeat_end_time", repeat_end_time)
+        if repeat_start_time is not None:
+            pulumi.set(__self__, "repeat_start_time", repeat_start_time)
+        if repeat_type is not None:
+            pulumi.set(__self__, "repeat_type", repeat_type)
         if source is not None:
             pulumi.set(__self__, "source", source)
         if source_ip is not None:
             pulumi.set(__self__, "source_ip", source_ip)
         if source_type is not None:
             pulumi.set(__self__, "source_type", source_type)
+        if start_time is not None:
+            pulumi.set(__self__, "start_time", start_time)
 
     @property
     @pulumi.getter(name="aclAction")
@@ -381,6 +593,31 @@ class _ControlPolicyState:
     def application_name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "application_name", value)
 
+    @property
+    @pulumi.getter(name="applicationNameLists")
+    def application_name_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The application types supported by the access control policy.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        """
+        return pulumi.get(self, "application_name_lists")
+
+    @application_name_lists.setter
+    def application_name_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "application_name_lists", value)
+
+    @property
+    @pulumi.getter(name="createTime")
+    def create_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        (Available since v1.232.0) The time when the access control policy was created.
+        """
+        return pulumi.get(self, "create_time")
+
+    @create_time.setter
+    def create_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "create_time", value)
+
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[str]]:
@@ -397,7 +634,7 @@ class _ControlPolicyState:
     @pulumi.getter(name="destPort")
     def dest_port(self) -> Optional[pulumi.Input[str]]:
         """
-        The destination port defined in the access control policy.
+        The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
         """
         return pulumi.get(self, "dest_port")
 
@@ -409,7 +646,7 @@ class _ControlPolicyState:
     @pulumi.getter(name="destPortGroup")
     def dest_port_group(self) -> Optional[pulumi.Input[str]]:
         """
-        The destination port address book defined in the access control policy.
+        The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
         """
         return pulumi.get(self, "dest_port_group")
 
@@ -421,7 +658,7 @@ class _ControlPolicyState:
     @pulumi.getter(name="destPortType")
     def dest_port_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The destination port type defined in the access control policy. Valid values: `group`, `port`.
+        The type of the destination port in the access control policy. Valid values: `port`, `group`.
         """
         return pulumi.get(self, "dest_port_type")
 
@@ -433,7 +670,7 @@ class _ControlPolicyState:
     @pulumi.getter
     def destination(self) -> Optional[pulumi.Input[str]]:
         """
-        The destination address defined in the access control policy.
+        The destination address in the access control policy.
         """
         return pulumi.get(self, "destination")
 
@@ -445,7 +682,7 @@ class _ControlPolicyState:
     @pulumi.getter(name="destinationType")
     def destination_type(self) -> Optional[pulumi.Input[str]]:
         """
-        DestinationType. Valid values: If Direction is `in`, the valid values are `net`, `group`. If `direction` is `out`, the valid values are `net`, `group`, `domain`, `location`.
+        The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
         """
         return pulumi.get(self, "destination_type")
 
@@ -457,7 +694,7 @@ class _ControlPolicyState:
     @pulumi.getter
     def direction(self) -> Optional[pulumi.Input[str]]:
         """
-        Direction. Valid values: `in`, `out`.
+        The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
         """
         return pulumi.get(self, "direction")
 
@@ -465,11 +702,39 @@ class _ControlPolicyState:
     def direction(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "direction", value)
 
+    @property
+    @pulumi.getter(name="domainResolveType")
+    def domain_resolve_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The domain name resolution method of the access control policy. Valid values:
+        - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+        - `DNS`: DNS-based dynamic resolution.
+        - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        """
+        return pulumi.get(self, "domain_resolve_type")
+
+    @domain_resolve_type.setter
+    def domain_resolve_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "domain_resolve_type", value)
+
+    @property
+    @pulumi.getter(name="endTime")
+    def end_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        """
+        return pulumi.get(self, "end_time")
+
+    @end_time.setter
+    def end_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "end_time", value)
+
     @property
     @pulumi.getter(name="ipVersion")
     def ip_version(self) -> Optional[pulumi.Input[str]]:
         """
-        The ip version.
+        The IP version supported by the access control policy. Default value: `4`. Valid values:
         """
         return pulumi.get(self, "ip_version")
 
@@ -481,7 +746,7 @@ class _ControlPolicyState:
     @pulumi.getter
     def lang(self) -> Optional[pulumi.Input[str]]:
         """
-        DestPortGroupPorts. Valid values: `en`, `zh`.
+        The language of the content within the request and response. Valid values: `zh`, `en`.
         """
         return pulumi.get(self, "lang")
 
@@ -493,7 +758,7 @@ class _ControlPolicyState:
     @pulumi.getter
     def proto(self) -> Optional[pulumi.Input[str]]:
         """
-        Proto. Valid values: ` TCP`, ` UDP`, `ANY`, `ICMP`.
+        The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
         """
         return pulumi.get(self, "proto")
 
@@ -505,7 +770,7 @@ class _ControlPolicyState:
     @pulumi.getter
     def release(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: `true`, `false`.
+        The status of the access control policy. Valid values: `true`, `false`.
         """
         return pulumi.get(self, "release")
 
@@ -513,11 +778,68 @@ class _ControlPolicyState:
     def release(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "release", value)
 
+    @property
+    @pulumi.getter(name="repeatDays")
+    def repeat_days(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]:
+        """
+        The days of a week or of a month on which the access control policy takes effect. Valid values:
+        - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+        - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+        > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        """
+        return pulumi.get(self, "repeat_days")
+
+    @repeat_days.setter
+    def repeat_days(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]):
+        pulumi.set(self, "repeat_days", value)
+
+    @property
+    @pulumi.getter(name="repeatEndTime")
+    def repeat_end_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        """
+        return pulumi.get(self, "repeat_end_time")
+
+    @repeat_end_time.setter
+    def repeat_end_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_end_time", value)
+
+    @property
+    @pulumi.getter(name="repeatStartTime")
+    def repeat_start_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "repeat_start_time")
+
+    @repeat_start_time.setter
+    def repeat_start_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_start_time", value)
+
+    @property
+    @pulumi.getter(name="repeatType")
+    def repeat_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+        - `Permanent`: The policy always takes effect.
+        - `None`: The policy takes effect for only once.
+        - `Daily`: The policy takes effect on a daily basis.
+        - `Weekly`: The policy takes effect on a weekly basis.
+        - `Monthly`: The policy takes effect on a monthly basis.
+        """
+        return pulumi.get(self, "repeat_type")
+
+    @repeat_type.setter
+    def repeat_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_type", value)
+
     @property
     @pulumi.getter
     def source(self) -> Optional[pulumi.Input[str]]:
         """
-        Source.
+        The source address in the access control policy.
         """
         return pulumi.get(self, "source")
 
@@ -529,7 +851,7 @@ class _ControlPolicyState:
     @pulumi.getter(name="sourceIp")
     def source_ip(self) -> Optional[pulumi.Input[str]]:
         """
-        The source ip.
+        The source IP address of the request.
         """
         return pulumi.get(self, "source_ip")
 
@@ -541,7 +863,7 @@ class _ControlPolicyState:
     @pulumi.getter(name="sourceType")
     def source_type(self) -> Optional[pulumi.Input[str]]:
         """
-        SourceType. Valid values: If `direction` is `in`, the valid values are `net`, `group`, `location`. If `direction` is `out`, the valid values are `net`, `group`.
+        The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
         """
         return pulumi.get(self, "source_type")
 
@@ -549,6 +871,18 @@ class _ControlPolicyState:
     def source_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "source_type", value)
 
+    @property
+    @pulumi.getter(name="startTime")
+    def start_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "start_time")
+
+    @start_time.setter
+    def start_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "start_time", value)
+
 
 class ControlPolicy(pulumi.CustomResource):
     @overload
@@ -557,6 +891,7 @@ class ControlPolicy(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  acl_action: Optional[pulumi.Input[str]] = None,
                  application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -564,13 +899,20 @@ class ControlPolicy(pulumi.CustomResource):
                  destination: Optional[pulumi.Input[str]] = None,
                  destination_type: Optional[pulumi.Input[str]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  proto: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
                  source: Optional[pulumi.Input[str]] = None,
                  source_ip: Optional[pulumi.Input[str]] = None,
                  source_type: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None,
                  __props__=None):
         """
         Provides a Cloud Firewall Control Policy resource.
@@ -583,23 +925,25 @@ class ControlPolicy(pulumi.CustomResource):
 
         Basic Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_alicloud as alicloud
 
-        example = alicloud.cloudfirewall.ControlPolicy("example",
-            acl_action="accept",
+        config = pulumi.Config()
+        name = config.get("name")
+        if name is None:
+            name = "terraform-example"
+        default = alicloud.cloudfirewall.ControlPolicy("default",
+            direction="in",
             application_name="ANY",
-            description="example",
-            destination="100.1.1.0/24",
+            description=name,
+            acl_action="accept",
+            source="127.0.0.1/32",
+            source_type="net",
+            destination="127.0.0.2/32",
             destination_type="net",
-            direction="out",
-            proto="ANY",
-            source="1.2.3.0/24",
-            source_type="net")
+            proto="ANY")
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Import
 
@@ -614,20 +958,42 @@ class ControlPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] acl_action: The action that Cloud Firewall performs on the traffic. Valid values: `accept`, `drop`, `log`.
         :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
                > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
         :param pulumi.Input[str] description: The description of the access control policy.
-        :param pulumi.Input[str] dest_port: The destination port defined in the access control policy.
-        :param pulumi.Input[str] dest_port_group: The destination port address book defined in the access control policy.
-        :param pulumi.Input[str] dest_port_type: The destination port type defined in the access control policy. Valid values: `group`, `port`.
-        :param pulumi.Input[str] destination: The destination address defined in the access control policy.
-        :param pulumi.Input[str] destination_type: DestinationType. Valid values: If Direction is `in`, the valid values are `net`, `group`. If `direction` is `out`, the valid values are `net`, `group`, `domain`, `location`.
-        :param pulumi.Input[str] direction: Direction. Valid values: `in`, `out`.
-        :param pulumi.Input[str] ip_version: The ip version.
-        :param pulumi.Input[str] lang: DestPortGroupPorts. Valid values: `en`, `zh`.
-        :param pulumi.Input[str] proto: Proto. Valid values: ` TCP`, ` UDP`, `ANY`, `ICMP`.
-        :param pulumi.Input[str] release: Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: `true`, `false`.
-        :param pulumi.Input[str] source: Source.
-        :param pulumi.Input[str] source_ip: The source ip.
-        :param pulumi.Input[str] source_type: SourceType. Valid values: If `direction` is `in`, the valid values are `net`, `group`, `location`. If `direction` is `out`, the valid values are `net`, `group`.
+        :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
+        :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
+        :param pulumi.Input[str] dest_port_type: The type of the destination port in the access control policy. Valid values: `port`, `group`.
+        :param pulumi.Input[str] destination: The destination address in the access control policy.
+        :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
+        :param pulumi.Input[str] direction: The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
+        :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
+        :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
+        :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
+        :param pulumi.Input[str] source: The source address in the access control policy.
+        :param pulumi.Input[str] source_ip: The source IP address of the request.
+        :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         ...
     @overload
@@ -646,23 +1012,25 @@ class ControlPolicy(pulumi.CustomResource):
 
         Basic Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_alicloud as alicloud
 
-        example = alicloud.cloudfirewall.ControlPolicy("example",
-            acl_action="accept",
+        config = pulumi.Config()
+        name = config.get("name")
+        if name is None:
+            name = "terraform-example"
+        default = alicloud.cloudfirewall.ControlPolicy("default",
+            direction="in",
             application_name="ANY",
-            description="example",
-            destination="100.1.1.0/24",
+            description=name,
+            acl_action="accept",
+            source="127.0.0.1/32",
+            source_type="net",
+            destination="127.0.0.2/32",
             destination_type="net",
-            direction="out",
-            proto="ANY",
-            source="1.2.3.0/24",
-            source_type="net")
+            proto="ANY")
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Import
 
@@ -689,6 +1057,7 @@ class ControlPolicy(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  acl_action: Optional[pulumi.Input[str]] = None,
                  application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -696,13 +1065,20 @@ class ControlPolicy(pulumi.CustomResource):
                  destination: Optional[pulumi.Input[str]] = None,
                  destination_type: Optional[pulumi.Input[str]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  proto: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
                  source: Optional[pulumi.Input[str]] = None,
                  source_ip: Optional[pulumi.Input[str]] = None,
                  source_type: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -715,9 +1091,8 @@ class ControlPolicy(pulumi.CustomResource):
             if acl_action is None and not opts.urn:
                 raise TypeError("Missing required property 'acl_action'")
             __props__.__dict__["acl_action"] = acl_action
-            if application_name is None and not opts.urn:
-                raise TypeError("Missing required property 'application_name'")
             __props__.__dict__["application_name"] = application_name
+            __props__.__dict__["application_name_lists"] = application_name_lists
             if description is None and not opts.urn:
                 raise TypeError("Missing required property 'description'")
             __props__.__dict__["description"] = description
@@ -733,12 +1108,18 @@ class ControlPolicy(pulumi.CustomResource):
             if direction is None and not opts.urn:
                 raise TypeError("Missing required property 'direction'")
             __props__.__dict__["direction"] = direction
+            __props__.__dict__["domain_resolve_type"] = domain_resolve_type
+            __props__.__dict__["end_time"] = end_time
             __props__.__dict__["ip_version"] = ip_version
             __props__.__dict__["lang"] = lang
             if proto is None and not opts.urn:
                 raise TypeError("Missing required property 'proto'")
             __props__.__dict__["proto"] = proto
             __props__.__dict__["release"] = release
+            __props__.__dict__["repeat_days"] = repeat_days
+            __props__.__dict__["repeat_end_time"] = repeat_end_time
+            __props__.__dict__["repeat_start_time"] = repeat_start_time
+            __props__.__dict__["repeat_type"] = repeat_type
             if source is None and not opts.urn:
                 raise TypeError("Missing required property 'source'")
             __props__.__dict__["source"] = source
@@ -746,7 +1127,9 @@ class ControlPolicy(pulumi.CustomResource):
             if source_type is None and not opts.urn:
                 raise TypeError("Missing required property 'source_type'")
             __props__.__dict__["source_type"] = source_type
+            __props__.__dict__["start_time"] = start_time
             __props__.__dict__["acl_uuid"] = None
+            __props__.__dict__["create_time"] = None
         super(ControlPolicy, __self__).__init__(
             'alicloud:cloudfirewall/controlPolicy:ControlPolicy',
             resource_name,
@@ -760,6 +1143,8 @@ class ControlPolicy(pulumi.CustomResource):
             acl_action: Optional[pulumi.Input[str]] = None,
             acl_uuid: Optional[pulumi.Input[str]] = None,
             application_name: Optional[pulumi.Input[str]] = None,
+            application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            create_time: Optional[pulumi.Input[str]] = None,
             description: Optional[pulumi.Input[str]] = None,
             dest_port: Optional[pulumi.Input[str]] = None,
             dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -767,13 +1152,20 @@ class ControlPolicy(pulumi.CustomResource):
             destination: Optional[pulumi.Input[str]] = None,
             destination_type: Optional[pulumi.Input[str]] = None,
             direction: Optional[pulumi.Input[str]] = None,
+            domain_resolve_type: Optional[pulumi.Input[str]] = None,
+            end_time: Optional[pulumi.Input[int]] = None,
             ip_version: Optional[pulumi.Input[str]] = None,
             lang: Optional[pulumi.Input[str]] = None,
             proto: Optional[pulumi.Input[str]] = None,
             release: Optional[pulumi.Input[str]] = None,
+            repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+            repeat_end_time: Optional[pulumi.Input[str]] = None,
+            repeat_start_time: Optional[pulumi.Input[str]] = None,
+            repeat_type: Optional[pulumi.Input[str]] = None,
             source: Optional[pulumi.Input[str]] = None,
             source_ip: Optional[pulumi.Input[str]] = None,
-            source_type: Optional[pulumi.Input[str]] = None) -> 'ControlPolicy':
+            source_type: Optional[pulumi.Input[str]] = None,
+            start_time: Optional[pulumi.Input[int]] = None) -> 'ControlPolicy':
         """
         Get an existing ControlPolicy resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -785,20 +1177,43 @@ class ControlPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] acl_uuid: (Available since v1.148.0) The unique ID of the access control policy.
         :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
                > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        :param pulumi.Input[str] create_time: (Available since v1.232.0) The time when the access control policy was created.
         :param pulumi.Input[str] description: The description of the access control policy.
-        :param pulumi.Input[str] dest_port: The destination port defined in the access control policy.
-        :param pulumi.Input[str] dest_port_group: The destination port address book defined in the access control policy.
-        :param pulumi.Input[str] dest_port_type: The destination port type defined in the access control policy. Valid values: `group`, `port`.
-        :param pulumi.Input[str] destination: The destination address defined in the access control policy.
-        :param pulumi.Input[str] destination_type: DestinationType. Valid values: If Direction is `in`, the valid values are `net`, `group`. If `direction` is `out`, the valid values are `net`, `group`, `domain`, `location`.
-        :param pulumi.Input[str] direction: Direction. Valid values: `in`, `out`.
-        :param pulumi.Input[str] ip_version: The ip version.
-        :param pulumi.Input[str] lang: DestPortGroupPorts. Valid values: `en`, `zh`.
-        :param pulumi.Input[str] proto: Proto. Valid values: ` TCP`, ` UDP`, `ANY`, `ICMP`.
-        :param pulumi.Input[str] release: Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: `true`, `false`.
-        :param pulumi.Input[str] source: Source.
-        :param pulumi.Input[str] source_ip: The source ip.
-        :param pulumi.Input[str] source_type: SourceType. Valid values: If `direction` is `in`, the valid values are `net`, `group`, `location`. If `direction` is `out`, the valid values are `net`, `group`.
+        :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
+        :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
+        :param pulumi.Input[str] dest_port_type: The type of the destination port in the access control policy. Valid values: `port`, `group`.
+        :param pulumi.Input[str] destination: The destination address in the access control policy.
+        :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
+        :param pulumi.Input[str] direction: The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
+        :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
+        :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
+        :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
+        :param pulumi.Input[str] source: The source address in the access control policy.
+        :param pulumi.Input[str] source_ip: The source IP address of the request.
+        :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -807,6 +1222,8 @@ class ControlPolicy(pulumi.CustomResource):
         __props__.__dict__["acl_action"] = acl_action
         __props__.__dict__["acl_uuid"] = acl_uuid
         __props__.__dict__["application_name"] = application_name
+        __props__.__dict__["application_name_lists"] = application_name_lists
+        __props__.__dict__["create_time"] = create_time
         __props__.__dict__["description"] = description
         __props__.__dict__["dest_port"] = dest_port
         __props__.__dict__["dest_port_group"] = dest_port_group
@@ -814,13 +1231,20 @@ class ControlPolicy(pulumi.CustomResource):
         __props__.__dict__["destination"] = destination
         __props__.__dict__["destination_type"] = destination_type
         __props__.__dict__["direction"] = direction
+        __props__.__dict__["domain_resolve_type"] = domain_resolve_type
+        __props__.__dict__["end_time"] = end_time
         __props__.__dict__["ip_version"] = ip_version
         __props__.__dict__["lang"] = lang
         __props__.__dict__["proto"] = proto
         __props__.__dict__["release"] = release
+        __props__.__dict__["repeat_days"] = repeat_days
+        __props__.__dict__["repeat_end_time"] = repeat_end_time
+        __props__.__dict__["repeat_start_time"] = repeat_start_time
+        __props__.__dict__["repeat_type"] = repeat_type
         __props__.__dict__["source"] = source
         __props__.__dict__["source_ip"] = source_ip
         __props__.__dict__["source_type"] = source_type
+        __props__.__dict__["start_time"] = start_time
         return ControlPolicy(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -841,13 +1265,30 @@ class ControlPolicy(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="applicationName")
-    def application_name(self) -> pulumi.Output[str]:
+    def application_name(self) -> pulumi.Output[Optional[str]]:
         """
         The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
         > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
         """
         return pulumi.get(self, "application_name")
 
+    @property
+    @pulumi.getter(name="applicationNameLists")
+    def application_name_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
+        """
+        The application types supported by the access control policy.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        """
+        return pulumi.get(self, "application_name_lists")
+
+    @property
+    @pulumi.getter(name="createTime")
+    def create_time(self) -> pulumi.Output[str]:
+        """
+        (Available since v1.232.0) The time when the access control policy was created.
+        """
+        return pulumi.get(self, "create_time")
+
     @property
     @pulumi.getter
     def description(self) -> pulumi.Output[str]:
@@ -860,15 +1301,15 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter(name="destPort")
     def dest_port(self) -> pulumi.Output[str]:
         """
-        The destination port defined in the access control policy.
+        The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
         """
         return pulumi.get(self, "dest_port")
 
     @property
     @pulumi.getter(name="destPortGroup")
-    def dest_port_group(self) -> pulumi.Output[str]:
+    def dest_port_group(self) -> pulumi.Output[Optional[str]]:
         """
-        The destination port address book defined in the access control policy.
+        The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
         """
         return pulumi.get(self, "dest_port_group")
 
@@ -876,7 +1317,7 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter(name="destPortType")
     def dest_port_type(self) -> pulumi.Output[str]:
         """
-        The destination port type defined in the access control policy. Valid values: `group`, `port`.
+        The type of the destination port in the access control policy. Valid values: `port`, `group`.
         """
         return pulumi.get(self, "dest_port_type")
 
@@ -884,7 +1325,7 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter
     def destination(self) -> pulumi.Output[str]:
         """
-        The destination address defined in the access control policy.
+        The destination address in the access control policy.
         """
         return pulumi.get(self, "destination")
 
@@ -892,7 +1333,7 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter(name="destinationType")
     def destination_type(self) -> pulumi.Output[str]:
         """
-        DestinationType. Valid values: If Direction is `in`, the valid values are `net`, `group`. If `direction` is `out`, the valid values are `net`, `group`, `domain`, `location`.
+        The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
         """
         return pulumi.get(self, "destination_type")
 
@@ -900,15 +1341,35 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter
     def direction(self) -> pulumi.Output[str]:
         """
-        Direction. Valid values: `in`, `out`.
+        The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
         """
         return pulumi.get(self, "direction")
 
+    @property
+    @pulumi.getter(name="domainResolveType")
+    def domain_resolve_type(self) -> pulumi.Output[Optional[str]]:
+        """
+        The domain name resolution method of the access control policy. Valid values:
+        - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+        - `DNS`: DNS-based dynamic resolution.
+        - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        """
+        return pulumi.get(self, "domain_resolve_type")
+
+    @property
+    @pulumi.getter(name="endTime")
+    def end_time(self) -> pulumi.Output[Optional[int]]:
+        """
+        The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        """
+        return pulumi.get(self, "end_time")
+
     @property
     @pulumi.getter(name="ipVersion")
-    def ip_version(self) -> pulumi.Output[Optional[str]]:
+    def ip_version(self) -> pulumi.Output[str]:
         """
-        The ip version.
+        The IP version supported by the access control policy. Default value: `4`. Valid values:
         """
         return pulumi.get(self, "ip_version")
 
@@ -916,7 +1377,7 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter
     def lang(self) -> pulumi.Output[Optional[str]]:
         """
-        DestPortGroupPorts. Valid values: `en`, `zh`.
+        The language of the content within the request and response. Valid values: `zh`, `en`.
         """
         return pulumi.get(self, "lang")
 
@@ -924,7 +1385,7 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter
     def proto(self) -> pulumi.Output[str]:
         """
-        Proto. Valid values: ` TCP`, ` UDP`, `ANY`, `ICMP`.
+        The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
         """
         return pulumi.get(self, "proto")
 
@@ -932,23 +1393,64 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter
     def release(self) -> pulumi.Output[str]:
         """
-        Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: `true`, `false`.
+        The status of the access control policy. Valid values: `true`, `false`.
         """
         return pulumi.get(self, "release")
 
+    @property
+    @pulumi.getter(name="repeatDays")
+    def repeat_days(self) -> pulumi.Output[Optional[Sequence[int]]]:
+        """
+        The days of a week or of a month on which the access control policy takes effect. Valid values:
+        - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+        - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+        > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        """
+        return pulumi.get(self, "repeat_days")
+
+    @property
+    @pulumi.getter(name="repeatEndTime")
+    def repeat_end_time(self) -> pulumi.Output[Optional[str]]:
+        """
+        The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        """
+        return pulumi.get(self, "repeat_end_time")
+
+    @property
+    @pulumi.getter(name="repeatStartTime")
+    def repeat_start_time(self) -> pulumi.Output[Optional[str]]:
+        """
+        The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "repeat_start_time")
+
+    @property
+    @pulumi.getter(name="repeatType")
+    def repeat_type(self) -> pulumi.Output[str]:
+        """
+        The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+        - `Permanent`: The policy always takes effect.
+        - `None`: The policy takes effect for only once.
+        - `Daily`: The policy takes effect on a daily basis.
+        - `Weekly`: The policy takes effect on a weekly basis.
+        - `Monthly`: The policy takes effect on a monthly basis.
+        """
+        return pulumi.get(self, "repeat_type")
+
     @property
     @pulumi.getter
     def source(self) -> pulumi.Output[str]:
         """
-        Source.
+        The source address in the access control policy.
         """
         return pulumi.get(self, "source")
 
     @property
     @pulumi.getter(name="sourceIp")
-    def source_ip(self) -> pulumi.Output[str]:
+    def source_ip(self) -> pulumi.Output[Optional[str]]:
         """
-        The source ip.
+        The source IP address of the request.
         """
         return pulumi.get(self, "source_ip")
 
@@ -956,7 +1458,15 @@ class ControlPolicy(pulumi.CustomResource):
     @pulumi.getter(name="sourceType")
     def source_type(self) -> pulumi.Output[str]:
         """
-        SourceType. Valid values: If `direction` is `in`, the valid values are `net`, `group`, `location`. If `direction` is `out`, the valid values are `net`, `group`.
+        The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
         """
         return pulumi.get(self, "source_type")
 
+    @property
+    @pulumi.getter(name="startTime")
+    def start_time(self) -> pulumi.Output[Optional[int]]:
+        """
+        The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "start_time")
+