pulumi-alicloud 3.63.1__py3-none-any.whl → 3.64.0__py3-none-any.whl

pulumi_alicloud/cloudfirewall/control_policy.py

@@ -20,7 +20,6 @@ __all__ = ['ControlPolicyArgs', 'ControlPolicy']
 class ControlPolicyArgs:
     def __init__(__self__, *,
                  acl_action: pulumi.Input[str],
-                 application_name: pulumi.Input[str],
                  description: pulumi.Input[str],
                  destination: pulumi.Input[str],
                  destination_type: pulumi.Input[str],
@@ -28,18 +27,25 @@ class ControlPolicyArgs:
                  proto: pulumi.Input[str],
                  source: pulumi.Input[str],
                  source_type: pulumi.Input[str],
+                 application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
                  dest_port_type: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
-                 source_ip: Optional[pulumi.Input[str]] = None):
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
+                 source_ip: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None):
         """
         The set of arguments for constructing a ControlPolicy resource.
         :param pulumi.Input[str] acl_action: The action that Cloud Firewall performs on the traffic. Valid values: `accept`, `drop`, `log`.
-        :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
-               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
         :param pulumi.Input[str] description: The description of the access control policy.
         :param pulumi.Input[str] destination: The destination address in the access control policy.
         :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
@@ -47,16 +53,39 @@ class ControlPolicyArgs:
         :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
         :param pulumi.Input[str] source: The source address in the access control policy.
         :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
+        :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
         :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
         :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
         :param pulumi.Input[str] dest_port_type: The type of the destination port in the access control policy. Valid values: `port`, `group`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
         :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
         :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
         :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
         :param pulumi.Input[str] source_ip: The source IP address of the request.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         pulumi.set(__self__, "acl_action", acl_action)
-        pulumi.set(__self__, "application_name", application_name)
         pulumi.set(__self__, "description", description)
         pulumi.set(__self__, "destination", destination)
         pulumi.set(__self__, "destination_type", destination_type)
@@ -64,20 +93,38 @@ class ControlPolicyArgs:
         pulumi.set(__self__, "proto", proto)
         pulumi.set(__self__, "source", source)
         pulumi.set(__self__, "source_type", source_type)
+        if application_name is not None:
+            pulumi.set(__self__, "application_name", application_name)
+        if application_name_lists is not None:
+            pulumi.set(__self__, "application_name_lists", application_name_lists)
         if dest_port is not None:
             pulumi.set(__self__, "dest_port", dest_port)
         if dest_port_group is not None:
             pulumi.set(__self__, "dest_port_group", dest_port_group)
         if dest_port_type is not None:
             pulumi.set(__self__, "dest_port_type", dest_port_type)
+        if domain_resolve_type is not None:
+            pulumi.set(__self__, "domain_resolve_type", domain_resolve_type)
+        if end_time is not None:
+            pulumi.set(__self__, "end_time", end_time)
         if ip_version is not None:
             pulumi.set(__self__, "ip_version", ip_version)
         if lang is not None:
             pulumi.set(__self__, "lang", lang)
         if release is not None:
             pulumi.set(__self__, "release", release)
+        if repeat_days is not None:
+            pulumi.set(__self__, "repeat_days", repeat_days)
+        if repeat_end_time is not None:
+            pulumi.set(__self__, "repeat_end_time", repeat_end_time)
+        if repeat_start_time is not None:
+            pulumi.set(__self__, "repeat_start_time", repeat_start_time)
+        if repeat_type is not None:
+            pulumi.set(__self__, "repeat_type", repeat_type)
         if source_ip is not None:
             pulumi.set(__self__, "source_ip", source_ip)
+        if start_time is not None:
+            pulumi.set(__self__, "start_time", start_time)
 
     @property
     @pulumi.getter(name="aclAction")
@@ -91,19 +138,6 @@ class ControlPolicyArgs:
     def acl_action(self, value: pulumi.Input[str]):
         pulumi.set(self, "acl_action", value)
 
-    @property
-    @pulumi.getter(name="applicationName")
-    def application_name(self) -> pulumi.Input[str]:
-        """
-        The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
-        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
-        """
-        return pulumi.get(self, "application_name")
-
-    @application_name.setter
-    def application_name(self, value: pulumi.Input[str]):
-        pulumi.set(self, "application_name", value)
-
     @property
     @pulumi.getter
     def description(self) -> pulumi.Input[str]:
@@ -188,6 +222,32 @@ class ControlPolicyArgs:
     def source_type(self, value: pulumi.Input[str]):
         pulumi.set(self, "source_type", value)
 
+    @property
+    @pulumi.getter(name="applicationName")
+    def application_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        """
+        return pulumi.get(self, "application_name")
+
+    @application_name.setter
+    def application_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "application_name", value)
+
+    @property
+    @pulumi.getter(name="applicationNameLists")
+    def application_name_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The application types supported by the access control policy.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        """
+        return pulumi.get(self, "application_name_lists")
+
+    @application_name_lists.setter
+    def application_name_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "application_name_lists", value)
+
     @property
     @pulumi.getter(name="destPort")
     def dest_port(self) -> Optional[pulumi.Input[str]]:
@@ -224,6 +284,34 @@ class ControlPolicyArgs:
     def dest_port_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "dest_port_type", value)
 
+    @property
+    @pulumi.getter(name="domainResolveType")
+    def domain_resolve_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The domain name resolution method of the access control policy. Valid values:
+        - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+        - `DNS`: DNS-based dynamic resolution.
+        - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        """
+        return pulumi.get(self, "domain_resolve_type")
+
+    @domain_resolve_type.setter
+    def domain_resolve_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "domain_resolve_type", value)
+
+    @property
+    @pulumi.getter(name="endTime")
+    def end_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        """
+        return pulumi.get(self, "end_time")
+
+    @end_time.setter
+    def end_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "end_time", value)
+
     @property
     @pulumi.getter(name="ipVersion")
     def ip_version(self) -> Optional[pulumi.Input[str]]:
@@ -260,6 +348,63 @@ class ControlPolicyArgs:
     def release(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "release", value)
 
+    @property
+    @pulumi.getter(name="repeatDays")
+    def repeat_days(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]:
+        """
+        The days of a week or of a month on which the access control policy takes effect. Valid values:
+        - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+        - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+        > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        """
+        return pulumi.get(self, "repeat_days")
+
+    @repeat_days.setter
+    def repeat_days(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]):
+        pulumi.set(self, "repeat_days", value)
+
+    @property
+    @pulumi.getter(name="repeatEndTime")
+    def repeat_end_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        """
+        return pulumi.get(self, "repeat_end_time")
+
+    @repeat_end_time.setter
+    def repeat_end_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_end_time", value)
+
+    @property
+    @pulumi.getter(name="repeatStartTime")
+    def repeat_start_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "repeat_start_time")
+
+    @repeat_start_time.setter
+    def repeat_start_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_start_time", value)
+
+    @property
+    @pulumi.getter(name="repeatType")
+    def repeat_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+        - `Permanent`: The policy always takes effect.
+        - `None`: The policy takes effect for only once.
+        - `Daily`: The policy takes effect on a daily basis.
+        - `Weekly`: The policy takes effect on a weekly basis.
+        - `Monthly`: The policy takes effect on a monthly basis.
+        """
+        return pulumi.get(self, "repeat_type")
+
+    @repeat_type.setter
+    def repeat_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_type", value)
+
     @property
     @pulumi.getter(name="sourceIp")
     def source_ip(self) -> Optional[pulumi.Input[str]]:
@@ -272,6 +417,18 @@ class ControlPolicyArgs:
     def source_ip(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "source_ip", value)
 
+    @property
+    @pulumi.getter(name="startTime")
+    def start_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "start_time")
+
+    @start_time.setter
+    def start_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "start_time", value)
+
 
 @pulumi.input_type
 class _ControlPolicyState:
@@ -279,6 +436,8 @@ class _ControlPolicyState:
                  acl_action: Optional[pulumi.Input[str]] = None,
                  acl_uuid: Optional[pulumi.Input[str]] = None,
                  application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 create_time: Optional[pulumi.Input[str]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -286,19 +445,29 @@ class _ControlPolicyState:
                  destination: Optional[pulumi.Input[str]] = None,
                  destination_type: Optional[pulumi.Input[str]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  proto: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
                  source: Optional[pulumi.Input[str]] = None,
                  source_ip: Optional[pulumi.Input[str]] = None,
-                 source_type: Optional[pulumi.Input[str]] = None):
+                 source_type: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None):
         """
         Input properties used for looking up and filtering ControlPolicy resources.
         :param pulumi.Input[str] acl_action: The action that Cloud Firewall performs on the traffic. Valid values: `accept`, `drop`, `log`.
         :param pulumi.Input[str] acl_uuid: (Available since v1.148.0) The unique ID of the access control policy.
         :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
                > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        :param pulumi.Input[str] create_time: (Available since v1.232.0) The time when the access control policy was created.
         :param pulumi.Input[str] description: The description of the access control policy.
         :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
         :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
@@ -306,13 +475,33 @@ class _ControlPolicyState:
         :param pulumi.Input[str] destination: The destination address in the access control policy.
         :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
         :param pulumi.Input[str] direction: The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
         :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
         :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
         :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
         :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
         :param pulumi.Input[str] source: The source address in the access control policy.
         :param pulumi.Input[str] source_ip: The source IP address of the request.
         :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         if acl_action is not None:
             pulumi.set(__self__, "acl_action", acl_action)
@@ -320,6 +509,10 @@ class _ControlPolicyState:
             pulumi.set(__self__, "acl_uuid", acl_uuid)
         if application_name is not None:
             pulumi.set(__self__, "application_name", application_name)
+        if application_name_lists is not None:
+            pulumi.set(__self__, "application_name_lists", application_name_lists)
+        if create_time is not None:
+            pulumi.set(__self__, "create_time", create_time)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if dest_port is not None:
@@ -334,6 +527,10 @@ class _ControlPolicyState:
             pulumi.set(__self__, "destination_type", destination_type)
         if direction is not None:
             pulumi.set(__self__, "direction", direction)
+        if domain_resolve_type is not None:
+            pulumi.set(__self__, "domain_resolve_type", domain_resolve_type)
+        if end_time is not None:
+            pulumi.set(__self__, "end_time", end_time)
         if ip_version is not None:
             pulumi.set(__self__, "ip_version", ip_version)
         if lang is not None:
@@ -342,12 +539,22 @@ class _ControlPolicyState:
             pulumi.set(__self__, "proto", proto)
         if release is not None:
             pulumi.set(__self__, "release", release)
+        if repeat_days is not None:
+            pulumi.set(__self__, "repeat_days", repeat_days)
+        if repeat_end_time is not None:
+            pulumi.set(__self__, "repeat_end_time", repeat_end_time)
+        if repeat_start_time is not None:
+            pulumi.set(__self__, "repeat_start_time", repeat_start_time)
+        if repeat_type is not None:
+            pulumi.set(__self__, "repeat_type", repeat_type)
         if source is not None:
             pulumi.set(__self__, "source", source)
         if source_ip is not None:
             pulumi.set(__self__, "source_ip", source_ip)
         if source_type is not None:
             pulumi.set(__self__, "source_type", source_type)
+        if start_time is not None:
+            pulumi.set(__self__, "start_time", start_time)
 
     @property
     @pulumi.getter(name="aclAction")
@@ -386,6 +593,31 @@ class _ControlPolicyState:
     def application_name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "application_name", value)
 
+    @property
+    @pulumi.getter(name="applicationNameLists")
+    def application_name_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The application types supported by the access control policy.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        """
+        return pulumi.get(self, "application_name_lists")
+
+    @application_name_lists.setter
+    def application_name_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "application_name_lists", value)
+
+    @property
+    @pulumi.getter(name="createTime")
+    def create_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        (Available since v1.232.0) The time when the access control policy was created.
+        """
+        return pulumi.get(self, "create_time")
+
+    @create_time.setter
+    def create_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "create_time", value)
+
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[str]]:
@@ -470,6 +702,34 @@ class _ControlPolicyState:
     def direction(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "direction", value)
 
+    @property
+    @pulumi.getter(name="domainResolveType")
+    def domain_resolve_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The domain name resolution method of the access control policy. Valid values:
+        - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+        - `DNS`: DNS-based dynamic resolution.
+        - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        """
+        return pulumi.get(self, "domain_resolve_type")
+
+    @domain_resolve_type.setter
+    def domain_resolve_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "domain_resolve_type", value)
+
+    @property
+    @pulumi.getter(name="endTime")
+    def end_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        """
+        return pulumi.get(self, "end_time")
+
+    @end_time.setter
+    def end_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "end_time", value)
+
     @property
     @pulumi.getter(name="ipVersion")
     def ip_version(self) -> Optional[pulumi.Input[str]]:
@@ -518,6 +778,63 @@ class _ControlPolicyState:
     def release(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "release", value)
 
+    @property
+    @pulumi.getter(name="repeatDays")
+    def repeat_days(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]:
+        """
+        The days of a week or of a month on which the access control policy takes effect. Valid values:
+        - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+        - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+        > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        """
+        return pulumi.get(self, "repeat_days")
+
+    @repeat_days.setter
+    def repeat_days(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]):
+        pulumi.set(self, "repeat_days", value)
+
+    @property
+    @pulumi.getter(name="repeatEndTime")
+    def repeat_end_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        """
+        return pulumi.get(self, "repeat_end_time")
+
+    @repeat_end_time.setter
+    def repeat_end_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_end_time", value)
+
+    @property
+    @pulumi.getter(name="repeatStartTime")
+    def repeat_start_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "repeat_start_time")
+
+    @repeat_start_time.setter
+    def repeat_start_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_start_time", value)
+
+    @property
+    @pulumi.getter(name="repeatType")
+    def repeat_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+        - `Permanent`: The policy always takes effect.
+        - `None`: The policy takes effect for only once.
+        - `Daily`: The policy takes effect on a daily basis.
+        - `Weekly`: The policy takes effect on a weekly basis.
+        - `Monthly`: The policy takes effect on a monthly basis.
+        """
+        return pulumi.get(self, "repeat_type")
+
+    @repeat_type.setter
+    def repeat_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repeat_type", value)
+
     @property
     @pulumi.getter
     def source(self) -> Optional[pulumi.Input[str]]:
@@ -554,6 +871,18 @@ class _ControlPolicyState:
     def source_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "source_type", value)
 
+    @property
+    @pulumi.getter(name="startTime")
+    def start_time(self) -> Optional[pulumi.Input[int]]:
+        """
+        The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "start_time")
+
+    @start_time.setter
+    def start_time(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "start_time", value)
+
 
 class ControlPolicy(pulumi.CustomResource):
     @overload
@@ -562,6 +891,7 @@ class ControlPolicy(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  acl_action: Optional[pulumi.Input[str]] = None,
                  application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -569,13 +899,20 @@ class ControlPolicy(pulumi.CustomResource):
                  destination: Optional[pulumi.Input[str]] = None,
                  destination_type: Optional[pulumi.Input[str]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  proto: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
                  source: Optional[pulumi.Input[str]] = None,
                  source_ip: Optional[pulumi.Input[str]] = None,
                  source_type: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None,
                  __props__=None):
         """
         Provides a Cloud Firewall Control Policy resource.
@@ -621,6 +958,8 @@ class ControlPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] acl_action: The action that Cloud Firewall performs on the traffic. Valid values: `accept`, `drop`, `log`.
         :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
                > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
         :param pulumi.Input[str] description: The description of the access control policy.
         :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
         :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
@@ -628,13 +967,33 @@ class ControlPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] destination: The destination address in the access control policy.
         :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
         :param pulumi.Input[str] direction: The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
         :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
         :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
         :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
         :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
         :param pulumi.Input[str] source: The source address in the access control policy.
         :param pulumi.Input[str] source_ip: The source IP address of the request.
         :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         ...
     @overload
@@ -698,6 +1057,7 @@ class ControlPolicy(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  acl_action: Optional[pulumi.Input[str]] = None,
                  application_name: Optional[pulumi.Input[str]] = None,
+                 application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  dest_port: Optional[pulumi.Input[str]] = None,
                  dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -705,13 +1065,20 @@ class ControlPolicy(pulumi.CustomResource):
                  destination: Optional[pulumi.Input[str]] = None,
                  destination_type: Optional[pulumi.Input[str]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
+                 domain_resolve_type: Optional[pulumi.Input[str]] = None,
+                 end_time: Optional[pulumi.Input[int]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  lang: Optional[pulumi.Input[str]] = None,
                  proto: Optional[pulumi.Input[str]] = None,
                  release: Optional[pulumi.Input[str]] = None,
+                 repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+                 repeat_end_time: Optional[pulumi.Input[str]] = None,
+                 repeat_start_time: Optional[pulumi.Input[str]] = None,
+                 repeat_type: Optional[pulumi.Input[str]] = None,
                  source: Optional[pulumi.Input[str]] = None,
                  source_ip: Optional[pulumi.Input[str]] = None,
                  source_type: Optional[pulumi.Input[str]] = None,
+                 start_time: Optional[pulumi.Input[int]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -724,9 +1091,8 @@ class ControlPolicy(pulumi.CustomResource):
             if acl_action is None and not opts.urn:
                 raise TypeError("Missing required property 'acl_action'")
             __props__.__dict__["acl_action"] = acl_action
-            if application_name is None and not opts.urn:
-                raise TypeError("Missing required property 'application_name'")
             __props__.__dict__["application_name"] = application_name
+            __props__.__dict__["application_name_lists"] = application_name_lists
             if description is None and not opts.urn:
                 raise TypeError("Missing required property 'description'")
             __props__.__dict__["description"] = description
@@ -742,12 +1108,18 @@ class ControlPolicy(pulumi.CustomResource):
             if direction is None and not opts.urn:
                 raise TypeError("Missing required property 'direction'")
             __props__.__dict__["direction"] = direction
+            __props__.__dict__["domain_resolve_type"] = domain_resolve_type
+            __props__.__dict__["end_time"] = end_time
             __props__.__dict__["ip_version"] = ip_version
             __props__.__dict__["lang"] = lang
             if proto is None and not opts.urn:
                 raise TypeError("Missing required property 'proto'")
             __props__.__dict__["proto"] = proto
             __props__.__dict__["release"] = release
+            __props__.__dict__["repeat_days"] = repeat_days
+            __props__.__dict__["repeat_end_time"] = repeat_end_time
+            __props__.__dict__["repeat_start_time"] = repeat_start_time
+            __props__.__dict__["repeat_type"] = repeat_type
             if source is None and not opts.urn:
                 raise TypeError("Missing required property 'source'")
             __props__.__dict__["source"] = source
@@ -755,7 +1127,9 @@ class ControlPolicy(pulumi.CustomResource):
             if source_type is None and not opts.urn:
                 raise TypeError("Missing required property 'source_type'")
             __props__.__dict__["source_type"] = source_type
+            __props__.__dict__["start_time"] = start_time
             __props__.__dict__["acl_uuid"] = None
+            __props__.__dict__["create_time"] = None
         super(ControlPolicy, __self__).__init__(
             'alicloud:cloudfirewall/controlPolicy:ControlPolicy',
             resource_name,
@@ -769,6 +1143,8 @@ class ControlPolicy(pulumi.CustomResource):
             acl_action: Optional[pulumi.Input[str]] = None,
             acl_uuid: Optional[pulumi.Input[str]] = None,
             application_name: Optional[pulumi.Input[str]] = None,
+            application_name_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            create_time: Optional[pulumi.Input[str]] = None,
             description: Optional[pulumi.Input[str]] = None,
             dest_port: Optional[pulumi.Input[str]] = None,
             dest_port_group: Optional[pulumi.Input[str]] = None,
@@ -776,13 +1152,20 @@ class ControlPolicy(pulumi.CustomResource):
             destination: Optional[pulumi.Input[str]] = None,
             destination_type: Optional[pulumi.Input[str]] = None,
             direction: Optional[pulumi.Input[str]] = None,
+            domain_resolve_type: Optional[pulumi.Input[str]] = None,
+            end_time: Optional[pulumi.Input[int]] = None,
             ip_version: Optional[pulumi.Input[str]] = None,
             lang: Optional[pulumi.Input[str]] = None,
             proto: Optional[pulumi.Input[str]] = None,
             release: Optional[pulumi.Input[str]] = None,
+            repeat_days: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
+            repeat_end_time: Optional[pulumi.Input[str]] = None,
+            repeat_start_time: Optional[pulumi.Input[str]] = None,
+            repeat_type: Optional[pulumi.Input[str]] = None,
             source: Optional[pulumi.Input[str]] = None,
             source_ip: Optional[pulumi.Input[str]] = None,
-            source_type: Optional[pulumi.Input[str]] = None) -> 'ControlPolicy':
+            source_type: Optional[pulumi.Input[str]] = None,
+            start_time: Optional[pulumi.Input[int]] = None) -> 'ControlPolicy':
         """
         Get an existing ControlPolicy resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -794,6 +1177,9 @@ class ControlPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] acl_uuid: (Available since v1.148.0) The unique ID of the access control policy.
         :param pulumi.Input[str] application_name: The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
                > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] application_name_lists: The application types supported by the access control policy.
+               > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        :param pulumi.Input[str] create_time: (Available since v1.232.0) The time when the access control policy was created.
         :param pulumi.Input[str] description: The description of the access control policy.
         :param pulumi.Input[str] dest_port: The destination port in the access control policy. **Note:** If `dest_port_type` is set to `port`, you must specify `dest_port`.
         :param pulumi.Input[str] dest_port_group: The name of the destination port address book in the access control policy. **Note:** If `dest_port_type` is set to `group`, you must specify `dest_port_group`.
@@ -801,13 +1187,33 @@ class ControlPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] destination: The destination address in the access control policy.
         :param pulumi.Input[str] destination_type: The type of the destination address in the access control policy. Valid values: `net`, `group`, `domain`, `location`.
         :param pulumi.Input[str] direction: The direction of the traffic to which the access control policy applies. Valid values: `in`, `out`.
+        :param pulumi.Input[str] domain_resolve_type: The domain name resolution method of the access control policy. Valid values:
+               - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+               - `DNS`: DNS-based dynamic resolution.
+               - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        :param pulumi.Input[int] end_time: The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
         :param pulumi.Input[str] ip_version: The IP version supported by the access control policy. Default value: `4`. Valid values:
         :param pulumi.Input[str] lang: The language of the content within the request and response. Valid values: `zh`, `en`.
         :param pulumi.Input[str] proto: The protocol type supported by the access control policy. Valid values: `ANY`, ` TCP`, `UDP`, `ICMP`.
         :param pulumi.Input[str] release: The status of the access control policy. Valid values: `true`, `false`.
+        :param pulumi.Input[Sequence[pulumi.Input[int]]] repeat_days: The days of a week or of a month on which the access control policy takes effect. Valid values:
+               - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+               - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+               > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        :param pulumi.Input[str] repeat_end_time: The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+               > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        :param pulumi.Input[str] repeat_start_time: The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        :param pulumi.Input[str] repeat_type: The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+               - `Permanent`: The policy always takes effect.
+               - `None`: The policy takes effect for only once.
+               - `Daily`: The policy takes effect on a daily basis.
+               - `Weekly`: The policy takes effect on a weekly basis.
+               - `Monthly`: The policy takes effect on a monthly basis.
         :param pulumi.Input[str] source: The source address in the access control policy.
         :param pulumi.Input[str] source_ip: The source IP address of the request.
         :param pulumi.Input[str] source_type: The type of the source address in the access control policy. Valid values: `net`, `group`, `location`.
+        :param pulumi.Input[int] start_time: The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -816,6 +1222,8 @@ class ControlPolicy(pulumi.CustomResource):
         __props__.__dict__["acl_action"] = acl_action
         __props__.__dict__["acl_uuid"] = acl_uuid
         __props__.__dict__["application_name"] = application_name
+        __props__.__dict__["application_name_lists"] = application_name_lists
+        __props__.__dict__["create_time"] = create_time
         __props__.__dict__["description"] = description
         __props__.__dict__["dest_port"] = dest_port
         __props__.__dict__["dest_port_group"] = dest_port_group
@@ -823,13 +1231,20 @@ class ControlPolicy(pulumi.CustomResource):
         __props__.__dict__["destination"] = destination
         __props__.__dict__["destination_type"] = destination_type
         __props__.__dict__["direction"] = direction
+        __props__.__dict__["domain_resolve_type"] = domain_resolve_type
+        __props__.__dict__["end_time"] = end_time
         __props__.__dict__["ip_version"] = ip_version
         __props__.__dict__["lang"] = lang
         __props__.__dict__["proto"] = proto
         __props__.__dict__["release"] = release
+        __props__.__dict__["repeat_days"] = repeat_days
+        __props__.__dict__["repeat_end_time"] = repeat_end_time
+        __props__.__dict__["repeat_start_time"] = repeat_start_time
+        __props__.__dict__["repeat_type"] = repeat_type
         __props__.__dict__["source"] = source
         __props__.__dict__["source_ip"] = source_ip
         __props__.__dict__["source_type"] = source_type
+        __props__.__dict__["start_time"] = start_time
         return ControlPolicy(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -850,13 +1265,30 @@ class ControlPolicy(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="applicationName")
-    def application_name(self) -> pulumi.Output[str]:
+    def application_name(self) -> pulumi.Output[Optional[str]]:
         """
         The application type supported by the access control policy. Valid values: `ANY`, `HTTP`, `HTTPS`, `MQTT`, `Memcache`, `MongoDB`, `MySQL`, `RDP`, `Redis`, `SMTP`, `SMTPS`, `SSH`, `SSL`, `VNC`.
         > **NOTE:** If `proto` is set to `TCP`, you can set `application_name` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name` to `ANY`.
         """
         return pulumi.get(self, "application_name")
 
+    @property
+    @pulumi.getter(name="applicationNameLists")
+    def application_name_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
+        """
+        The application types supported by the access control policy.
+        > **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+        """
+        return pulumi.get(self, "application_name_lists")
+
+    @property
+    @pulumi.getter(name="createTime")
+    def create_time(self) -> pulumi.Output[str]:
+        """
+        (Available since v1.232.0) The time when the access control policy was created.
+        """
+        return pulumi.get(self, "create_time")
+
     @property
     @pulumi.getter
     def description(self) -> pulumi.Output[str]:
@@ -913,6 +1345,26 @@ class ControlPolicy(pulumi.CustomResource):
         """
         return pulumi.get(self, "direction")
 
+    @property
+    @pulumi.getter(name="domainResolveType")
+    def domain_resolve_type(self) -> pulumi.Output[Optional[str]]:
+        """
+        The domain name resolution method of the access control policy. Valid values:
+        - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
+        - `DNS`: DNS-based dynamic resolution.
+        - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
+        """
+        return pulumi.get(self, "domain_resolve_type")
+
+    @property
+    @pulumi.getter(name="endTime")
+    def end_time(self) -> pulumi.Output[Optional[int]]:
+        """
+        The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
+        """
+        return pulumi.get(self, "end_time")
+
     @property
     @pulumi.getter(name="ipVersion")
     def ip_version(self) -> pulumi.Output[str]:
@@ -945,6 +1397,47 @@ class ControlPolicy(pulumi.CustomResource):
         """
         return pulumi.get(self, "release")
 
+    @property
+    @pulumi.getter(name="repeatDays")
+    def repeat_days(self) -> pulumi.Output[Optional[Sequence[int]]]:
+        """
+        The days of a week or of a month on which the access control policy takes effect. Valid values:
+        - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
+        - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
+        > **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
+        """
+        return pulumi.get(self, "repeat_days")
+
+    @property
+    @pulumi.getter(name="repeatEndTime")
+    def repeat_end_time(self) -> pulumi.Output[Optional[str]]:
+        """
+        The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+        > **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
+        """
+        return pulumi.get(self, "repeat_end_time")
+
+    @property
+    @pulumi.getter(name="repeatStartTime")
+    def repeat_start_time(self) -> pulumi.Output[Optional[str]]:
+        """
+        The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "repeat_start_time")
+
+    @property
+    @pulumi.getter(name="repeatType")
+    def repeat_type(self) -> pulumi.Output[str]:
+        """
+        The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+        - `Permanent`: The policy always takes effect.
+        - `None`: The policy takes effect for only once.
+        - `Daily`: The policy takes effect on a daily basis.
+        - `Weekly`: The policy takes effect on a weekly basis.
+        - `Monthly`: The policy takes effect on a monthly basis.
+        """
+        return pulumi.get(self, "repeat_type")
+
     @property
     @pulumi.getter
     def source(self) -> pulumi.Output[str]:
@@ -969,3 +1462,11 @@ class ControlPolicy(pulumi.CustomResource):
         """
         return pulumi.get(self, "source_type")
 
+    @property
+    @pulumi.getter(name="startTime")
+    def start_time(self) -> pulumi.Output[Optional[int]]:
+        """
+        The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+        """
+        return pulumi.get(self, "start_time")
+