Create firewall policy
Creates a firewall policy.
URI
/v2.0/fw/firewall_policies
HTTP method
POST
Request parameter
Key | Description | Type | Required/optional |
---|---|---|---|
audited | When this is set to "True" by the policy owner, it indicates that the firewall policy has been audited. This attribute is used in the audit workflow for firewall policies. As this attribute is set to "False" whenever changes are made to a firewall policy or a related firewall rule, it is necessary to explicitly set it to "True" using an update operation. CAUTION: The "auditid" parameter is a flag function that can be used to confirm whether the firewall policy has been audited. It has no effect on the operation of the firewall.
|
xsd:bool | Optional |
description | Description of the firewall policy (Up to 255 characters) | xsd:string | Optional |
firewall_rules | List indicating the order of firewall rule ID application. The rules of firewalls are applied in the order they are displayed in this list. | xsd:list | Optional |
name | Name of the firewall policy (Up to 255 characters) It is not required to be unique. |
xsd:string | Optional |
availability_zone | Availability zone name If the security group is omitted, the resource will be created in the default availability zone. |
xsd:string | Optional |
Example request
{
"firewall_policy": {
"firewall_rules": [
"8722e0e0-9cc9-4490-9660-8c9a5732fbb0"
],
"name": "test-policy",
"availability_zone": "AZ1"
}
}
Response status
Status code | Description |
---|---|
201 | Normal response codes |
Unauthorized (401) | Error response codes |
Response body (normal status)
{
"firewall_policy": {
"audited": false,
"description": "",
"firewall_rules": [
"8722e0e0-9cc9-4490-9660-8c9a5732fbb0"
],
"id": "c69933c1-b472-44f9-8226-30dc4ffd454c",
"name": "test-policy",
"shared": false,
"tenant_id": "45977fa2dbd7482098dd68d0d8970117",
"availability_zone": "AZ1"
}
}
Description of response body (normal status)
Item | Description |
---|---|
audited | When this is set to "True" by the policy owner, it indicates that the firewall policy has been audited. This attribute is used in the audit workflow for firewall policies. As this attribute is set to "False" whenever changes are made to a firewall policy or a related firewall rule, it is necessary to explicitly set it to "True" using an update operation. |
description | Description of the firewall policy (Up to 1024 characters) |
firewall_rules | List indicating the order of firewall rule ID application. The rules of firewalls are applied in the order they are displayed in this list. |
id | Firewall policy ID |
name | Name of the firewall policy (Up to 255 characters). It is not required to be unique. |
shared | Indicates whether to share this firewall rule among all projects. This value is always "False". |
tenant_id | Owner of the firewall policy. The only person who can specify a project identifier other than that of their own project is an administrator. |
availability_zone | Availability zone name |