gcloud compute network-firewall-policies create FIREWALL_POLICY [--description=DESCRIPTION] [--policy-type=POLICY_TYPE] [--global | --region=REGION] [GCLOUD_WIDE_FLAG …]
gcloud compute network-firewall-policies create is used to create
network firewall policies. A network firewall policy is a set of rules that
controls access to various resources.
my-policy under project with ID
test-project, run:
gcloud compute network-firewall-policies create my-policy --project=test-project --global
To create a regional network firewall policy named
under project with ID
my-region-policy, in region
test-project, run:
my-region
gcloud compute network-firewall-policies create my-region-policy --project=test-project --region=my-regionFIREWALL_POLICY--description=DESCRIPTION--policy-type=POLICY_TYPEPOLICY_TYPE must be one
of: VPC_POLICY, RDMA_ROCE_POLICY.
--global--region=REGIONcompute/region property value for this command invocation.
--access-token-file,
--account, --billing-project,
--configuration,
--flags-file,
--flatten, --format, --help, --impersonate-service-account,
--log-http,
--project, --quiet, --trace-token, --user-output-enabled,
--verbosity.
Run $ gcloud help for details.
gcloud alpha compute network-firewall-policies creategcloud beta compute network-firewall-policies creategcloud preview compute network-firewall-policies create
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.