gcloud app firewall-rules create

NAME: gcloud app firewall-rules create - creates a firewall rule
SYNOPSIS: gcloud app firewall-rules create PRIORITY --action=ACTION --source-range=SOURCE_RANGE [--description=DESCRIPTION] [GCLOUD_WIDE_FLAG …]
DESCRIPTION: Creates a firewall rule.
EXAMPLES: To create a new App Engine firewall rule, run:
gcloud app firewall-rules create 1234 --source-range='2001:db8::/32' --action=deny --description='block traffic from the example range.'
POSITIONAL ARGUMENTS: PRIORITY

An integer between 1 and 2^32-1 which indicates the evaluation order of rules. Lowest priority rules are evaluated first. The handle default may also be used to refer to the final rule at priority 2^32-1 which is always present in a set of rules.
REQUIRED FLAGS: --action=ACTION

Allow or deny matched traffic. ACTION must be one of: ALLOW, DENY.

--source-range=SOURCE_RANGE

An IP address or range in CIDR notation or the * wildcard to match all traffic.
OPTIONAL FLAGS: --description=DESCRIPTION

A text description of the rule.
GCLOUD WIDE FLAGS: These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES: This variant is also available:
gcloud beta app firewall-rules create