Template name
ACS-ALB-BulkyEnableDeletionProtection
Template description
Enables deletion protection for multiple Application Load Balancer (ALB) instances at a time.
Template type
Automated
Owner
Alibaba Cloud
Input parameters
Parameter | Description | Type | Required | Default value | Limit |
loadBalancerIds | The IDs of the ALB instances. | List | Yes | ||
OOSAssumeRole | The RAM role that is assumed by CloudOps Orchestration Service (OOS). | String | Yes | ||
regionId | The region ID. | String | No | {{ ACS::RegionId }} | |
rateControl | The rate control settings. | Json | No | {'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10} |
Output parameters
None
Permission policy that is required to execute the template
{
"Version": "1",
"Statement": [
{
"Action": [
"alb:EnableDeletionProtection"
],
"Resource": "*",
"Effect": "Allow"
}
]
}
References
For more information, see ACS-ALB-BulkyEnableDeletionProtection.yml at GitHub.
Template content
FormatVersion: OOS-2019-06-01
Description:
en: Bulky set loadbalancer deletion protection
name-en: ACS-ALB-BulkyEnableDeletionProtection
categories:
- security
Parameters:
regionId:
Type: String
Label:
en: RegionId
AssociationProperty: RegionId
Default: '{{ ACS::RegionId }}'
loadBalancerIds:
Label:
en: LoadBalancerIds
Type: List
rateControl:
Label:
en: RateControl
Type: Json
AssociationProperty: RateControl
Default:
Mode: Concurrency
MaxErrors: 0
Concurrency: 10
OOSAssumeRole:
Label:
en: OOSAssumeRole
Type: String
RamRole: '{{ OOSAssumeRole }}'
Tasks:
- Name: enableDeletionProtection
Action: ACS::ExecuteAPI
Description:
en: Set loadBalancer deletion protection
Properties:
Service: ALB
API: EnableDeletionProtection
Parameters:
RegionId: '{{ regionId }}'
ResourceId: '{{ ACS::TaskLoopItem }}'
Loop:
RateControl: '{{ rateControl }}'
Items: '{{ loadBalancerIds }}'
Metadata:
ALIYUN::OOS::Interface:
ParameterGroups:
- Parameters:
- regionId
- loadBalancerIds
Label:
default:
en: Select Loadbalancer
- Parameters:
- rateControl
- OOSAssumeRole
Label:
default:
en: Control Options