ACS-SLB-BulkySetLoadBalancerModificationProtection - CloudOps Orchestration Service

Template name

ACS-SLB-BulkySetLoadBalancerModificationProtection

Execute Now

Template description

Enables the configuration read-only mode for multiple Server Load Balancer (SLB) instances at a time.

Template type

Automated

Owner

Alibaba Cloud

Input parameters

Parameter	Description	Type	Required	Default value	Limit
loadBalancerIds	The IDs of the SLB instances.	List	Yes
regionId	The region ID.	String	No	{{ ACS::RegionId }}
rateControl	The rate control settings.	Json	No	{'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10}
OOSAssumeRole	The Resource Access Management (RAM) role that is assumed by CloudOps Orchestration Service (OOS).	String	No	""

Output parameters

None

Permission policy that is required to execute the template

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "slb:SetLoadBalancerModificationProtection"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

References

For more information, see ACS-SLB-BulkySetLoadBalancerModificationProtection at GitHub.

Template content

FormatVersion: OOS-2019-06-01
Description:
  en: Set loadbalancer modification protection
  zh-cn: 批量启用负载均衡实例配置修改保护
  name-en: ACS-SLB-BulkySetLoadBalancerModificationProtection
  name-zh-cn: 批量启用负载均衡实例配置修改保护
  categories:
    - security
Parameters:
  regionId:
    Type: String
    Label:
      en: RegionId
      zh-cn: 地域ID
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  loadBalancerIds:
    Label:
      en: LoadBalancerIds
      zh-cn: 负载均衡实例ID列表
    Type: List
  rateControl:
    Label:
      en: RateControl
      zh-cn: 任务执行的并发比率
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: OOSAssumeRole
      zh-cn: OOS扮演的RAM角色
    Type: String
    Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
  - Name: setLoadBalancerModificationProtection
    Action: 'ACS::ExecuteAPI'
    Description:
      en: Set loadbalancer modification protection
      zh-cn: 启用负载均衡实例配置修改保护
    Properties:
      Service: SLB
      API: SetLoadBalancerModificationProtection
      Parameters:
        RegionId: '{{ regionId }}'
        LoadBalancerId: '{{ ACS::TaskLoopItem }}'
        ModificationProtectionStatus: ConsoleProtection
    Loop:
      RateControl: '{{ rateControl }}'
      Items: '{{ loadBalancerIds }}'