ACS-WAF-BulkyModifyLogServiceStatus - CloudOps Orchestration Service

Habilita en lote la función de recolección de registros para varios nombres de dominio en Web Application Firewall (WAF).

Template name

ACS-WAF-BulkyModifyLogServiceStatus

Ejecutar ahora

Template description

Enables the log collection feature for multiple domain names at a time.

Template type

Automated

Owner

Alibaba Cloud

Input parameters

Parameter	Description	Type	Required	Default value	Limit
domains	The domain names for which to enable log collection.	List	Yes
instanceId	The ID of the Web Application Firewall (WAF) instance.	String	Yes
regionId	The region ID.	String	No	{{ ACS::RegionId }}
rateControl	The rate control settings.	Json	No	{'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10}
OOSAssumeRole	The RAM role assumed by CloudOps Orchestration Service (OOS).	String	No	""

Output parameters

None

Permission policy that is required to execute the template

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "waf-openapi:ModifyLogServiceStatus"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

References

Para obtener más información, consulte ACS-WAF-BulkyModifyLogServiceStatus en GitHub.

Template content

FormatVersion: OOS-2019-06-01
Description:
  en: Modify log service status
  name-en: ACS-WAF-BulkyModifyLogServiceStatus
  categories:
    - security
Parameters:
  regionId:
    Type: String
    Label:
      en: RegionId
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  domains:
    Type: List
    Label:
      en: Domains
  instanceId:
    Label:
      en: InstanceId
    Type: String
  rateControl:
    Label:
      en: RateControl
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: OOSAssumeRole
    Type: String
    Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
  - Name: modifyLogServiceStatus
    Action: ACS::ExecuteAPI
    Description:
      en: Modify log service status
    Properties:
      Service: WAF-OPENAPI
      API: ModifyLogServiceStatus
      Parameters:
        RegionId: '{{ regionId }}'
        Domain: '{{ ACS::TaskLoopItem }}'
        Enabled: 1
        InstanceId: '{{ instanceId }}'
    Loop:
      RateControl: '{{ rateControl }}'
      Items: '{{ domains }}'