Active SQL Explorer et l'audit pour plusieurs instances ApsaraDB RDS.
Nom du modèle
ACS-RDS-BulkyModifySQLCollectorPolicy : active SQL Explorer (Audit SQL) pour les instances RDS.
Description du modèle
Active SQL Explorer et l'audit pour les instances ApsaraDB RDS.
Type de modèle
Automatisé
Propriétaire
Alibaba Cloud
Paramètres d'entrée
|
Paramètre |
description |
Type de données |
Obligatoire |
Valeur par défaut |
Limite |
|
regionId |
Instance cible |
String |
Non |
{{ ACS::RegionId }} |
|
|
OOSAssumeRole |
Les instances cibles. |
JSON |
Non |
{'Type': 'ResourceIds', 'ResourceIds': [], 'RegionId': '{{ regionId }}'} |
|
|
instanceIds |
Les ID des instances ApsaraDB RDS. |
List |
Non |
[] |
|
|
rateControl |
Taux de concurrence |
JSON |
Non |
{'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10} |
|
|
OOSAssumeRole |
Rôle RAM assumé par OOS. |
String |
Non |
"" |
Paramètres de sortie
S.O.
permissions requises
{
"Version": "1",
"Statement": [
{
"Action": [
"rds:DescribeDBInstances",
"rds:ModifySQLCollectorPolicy"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"oos:GetApplicationGroup"
],
"Resource": "*",
"Effect": "Allow"
}
]
}
Détails
ACS-RDS-BulkyModifySQLCollectorPolicy
Contenu du modèle
FormatVersion: OOS-2019-06-01
Description:
en: Enables the SQL Explorer and SQL Audit features for ApsaraDB RDS instances.
name-en: ACS-RDS-BulkyModifySQLCollectorPolicy
categories:
- security
- rds
Parameters:
regionId:
Type: String
Label:
en: RegionId
AssociationProperty: RegionId
Default: '{{ ACS::RegionId }}'
targets:
Type: Json
Label:
en: TargetInstance
AssociationProperty: Targets
AssociationPropertyMetadata:
ResourceType: ALIYUN::RDS::Instance
RegionId: regionId
Default:
Type: ResourceIds
ResourceIds: []
RegionId: '{{ regionId }}'
instanceIds:
Label:
en: InstanceIds
Type: List
Default: []
AssociationProperty: ALIYUN::RDS::Instance::InstanceId
AssociationPropertyMetadata:
RegionId: regionId
Visible:
Condition:
Fn::Equals:
- ${targets}
- {}
rateControl:
Label:
en: RateControl
Type: Json
AssociationProperty: RateControl
Default:
Mode: Concurrency
MaxErrors: 0
Concurrency: 10
OOSAssumeRole:
Label:
en: OOSAssumeRole
Type: String
Default: ''
RamRole: '{{ OOSAssumeRole }}'
Conditions:
instanceId:
Fn::Equals:
- '{{ instanceIds }}'
- []
Tasks:
- Name: getInstance
When: instanceId
Description:
en: Retrieves the specified ApsaraDB RDS instances.
Action: ACS::SelectTargets
Properties:
ResourceType: ALIYUN::RDS::Instance
RegionId: '{{regionId}}'
Filters:
- '{{ targets }}'
Outputs:
instanceIds:
Type: List
ValueSelector: Instances.Instance[].InstanceId
- Name: modifySQLCollectorPolicy
Action: 'ACS::ExecuteAPI'
Description:
en: Enables the SQL collector policy for the ApsaraDB RDS instances.
Properties:
Service: RDS
API: ModifySQLCollectorPolicy
Parameters:
RegionId: '{{ regionId }}'
DBInstanceId: '{{ ACS::TaskLoopItem }}'
SQLCollectorStatus: Enable
Loop:
RateControl: '{{ rateControl }}'
Items:
Fn::If:
- Fn::Equals:
- '{{instanceIds}}'
- []
- '{{ getInstance.instanceIds }}'
- '{{ instanceIds}}'