CloudOps Orchestration Service:ACS-ECS-BulkyAuthorizeSecurityGroup

Nama Templat

ACS-ECS-BulkyAuthorizeSecurityGroup: Menambahkan aturan security group ke beberapa security group sekaligus.

Run now

Deskripsi templat

Menambahkan aturan security group ke beberapa security group secara massal.

Jenis templat

Automation

Pemilik

Alibaba Cloud

Parameter input

Nama parameter	Deskripsi	Tipe	Wajib	Nilai default	Batasan
securityGroupIds	ID dari security group.	List	Ya
ipProtocol	Protokol lapisan transport.	String	Ya
portRange	Range port untuk protokol lapisan transport.	String	Ya
sourceCidrIp	Blok CIDR IPv4 sumber. Contoh: 10.0.0.0/8.	String	Ya
regionId	ID wilayah.	String	Tidak	{{ ACS::RegionId }}
nicType	Tipe NIC.	String	Tidak	intranet
policy	Kebijakan akses. Nilai yang valid: accept (mengizinkan akses) dan drop (menolak akses).	String	Tidak	accept
priority	Prioritas aturan security group. Nilai yang valid: 1 hingga 100.	Number	Tidak	1
rateControl	Pengaturan kontrol konkurensi untuk eksekusi tugas.	Json	Tidak	{‘Mode’: ‘Concurrency’, ‘MaxErrors’: 0, ‘Concurrency’: 10}
OOSAssumeRole	Peran RAM yang diasumsikan oleh Operation Orchestration Service (OOS).	String	Tidak	“”

Parameter output

Tidak ada

Izin yang diperlukan untuk templat ini

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "ecs:AuthorizeSecurityGroup"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Detail

Detail ACS-ECS-BulkyAuthorizeSecurityGroup

Konten Templat

FormatVersion: OOS-2019-06-01
Description:
  en: Adds a security group policy to multiple security groups.
  name-en: ACS-ECS-BulkyAuthorizeSecurityGroup
  categories:
    - instance_manage
    - computenest
Parameters:
  regionId:
    Type: String
    Label:
      en: Region ID
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  securityGroupIds:
    Label:
      en: Security Group IDs
    Type: List
    AssociationProperty: ALIYUN::ECS::SecurityGroup::SecurityGroupId
  ipProtocol:
    Label:
      en: IP Protocol
    Type: String
    AllowedValues:
      - tcp
      - udp
      - icmp
      - gre
      - all
  portRange:
    Label:
      en: Port Range
    Description:
      en: 'The port range. Correct format: 1/200. Incorrect format: 200/1. The valid port range is 1 to 65535 for TCP and UDP protocols. For ICMP, GRE, or when IpProtocol is set to all, the port range must be -1/-1.'
    Type: String
  nicType:
    Label:
      en: NIC Type
    Description:
      en: 'The network interface controller (NIC) type. Valid values: internet (public NIC) and intranet (internal NIC).'
    Type: String
    AllowedValues:
      - internet
      - intranet
    Default: intranet
  policy:
    Label:
      en: Policy
    Description:
      en: 'The access policy. Valid values: accept (allows access) and drop (denies access).'
    Type: String
    AllowedValues:
      - accept
      - drop
    Default: accept
  priority:
    Label:
      en: Priority
    Description:
      en: 'The priority of the security group rule. Valid values: 1 to 100.'
    Type: Number
    MinValue: 1
    MaxValue: 100
    Default: 1
  sourceCidrIp:
    Label:
      en: Source CIDR Block
    Description:
      en: 'The source IPv4 CIDR block. Example: 10.0.0.0/8.'
    Type: String
  rateControl:
    Label:
      en: Rate Control
    Description:
      en: 'The concurrency rate for task execution.'
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: OOS Assume Role
    Description:
      en: 'The RAM role that OOS assumes.'
    Type: String
    Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
  - Name: AuthorizeSecurityGroup
    Action: 'ACS::ExecuteAPI'
    Description:
      en: Adds a security group policy to multiple security groups.
    Properties:
      Service: ECS
      API: AuthorizeSecurityGroup
      Parameters:
        RegionId: '{{ regionId }}'
        IpProtocol: '{{ ipProtocol }}'
        PortRange: '{{ portRange }}'
        NicType: '{{ nicType }}'
        Policy: '{{ policy }}'
        Priority: '{{ priority }}'
        SourceCidrIp: '{{ sourceCidrIp }}'
        SecurityGroupId: '{{ ACS::TaskLoopItem }}'
    Loop:
      RateControl: '{{ rateControl }}'
      Items: '{{ securityGroupIds }}'
Metadata:
  ALIYUN::OOS::Interface:
    ParameterGroups:
      - Parameters:
          - regionId
          - securityGroupIds
          - ipProtocol
          - portRange
          - nicType
          - policy
          - priority
          - sourceCidrIp
        Label:
          default:
            en: Configure Parameters
      - Parameters:
          - rateControl
          - OOSAssumeRole
        Label:
          default:
            en: Control Options