ACS-RDS-BulkyEnableBackupLogPolicy - CloudOps Orchestration Service

Nama template

ACS-RDS-BulkyEnableBackupLogPolicy mengaktifkan cadangan log untuk beberapa instance RDS.

Jalankan Sekarang

Deskripsi template

Mengonfigurasi pengaturan pencadangan log dalam kebijakan pencadangan instance ApsaraDB RDS.

Tipe template

Otomatis

Pemilik

Alibaba Cloud

Parameter input

Parameter	Deskripsi	Tipe data	Diperlukan	Nilai default	Batasan
OOSAssumeRole	Peran RAM yang akan diasumsikan oleh Operation Orchestration Service (OOS).	String	Ya
regionId	ID Wilayah.	String	No	{{ ACS::RegionId }}
rateControl	Konkurensi eksekusi task	Json	No	{'Type': 'ResourceIds', 'ResourceIds': [], 'RegionId': '{{ regionId }}'}
instanceIds	Daftar ID instans.	List	Tidak	[]
rateControl	Laju konkurensi untuk eksekusi task.	Json	Tidak	{'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10}

Parameter output

Tidak tersedia.

Kebijakan izin yang diperlukan untuk mengeksekusi template

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "rds:DescribeDBInstances",
                "rds:ModifyBackupPolicy"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "oos:GetApplicationGroup"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Detail

ACS-RDS-BulkyEnableBackupLogPolicy

Isi Template

FormatVersion: OOS-2019-06-01
Description:
  en: Enables log backups for RDS instances.
  name-en: ACS-RDS-BulkyEnableBackupLogPolicy
  categories:
    - security
    - rds
Parameters:
  regionId:
    Label:
      en: RegionId
    Type: String
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  targets:
    Type: Json
    Label:
      en: TargetInstance
    AssociationProperty: Targets
    AssociationPropertyMetadata:
      ResourceType: ALIYUN::RDS::Instance
      RegionId: regionId
    Default:
      Type: ResourceIds
      ResourceIds: []
      RegionId: '{{ regionId }}'
  instanceIds:
    Label:
      en: The IDs of the RDS instances
    Type: List
    Default: []
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${targets}
            - {}
  rateControl:
    Label:
      en: RateControl
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: OOSAssumeRole
    Type: String
RamRole: '{{ OOSAssumeRole }}'
Conditions:
  instanceId:
    Fn::Equals:
      - '{{ instanceIds }}'
      - []
Tasks:
  - Name: getInstance
    When: instanceId
    Description:
      en: Gets the RDS instances.
    Action: ACS::SelectTargets
    Properties:
      ResourceType: ALIYUN::RDS::Instance
      RegionId: '{{regionId}}'
      Filters:
        - '{{ targets }}'
    Outputs:
      instanceIds:
        Type: List
        ValueSelector: Instances.Instance[].InstanceId
  - Name: enableBackupPolicyForLog
    Action: ACS::ExecuteAPI
    Description:
      en: Enables the log backup setting for the instance backup policy.
    Properties:
      Service: RDS
      API: ModifyBackupPolicy
      Parameters:
        RegionId: '{{ regionId }}'
        DBInstanceId: '{{ ACS::TaskLoopItem }}'
        BackupPolicyMode: LogBackupPolicy
        EnableBackupLog: '1'
    Loop:
      RateControl: '{{ rateControl }}'
      Items:
        Fn::If:
          - Fn::Equals:
              - '{{instanceIds}}'
              - []
          - '{{ getInstance.instanceIds }}'
          - '{{ instanceIds}}'
Metadata:
  ALIYUN::OOS::Interface:
    ParameterGroups:
      - Parameters:
          - regionId
          - instanceIds
          - targets
        Label:
          default:
            en: Select Instances
      - Parameters:
          - rateControl
          - OOSAssumeRole
        Label:
          default:
            en: Advanced Options