ALIYUN::ResourceManager::ControlPolicy digunakan untuk membuat kebijakan kontrol kustom.
Sintaksis
{
"Type": "ALIYUN::ResourceManager::ControlPolicy",
"Properties": {
"Description": String,
"PolicyDocument": String,
"ControlPolicyName": String,
"EffectScope": String
}
}Properti
| Properti | Tipe | Diperlukan | Dapat Diedit | Deskripsi | Kendala |
| Deskripsi | String | Tidak | Ya | Deskripsi dari kebijakan kontrol. | Deskripsi harus memiliki panjang 1 hingga 1.024 karakter dan dapat berisi huruf, angka, garis bawah (_), dan tanda hubung (-). Harus dimulai dengan huruf. |
| DokumenKebijakan | String | Ya | Ya | Dokumen dari kebijakan kontrol. | Dokumen dapat memiliki panjang hingga 2.048 karakter. Untuk informasi lebih lanjut, lihat Contoh-contoh kebijakan kontrol akses kustom dan Bahasa-bahasa kebijakan kontrol akses. |
| NamaKebijakanKontrol | String | Ya | Ya | Nama dari kebijakan kontrol. | Nama harus memiliki panjang 1 hingga 128 karakter dan dapat berisi huruf, angka, dan tanda hubung (-). Harus dimulai dengan huruf. |
| CakupanEfek | String | Ya | Tidak | Cakupan efektif dari kebijakan kontrol. | Atur nilainya menjadi RAM. Nilai RAM menunjukkan bahwa kebijakan kontrol berlaku untuk pengguna dan peran Resource Access Management (RAM). |
Parameter respons
Fn::GetAtt
- TipeKebijakan: Jenis kebijakan kontrol.
- Deskripsi: Deskripsi kebijakan kontrol.
- JumlahLampiran: Jumlah referensi kebijakan kontrol.
- DokumenKebijakan: Dokumen kebijakan kontrol.
- NamaKebijakanKontrol: Nama kebijakan kontrol.
- CakupanEfek: Cakupan efektif kebijakan kontrol.
- IDKebijakan: ID kebijakan kontrol.
Contoh
JSON format
{
"ROSTemplateFormatVersion": "2015-09-01",
"Parameters": {
"Description": {
"Type": "String",
"Description": "Deskripsi"
},
"PolicyDocument": {
"Type": "String",
"Description": "DokumenKebijakan"
},
"ControlPolicyName": {
"Type": "String",
"Description": "NamaKebijakan"
},
"EffectScope": {
"Type": "String",
"Description": "CakupanEfek"
}
},
"Resources": {
"ResourceManagerControlPolicy": {
"Type": "ALIYUN::ResourceManager::ControlPolicy",
"Properties": {
"Description": {
"Ref": "Description"
},
"PolicyDocument": {
"Ref": "PolicyDocument"
},
"ControlPolicyName": {
"Ref": "ControlPolicyName"
},
"EffectScope": {
"Ref": "EffectScope"
}
}
}
},
"Outputs": {
"PolicyType": {
"Description": "TipeKebijakan",
"Value": {
"Fn::GetAtt": [
"ResourceManagerControlPolicy",
"PolicyType"
]
}
},
"Description": {
"Description": "Deskripsi",
"Value": {
"Fn::GetAtt": [
"ResourceManagerControlPolicy",
"Description"
]
}
},
"AttachmentCount": {
"Description": "JumlahLampiran",
"Value": {
"Fn::GetAtt": [
"ResourceManagerControlPolicy",
"AttachmentCount"
]
}
},
"PolicyDocument": {
"Description": "DokumenKebijakan",
"Value": {
"Fn::GetAtt": [
"ResourceManagerControlPolicy",
"PolicyDocument"
]
}
},
"ControlPolicyName": {
"Description": "NamaKebijakan",
"Value": {
"Fn::GetAtt": [
"ResourceManagerControlPolicy",
"ControlPolicyName"
]
}
},
"EffectScope": {
"Description": "CakupanEfek",
"Value": {
"Fn::GetAtt": [
"ResourceManagerControlPolicy",
"EffectScope"
]
}
},
"PolicyId": {
"Description": "IDKebijakan",
"Value": {
"Fn::GetAtt": [
"ResourceManagerControlPolicy",
"PolicyId"
]
}
}
}
}YAML format
ROSTemplateFormatVersion: '2015-09-01'
Parameters:
ControlPolicyName:
Description: NamaKebijakan
Type: String
Description:
Description: Deskripsi
Type: String
EffectScope:
Description: CakupanEfek
Type: String
PolicyDocument:
Description: DokumenKebijakan
Type: String
Resources:
ResourceManagerControlPolicy:
Properties:
ControlPolicyName:
Ref: ControlPolicyName
Description:
Ref: Description
EffectScope:
Ref: EffectScope
PolicyDocument:
Ref: PolicyDocument
Type: ALIYUN::ResourceManager::ControlPolicy
Outputs:
AttachmentCount:
Description: JumlahLampiran
Value:
Fn::GetAtt:
- ResourceManagerControlPolicy
- AttachmentCount
ControlPolicyName:
Description: NamaKebijakan
Value:
Fn::GetAtt:
- ResourceManagerControlPolicy
- ControlPolicyName
Description:
Description: Deskripsi
Value:
Fn::GetAtt:
- ResourceManagerControlPolicy
- Description
EffectScope:
Description: CakupanEfek
Value:
Fn::GetAtt:
- ResourceManagerControlPolicy
- EffectScope
PolicyDocument:
Description: DokumenKebijakan
Value:
Fn::GetAtt:
- ResourceManagerControlPolicy
- PolicyDocument
PolicyId:
Description: IDKebijakan
Value:
Fn::GetAtt:
- ResourceManagerControlPolicy
- PolicyId
PolicyType:
Description: TipeKebijakan
Value:
Fn::GetAtt:
- ResourceManagerControlPolicy
- PolicyType