ACS-RDS-BulkyModifyDBInstanceDeletionProtection - CloudOps Orchestration Service: Central de Documentação do Alibaba Cloud

Nome do modelo

ACS-RDS-BulkyModifyDBInstanceDeletionProtection: ativa a proteção contra exclusão de instâncias RDS em lote

Executar agora

Descrição do modelo

Ativa a proteção contra exclusão de instâncias RDS em lote.

Tipo de modelo

Automation

Proprietário

Alibaba Cloud

Parâmetros de entrada

Nome do parâmetro	Descrição	Tipo	Obrigatório	Valor padrão	Restrições
OOSAssumeRole	Função RAM que o OOS deve assumir.	String	Sim
regionId	ID da região.	String	Não	{{ ACS::RegionId }}
targets	Instâncias de destino.	Json	Não	{"Type": "ResourceIds", "ResourceIds": [], "RegionId": "{{ regionId }}"}
instanceIds	Lista de IDs das instâncias RDS.	List	Não	[]
rateControl	Taxa de concorrência para execução da tarefa.	Json	Não	{"Mode": "Concurrency", "MaxErrors": 0, "Concurrency": 10}

Parâmetros de resposta

Nenhum

Política de acesso necessária

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "rds:DescribeDBInstances",
                "rds:ModifyDBInstanceDeletionProtection"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "oos:GetApplicationGroup"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Detalhes

Detalhes do ACS-RDS-BulkyModifyDBInstanceDeletionProtection

Conteúdo do modelo

FormatVersion: OOS-2019-06-01
Description:
  en: Bulky enable deletion protection for instances
  zh-cn: Enables deletion protection for RDS instances in batches.
  name-en: ACS-RDS-BulkyModifyDBInstanceDeletionProtection
  name-zh-cn: Enable Deletion Protection for RDS Instances in Batches
  categories:
    - security
    - rds
Parameters:
  regionId:
    Type: String
    Label:
      en: RegionId
      zh-cn: Region
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  targets:
    Type: Json
    Label:
      en: TargetInstance
      zh-cn: Target Instance
    AssociationProperty: Targets
    AssociationPropertyMetadata:
      ResourceType: ALIYUN::RDS::Instance
      RegionId: regionId
    Default:
      Type: ResourceIds
      ResourceIds: []
      RegionId: '{{ regionId }}'
  instanceIds:
    Label:
      en: InstanceIds
      zh-cn: Instance IDs
    Type: List
    Default: []
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${targets}
            - {}
  rateControl:
    Label:
      en: RateControl
      zh-cn: Rate Control
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: OOSAssumeRole
      zh-cn: OOS Assume Role
    Type: String
RamRole: '{{ OOSAssumeRole }}'
Conditions:
  instanceId:
    Fn::Equals:
      - '{{ instanceIds }}'
      - []
Tasks:
  - Name: getInstance
    When: instanceId
    Description:
      en: Get the RDS instances
      zh-cn: Gets the RDS instances.
    Action: ACS::SelectTargets
    Properties:
      ResourceType: ALIYUN::RDS::Instance
      RegionId: '{{regionId}}'
      Filters:
        - '{{ targets }}'
    Outputs:
      instanceIds:
        Type: List
        ValueSelector: Instances.Instance[].InstanceId
  - Name: enableDBInstanceDeletionProtection
    Action: ACS::ExecuteApi
    Description: '{"en":"Enables deletion protection for the RDS instance.","zh-cn":"Enables deletion protection for the instance."}'
    Properties:
      Service: RDS
      API: ModifyDBInstanceDeletionProtection
      Parameters:
        DBInstanceId: '{{ ACS::TaskLoopItem }}'
        DeletionProtection: true
        RegionId: '{{ regionId }}'
    Loop:
      Items:
        Fn::If:
          - Fn::Equals:
              - '{{instanceIds}}'
              - []
          - '{{ getInstance.instanceIds }}'
          - '{{ instanceIds}}'
      RateControl: '{{ rateControl }}'
    OnError: ACS::END
    OnSuccess: ACS::NEXT
Metadata:
  ALIYUN::OOS::Interface:
    ParameterGroups:
      - Parameters:
          - regionId
          - instanceIds
          - targets
        Label:
          default:
            zh-cn: Select Instances
            en: Select RDS Instances
      - Parameters:
          - rateControl
          - OOSAssumeRole
        Label:
          default:
            zh-cn: Advanced Options
            en: Control Options