全部产品
Search
文档中心

资源编排:ALIYUN::ThreatDetection::Instance

更新时间:Oct 27, 2023

ALIYUN::ThreatDetection::Instance类型用于创建云安全中心实例。

语法

{
  "Type": "ALIYUN::ThreatDetection::Instance",
  "Properties": {
    "ThreatAnalysis": String,
    "SasSlsStorage": String,
    "ContainerImageScan": String,
    "ThreatAnalysisSwitch": String,
    "VCore": String,
    "RenewPeriod": Integer,
    "SasSc": String,
    "SasCspmSwitch": String,
    "BuyNumber": String,
    "SasWebguardBoolean": String,
    "HoneypotSwitch": String,
    "PaymentType": String,
    "SasSdk": String,
    "SasAntiRansomware": String,
    "SasWebguardOrderNum": String,
    "RenewalStatus": String,
    "ProductType": String,
    "VulSwitch": String,
    "Period": Integer,
    "RaspCount": String,
    "VulCount": String,
    "VersionCode": String,
    "ModifyType": String,
    "SasCspm": String,
    "SasSdkSwitch": String,
    "RenewalPeriodUnit": String,
    "ContainerImageScanNew": String,
    "Honeypot": String
  }
}

属性

属性名称

类型

必须

允许更新

描述

约束

ThreatAnalysis

String

威胁分析日志存储量。

取值区间:[0,9999999999]。

说明

必须threat_analysis_switch=1时,才能购买此模块,步长是10,即只能填写10的倍数。

SasSlsStorage

String

日志分析存储容量。

单位:GB。取值区间:[0,600000]。

说明

步长是10,即只能填写10的倍数。

ContainerImageScan

String

容器镜像安全扫描。

取值区间:[0,200000]。

说明

步长是20,即只能填写20的倍数。

ThreatAnalysisSwitch

String

是否配置威胁分析。

取值:

  • 0:否。

  • 1:是。

VCore

String

核数。

RenewPeriod

Integer

自动续费周期。

单位为月。

说明

当设置RenewalStatusAutoRenewal时,该参数必须设置。

SasSc

String

是否配置安全大屏。

取值:

  • true:是。

  • false:否。

SasCspmSwitch

String

云平台配置检查开关。

取值:

  • 0:否。

  • 1:是。

BuyNumber

String

保有服务器台数。

SasWebguardBoolean

String

是否配置网页防篡改开关。

取值:

  • 0:否。

  • 1:是。

HoneypotSwitch

String

是否配置云蜜罐。

取值:

  • 1:是。

  • 2:否。

PaymentType

String

付费类型。

取值:

  • 包年包月。

    您可以通过下列形式定义包年包月类型:Subscription、PrePaid、Prepaid、PrePay、PREPAY。

  • 按量付费。

    您可以通过下列形式定义按量付费类型:PayOnDemand、PayAsYouGo、PostPaid、PayOnDemand、Postpaid、PostPay、POSTPAY。

SasSdk

String

恶意文件检测次数。

单位:万次。取值区间:[10,9999999999]。

说明

必须sas_sdk_switch=1时,才能购买此模块,步长是10,即只能填写10的倍数。

SasAntiRansomware

String

防勒索容量。

单位:GB。取值区间:[0,9999999999]。

说明

步长是10,即只能填写10的倍数。

SasWebguardOrderNum

String

防篡改授权数。

取值区间:[0,9999]。

说明

必须sas_webguard_boolean=1时,才能购买此模块。

RenewalStatus

String

自动续费状态。

取值:

  • AutoRenewal:自动续费。

  • ManualRenewal(默认值):手动续费。

ProductType

String

产品类型。

仅中国站需要设置为sas,国际站无需设置。

VulSwitch

String

是否配置漏洞修复开关。

取值:

  • 0:否。

  • 1:是。

    说明

    当version_code取值为level7或level10的时候,才允许购买,其他版本无需单独购买付费。

Period

Integer

预付费周期。

单位为月,按年付费产品请输入12的整数倍。

说明

当创建预付费实例时,必须设置。

RaspCount

String

应用防护授权数。

取值区间:[1,100000000]。

VulCount

String

漏洞修复次数。

取值区间:[20,100000000]。

说明

必须vul_switch=1时,才能购买此模块,当version_code取值为level7或level10的时候,才允许购买,其他版本无需单独购买付费。

VersionCode

String

云安全中心版本选择。

取值:

  • level7:防病毒版。

  • level3:高级版。

  • level2:企业版。

  • level8:旗舰版。

  • level10:仅采购增值服务。

ModifyType

String

变配类型。

取值

  • Upgrade:升级。

  • Downgrade:降级。

SasCspm

String

云平台配置检查扫描次数。

取值区间:[1000,9999999999]。

说明

必须sas_cspm_switch=1时,才能购买此模块。步长是100,即只能填写10的倍数。

SasSdkSwitch

String

是否配置恶意文件检测SDK。

取值:

  • 0:否。

  • 1:是。

RenewalPeriodUnit

String

自动续费周期单位。

取值:

  • M:月。

  • Y:年。

说明

当RenewalStatus= AutoRenewal时,必须设置。

ContainerImageScanNew

String

容器镜像安全扫描次数。

取值区间:[0,200000]。

说明

步长是20,即只能填写20的倍数。

Honeypot

String

云蜜罐授权数。

取值区间:[20,500]。

说明

必须honeypot_switch=1时,才能购买此模块,20个起售。

返回值

Fn::GetAtt

  • ThreatAnalysis:威胁分析日志存储量。

  • SasSlsStorage:日志分析存储容量。

  • ContainerImageScan:容器镜像安全扫描。

  • ThreatAnalysisSwitch:威胁分析。

  • VCore:核数。

  • RenewPeriod:自动续费周期

  • SasSc:安全大屏。

  • SasCspmSwitch:云平台配置检查开关。

  • BuyNumber:保有服务器台数。

  • SasWebguardBoolean:网页防篡改开关。

  • HoneypotSwitch:云蜜罐。

  • PaymentType:付费类型

  • SasSdk:恶意文件检测次数。

  • SasAntiRansomware:防勒索容量。

  • InstanceId:资源实例ID。

  • SasWebguardOrderNum:防篡改授权数。

  • CreateTime:创建时间

  • RenewalStatus:自动续费状态。

  • VulSwitch:漏洞修复开关。

  • RaspCount:应用防护授权数。

  • VulCount:漏洞修复次数

  • VersionCode:云安全中心版本选择。

  • SasCspm:云平台配置检查扫描次数

  • SasSdkSwitch:恶意文件检测SDK。

  • RenewalPeriodUnit:自动续费周期单位

  • ContainerImageScanNew:容器镜像安全扫描次数。

  • Honeypot:云蜜罐授权数。

示例

  • YAML格式

    ROSTemplateFormatVersion: '2015-09-01'
    Parameters:
      BuyNumber:
        Description:
          en: Number of servers.
        Type: String
      ContainerImageScan:
        Description:
          en: 'Container Image security scan. Interval type, value interval:[0,200000].
    
            > The step size is 20, that is, only multiples of 20 can be filled in.'
        Type: String
      ContainerImageScanNew:
        Description:
          en: 'Container Image security scan. Interval type, value interval:[0,200000].
    
            > The step size is 20, that is, only multiples of 20 can be filled in.'
        Type: String
      Honeypot:
        Description:
          en: 'Number of cloud honeypot licenses. Interval type, value interval:[20,500].
    
            > This module can only be purchased when honeypot_switch = 1, starting with
            20.'
        Type: String
      HoneypotSwitch:
        AllowedValues:
        - '1'
        - '2'
        Description:
          en: 'Cloud honeypot. Value:
    
            - 1: Yes.
    
            - 2: No.'
        Type: String
      ModifyType:
        AllowedValues:
        - Upgrade
        - Downgrade
        Description:
          en: 'Change configuration type, value
    
            - Upgrade: Upgrade.
    
            - Downgrade: Downgrade.'
        Type: String
      PaymentType:
        AllowedValues:
        - PayAsYouGo
        - PostPaid
        - PayOnDemand
        - Postpaid
        - PostPay
        - POSTPAY
        - Subscription
        - PrePaid
        - PrePay
        - Prepaid
        - PREPAY
        Description:
          en: The payment type of the resource.
        Type: String
      Period:
        Description:
          en: 'Prepaid cycle. The unit is Monthly, please enter an integer multiple of
            12 for annual paid products.
    
            > must be set when creating a prepaid instance.'
        Type: Number
      ProductType:
        Description:
          en: Product type, only China station needs to be set to sas, international station
            does not need to set.
        Type: String
      RaspCount:
        Description:
          en: Number of application protection licenses. Interval type, value interval:[1,100000000].
        Type: String
      RenewPeriod:
        Description:
          en: 'Automatic renewal cycle, in months.
    
            > When **RenewalStatus** is set to **AutoRenewal**, it must be set.'
        Type: Number
      RenewalPeriodUnit:
        AllowedValues:
        - M
        - Y
        Description:
          en: 'Automatic renewal period unit, value:
    
            - M: month.
    
            - Y: years.
    
            > Must be set when RenewalStatus = AutoRenewal.'
        Type: String
      RenewalStatus:
        AllowedValues:
        - AutoRenewal
        - ManualRenewal
        Description:
          en: 'Automatic renewal status, value:
    
            - AutoRenewal: automatic renewal.
    
            - ManualRenewal: manual renewal.
    
            Default ManualRenewal.'
        Type: String
      SasAntiRansomware:
        Description:
          en: 'Anti-ransomware capacity. Unit: GB. Interval type, value interval:[0,9999999999].
    
            > The step size is 10, that is, only multiples of 10 can be filled in.'
        Type: String
      SasCspm:
        Description:
          en: 'Cloud platform configuration check scan times, interval type, value range:[1000,9999999999].
    
            > You must have sas_cspm_switch = 1 to purchase this module. The step size
            is 100, that is, only multiples of 10 can be filled in.'
        Type: String
      SasCspmSwitch:
        AllowedValues:
        - '0'
        - '1'
        Description:
          en: 'Cloud platform configuration check switch. Value:
    
            - 0: No.
    
            - 1: Yes.'
        Type: String
      SasSc:
        AllowedValues:
        - 'false'
        - 'true'
        Description:
          en: 'Security screen. Value:
    
            - true: Yes.
    
            - false: No.'
        Type: String
      SasSdk:
        Description:
          en: 'Number of malicious file detections. Unit: 10,000 times. Interval type,
            value interval:[10,9999999999].
    
            > This module can only be purchased when sas_sdk_switch = 1. The step size
            is 10, that is, only multiples of 10 can be filled in.'
        Type: String
      SasSdkSwitch:
        AllowedValues:
        - '0'
        - '1'
        Description:
          en: Malicious file detection SDK.
        Type: String
      SasSlsStorage:
        Description:
          en: 'Log analysis storage capacity. Unit: GB. Interval type, value interval:[0,600000].
    
            > The step size is 10, that is, only multiples of 10 can be filled in.'
        Type: String
      SasWebguardBoolean:
        AllowedValues:
        - '0'
        - '1'
        Description:
          en: 'Web tamper-proof switch. Value:
    
            - 0: No.
    
            - 1: Yes.'
        Type: String
      SasWebguardOrderNum:
        Description:
          en: 'Tamper-proof authorization number. Value:
    
            - 0: No
    
            - 1: Yes.'
        Type: String
      ThreatAnalysis:
        Description:
          en: 'Threat Analysis log storage capacity. Interval type, value interval:[0,9999999999].
    
            > This module can only be purchased when Threat_analysis_switch = 1. The step
            size is 10, that is, only multiples of 10 can be filled in.'
        Type: String
      ThreatAnalysisSwitch:
        AllowedValues:
        - '0'
        - '1'
        Description:
          en: 'Threat analysis. Value:
    
            - 0: No.
    
            - 1: Yes.'
        Type: String
      VCore:
        Description:
          en: Number of cores.
        Type: String
      VersionCode:
        AllowedValues:
        - level2
        - level8
        - level7
        - level3
        - level10
        Description:
          en: 'Select the security center version. Value:
    
            - level7: Antivirus Edition.
    
            - level3: Premium version.
    
            - level2: Enterprise Edition.
    
            - level8: Ultimate.
    
            - level10: Purchase value-added services only.'
        Type: String
      VulCount:
        Description:
          en: 'Vulnerability repair times, interval type, value range:[20,100000000].
    
            > This module can only be purchased when vul_switch = 1. Only when the version_code
            value is level7 or level10. other versions do not need to be purchased separately.'
        Type: String
      VulSwitch:
        AllowedValues:
        - '0'
        - '1'
        Description:
          en: 'Vulnerability fix switch. Value:
    
            - 0: No.
    
            - 1: Yes.
    
            > When the value of version_code is level7 or level10, the purchase is allowed.
            Other versions do not need to be purchased separately.'
        Type: String
    Resources:
      ExtensionResource:
        Properties:
          BuyNumber:
            Ref: BuyNumber
          ContainerImageScan:
            Ref: ContainerImageScan
          ContainerImageScanNew:
            Ref: ContainerImageScanNew
          Honeypot:
            Ref: Honeypot
          HoneypotSwitch:
            Ref: HoneypotSwitch
          ModifyType:
            Ref: ModifyType
          PaymentType:
            Ref: PaymentType
          Period:
            Ref: Period
          ProductType:
            Ref: ProductType
          RaspCount:
            Ref: RaspCount
          RenewPeriod:
            Ref: RenewPeriod
          RenewalPeriodUnit:
            Ref: RenewalPeriodUnit
          RenewalStatus:
            Ref: RenewalStatus
          SasAntiRansomware:
            Ref: SasAntiRansomware
          SasCspm:
            Ref: SasCspm
          SasCspmSwitch:
            Ref: SasCspmSwitch
          SasSc:
            Ref: SasSc
          SasSdk:
            Ref: SasSdk
          SasSdkSwitch:
            Ref: SasSdkSwitch
          SasSlsStorage:
            Ref: SasSlsStorage
          SasWebguardBoolean:
            Ref: SasWebguardBoolean
          SasWebguardOrderNum:
            Ref: SasWebguardOrderNum
          ThreatAnalysis:
            Ref: ThreatAnalysis
          ThreatAnalysisSwitch:
            Ref: ThreatAnalysisSwitch
          VCore:
            Ref: VCore
          VersionCode:
            Ref: VersionCode
          VulCount:
            Ref: VulCount
          VulSwitch:
            Ref: VulSwitch
        Type: ALIYUN::ThreatDetection::Instance
    Outputs:
      BuyNumber:
        Description: Number of servers.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - BuyNumber
      ContainerImageScan:
        Description: Container Image security scan. Interval type, value interval:[0,200000].
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - ContainerImageScan
      ContainerImageScanNew:
        Description: Container Image security scan. Interval type, value interval:[0,200000].
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - ContainerImageScanNew
      CreateTime:
        Description: The creation time of the resource.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - CreateTime
      Honeypot:
        Description: Number of cloud honeypot licenses. Interval type, value interval:[20,500].
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - Honeypot
      HoneypotSwitch:
        Description: Cloud honeypot.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - HoneypotSwitch
      InstanceId:
        Description: The first ID of the resource.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - InstanceId
      PaymentType:
        Description: The payment type of the resource.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - PaymentType
      RaspCount:
        Description: Number of application protection licenses. Interval type, value interval:[1,100000000].
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - RaspCount
      RenewPeriod:
        Description: Automatic renewal cycle, in months.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - RenewPeriod
      RenewalPeriodUnit:
        Description: Automatic renewal period unit, value:.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - RenewalPeriodUnit
      RenewalStatus:
        Description: Automatic renewal status, value:.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - RenewalStatus
      SasAntiRansomware:
        Description: 'Anti-ransomware capacity. Unit: GB. Interval type, value interval:[0,9999999999].'
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasAntiRansomware
      SasCspm:
        Description: Cloud platform configuration check scan times, interval type, value
          range:[1000,9999999999].
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasCspm
      SasCspmSwitch:
        Description: Cloud platform configuration check switch.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasCspmSwitch
      SasSc:
        Description: Security screen.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasSc
      SasSdk:
        Description: 'Number of malicious file detections. Unit: 10,000 times. Interval
          type, value interval:[10,9999999999].'
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasSdk
      SasSdkSwitch:
        Description: Malicious file detection SDK.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasSdkSwitch
      SasSlsStorage:
        Description: 'Log analysis storage capacity. Unit: GB. Interval type, value interval:[0,600000].'
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasSlsStorage
      SasWebguardBoolean:
        Description: Web tamper-proof switch.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasWebguardBoolean
      SasWebguardOrderNum:
        Description: Tamper-proof authorization number.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - SasWebguardOrderNum
      ThreatAnalysis:
        Description: Threat Analysis log storage capacity. Interval type, value interval:[0,9999999999].
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - ThreatAnalysis
      ThreatAnalysisSwitch:
        Description: Threat analysis.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - ThreatAnalysisSwitch
      VCore:
        Description: Number of cores.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - VCore
      VersionCode:
        Description: Select the security center version.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - VersionCode
      VulCount:
        Description: Vulnerability repair times, interval type, value range:[20,100000000].
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - VulCount
      VulSwitch:
        Description: Vulnerability fix switch.
        Value:
          Fn::GetAtt:
          - ExtensionResource
          - VulSwitch
                            
  • JSON格式

    {
      "ROSTemplateFormatVersion": "2015-09-01",
      "Parameters": {
        "ThreatAnalysis": {
          "Type": "String",
          "Description": {
            "en": "Threat Analysis log storage capacity. Interval type, value interval:[0,9999999999].\n> This module can only be purchased when Threat_analysis_switch = 1. The step size is 10, that is, only multiples of 10 can be filled in."
          }
        },
        "SasSlsStorage": {
          "Type": "String",
          "Description": {
            "en": "Log analysis storage capacity. Unit: GB. Interval type, value interval:[0,600000].\n> The step size is 10, that is, only multiples of 10 can be filled in."
          }
        },
        "ContainerImageScan": {
          "Type": "String",
          "Description": {
            "en": "Container Image security scan. Interval type, value interval:[0,200000].\n> The step size is 20, that is, only multiples of 20 can be filled in."
          }
        },
        "ThreatAnalysisSwitch": {
          "Type": "String",
          "Description": {
            "en": "Threat analysis. Value:\n- 0: No.\n- 1: Yes."
          },
          "AllowedValues": [
            "0",
            "1"
          ]
        },
        "VCore": {
          "Type": "String",
          "Description": {
            "en": "Number of cores."
          }
        },
        "RenewPeriod": {
          "Type": "Number",
          "Description": {
            "en": "Automatic renewal cycle, in months.\n> When **RenewalStatus** is set to **AutoRenewal**, it must be set."
          }
        },
        "SasSc": {
          "Type": "String",
          "Description": {
            "en": "Security screen. Value:\n- true: Yes.\n- false: No."
          },
          "AllowedValues": [
            "false",
            "true"
          ]
        },
        "SasCspmSwitch": {
          "Type": "String",
          "Description": {
            "en": "Cloud platform configuration check switch. Value:\n- 0: No.\n- 1: Yes."
          },
          "AllowedValues": [
            "0",
            "1"
          ]
        },
        "BuyNumber": {
          "Type": "String",
          "Description": {
            "en": "Number of servers."
          }
        },
        "SasWebguardBoolean": {
          "Type": "String",
          "Description": {
            "en": "Web tamper-proof switch. Value:\n- 0: No.\n- 1: Yes."
          },
          "AllowedValues": [
            "0",
            "1"
          ]
        },
        "HoneypotSwitch": {
          "Type": "String",
          "Description": {
            "en": "Cloud honeypot. Value:\n- 1: Yes.\n- 2: No."
          },
          "AllowedValues": [
            "1",
            "2"
          ]
        },
        "PaymentType": {
          "Type": "String",
          "Description": {
            "en": "The payment type of the resource."
          },
          "AllowedValues": [
            "PayAsYouGo",
            "PostPaid",
            "PayOnDemand",
            "Postpaid",
            "PostPay",
            "POSTPAY",
            "Subscription",
            "PrePaid",
            "PrePay",
            "Prepaid",
            "PREPAY"
          ]
        },
        "SasSdk": {
          "Type": "String",
          "Description": {
            "en": "Number of malicious file detections. Unit: 10,000 times. Interval type, value interval:[10,9999999999].\n> This module can only be purchased when sas_sdk_switch = 1. The step size is 10, that is, only multiples of 10 can be filled in."
          }
        },
        "SasAntiRansomware": {
          "Type": "String",
          "Description": {
            "en": "Anti-ransomware capacity. Unit: GB. Interval type, value interval:[0,9999999999].\n> The step size is 10, that is, only multiples of 10 can be filled in."
          }
        },
        "SasWebguardOrderNum": {
          "Type": "String",
          "Description": {
            "en": "Tamper-proof authorization number. Value:\n- 0: No\n- 1: Yes."
          }
        },
        "RenewalStatus": {
          "Type": "String",
          "Description": {
            "en": "Automatic renewal status, value:\n- AutoRenewal: automatic renewal.\n- ManualRenewal: manual renewal.\nDefault ManualRenewal."
          },
          "AllowedValues": [
            "AutoRenewal",
            "ManualRenewal"
          ]
        },
        "ProductType": {
          "Type": "String",
          "Description": {
            "en": "Product type, only China station needs to be set to sas, international station does not need to set."
          }
        },
        "VulSwitch": {
          "Type": "String",
          "Description": {
            "en": "Vulnerability fix switch. Value:\n- 0: No.\n- 1: Yes.\n> When the value of version_code is level7 or level10, the purchase is allowed. Other versions do not need to be purchased separately."
          },
          "AllowedValues": [
            "0",
            "1"
          ]
        },
        "Period": {
          "Type": "Number",
          "Description": {
            "en": "Prepaid cycle. The unit is Monthly, please enter an integer multiple of 12 for annual paid products.\n> must be set when creating a prepaid instance."
          }
        },
        "RaspCount": {
          "Type": "String",
          "Description": {
            "en": "Number of application protection licenses. Interval type, value interval:[1,100000000]."
          }
        },
        "VulCount": {
          "Type": "String",
          "Description": {
            "en": "Vulnerability repair times, interval type, value range:[20,100000000].\n> This module can only be purchased when vul_switch = 1. Only when the version_code value is level7 or level10. other versions do not need to be purchased separately."
          }
        },
        "VersionCode": {
          "Type": "String",
          "Description": {
            "en": "Select the security center version. Value:\n- level7: Antivirus Edition.\n- level3: Premium version.\n- level2: Enterprise Edition.\n- level8: Ultimate.\n- level10: Purchase value-added services only."
          },
          "AllowedValues": [
            "level2",
            "level8",
            "level7",
            "level3",
            "level10"
          ]
        },
        "SasCspm": {
          "Type": "String",
          "Description": {
            "en": "Cloud platform configuration check scan times, interval type, value range:[1000,9999999999].\n> You must have sas_cspm_switch = 1 to purchase this module. The step size is 100, that is, only multiples of 10 can be filled in."
          }
        },
        "ModifyType": {
          "Type": "String",
          "Description": {
            "en": "Change configuration type, value\n- Upgrade: Upgrade.\n- Downgrade: Downgrade."
          },
          "AllowedValues": [
            "Upgrade",
            "Downgrade"
          ]
        },
        "SasSdkSwitch": {
          "Type": "String",
          "Description": {
            "en": "Malicious file detection SDK."
          },
          "AllowedValues": [
            "0",
            "1"
          ]
        },
        "RenewalPeriodUnit": {
          "Type": "String",
          "Description": {
            "en": "Automatic renewal period unit, value:\n- M: month.\n- Y: years.\n> Must be set when RenewalStatus = AutoRenewal."
          },
          "AllowedValues": [
            "M",
            "Y"
          ]
        },
        "ContainerImageScanNew": {
          "Type": "String",
          "Description": {
            "en": "Container Image security scan. Interval type, value interval:[0,200000].\n> The step size is 20, that is, only multiples of 20 can be filled in."
          }
        },
        "Honeypot": {
          "Type": "String",
          "Description": {
            "en": "Number of cloud honeypot licenses. Interval type, value interval:[20,500].\n> This module can only be purchased when honeypot_switch = 1, starting with 20."
          }
        }
      },
      "Resources": {
        "ExtensionResource": {
          "Type": "ALIYUN::ThreatDetection::Instance",
          "Properties": {
            "ThreatAnalysis": {
              "Ref": "ThreatAnalysis"
            },
            "SasSlsStorage": {
              "Ref": "SasSlsStorage"
            },
            "ContainerImageScan": {
              "Ref": "ContainerImageScan"
            },
            "ThreatAnalysisSwitch": {
              "Ref": "ThreatAnalysisSwitch"
            },
            "VCore": {
              "Ref": "VCore"
            },
            "RenewPeriod": {
              "Ref": "RenewPeriod"
            },
            "SasSc": {
              "Ref": "SasSc"
            },
            "SasCspmSwitch": {
              "Ref": "SasCspmSwitch"
            },
            "BuyNumber": {
              "Ref": "BuyNumber"
            },
            "SasWebguardBoolean": {
              "Ref": "SasWebguardBoolean"
            },
            "HoneypotSwitch": {
              "Ref": "HoneypotSwitch"
            },
            "PaymentType": {
              "Ref": "PaymentType"
            },
            "SasSdk": {
              "Ref": "SasSdk"
            },
            "SasAntiRansomware": {
              "Ref": "SasAntiRansomware"
            },
            "SasWebguardOrderNum": {
              "Ref": "SasWebguardOrderNum"
            },
            "RenewalStatus": {
              "Ref": "RenewalStatus"
            },
            "ProductType": {
              "Ref": "ProductType"
            },
            "VulSwitch": {
              "Ref": "VulSwitch"
            },
            "Period": {
              "Ref": "Period"
            },
            "RaspCount": {
              "Ref": "RaspCount"
            },
            "VulCount": {
              "Ref": "VulCount"
            },
            "VersionCode": {
              "Ref": "VersionCode"
            },
            "SasCspm": {
              "Ref": "SasCspm"
            },
            "ModifyType": {
              "Ref": "ModifyType"
            },
            "SasSdkSwitch": {
              "Ref": "SasSdkSwitch"
            },
            "RenewalPeriodUnit": {
              "Ref": "RenewalPeriodUnit"
            },
            "ContainerImageScanNew": {
              "Ref": "ContainerImageScanNew"
            },
            "Honeypot": {
              "Ref": "Honeypot"
            }
          }
        }
      },
      "Outputs": {
        "ThreatAnalysis": {
          "Description": "Threat Analysis log storage capacity. Interval type, value interval:[0,9999999999].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "ThreatAnalysis"
            ]
          }
        },
        "SasSlsStorage": {
          "Description": "Log analysis storage capacity. Unit: GB. Interval type, value interval:[0,600000].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasSlsStorage"
            ]
          }
        },
        "ContainerImageScan": {
          "Description": "Container Image security scan. Interval type, value interval:[0,200000].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "ContainerImageScan"
            ]
          }
        },
        "ThreatAnalysisSwitch": {
          "Description": "Threat analysis.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "ThreatAnalysisSwitch"
            ]
          }
        },
        "VCore": {
          "Description": "Number of cores.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "VCore"
            ]
          }
        },
        "RenewPeriod": {
          "Description": "Automatic renewal cycle, in months.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "RenewPeriod"
            ]
          }
        },
        "SasSc": {
          "Description": "Security screen.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasSc"
            ]
          }
        },
        "SasCspmSwitch": {
          "Description": "Cloud platform configuration check switch.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasCspmSwitch"
            ]
          }
        },
        "BuyNumber": {
          "Description": "Number of servers.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "BuyNumber"
            ]
          }
        },
        "SasWebguardBoolean": {
          "Description": "Web tamper-proof switch.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasWebguardBoolean"
            ]
          }
        },
        "HoneypotSwitch": {
          "Description": "Cloud honeypot.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "HoneypotSwitch"
            ]
          }
        },
        "PaymentType": {
          "Description": "The payment type of the resource.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "PaymentType"
            ]
          }
        },
        "SasSdk": {
          "Description": "Number of malicious file detections. Unit: 10,000 times. Interval type, value interval:[10,9999999999].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasSdk"
            ]
          }
        },
        "SasAntiRansomware": {
          "Description": "Anti-ransomware capacity. Unit: GB. Interval type, value interval:[0,9999999999].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasAntiRansomware"
            ]
          }
        },
        "InstanceId": {
          "Description": "The first ID of the resource.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "InstanceId"
            ]
          }
        },
        "SasWebguardOrderNum": {
          "Description": "Tamper-proof authorization number.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasWebguardOrderNum"
            ]
          }
        },
        "CreateTime": {
          "Description": "The creation time of the resource.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "CreateTime"
            ]
          }
        },
        "RenewalStatus": {
          "Description": "Automatic renewal status, value:.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "RenewalStatus"
            ]
          }
        },
        "VulSwitch": {
          "Description": "Vulnerability fix switch.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "VulSwitch"
            ]
          }
        },
        "RaspCount": {
          "Description": "Number of application protection licenses. Interval type, value interval:[1,100000000].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "RaspCount"
            ]
          }
        },
        "VulCount": {
          "Description": "Vulnerability repair times, interval type, value range:[20,100000000].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "VulCount"
            ]
          }
        },
        "VersionCode": {
          "Description": "Select the security center version.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "VersionCode"
            ]
          }
        },
        "SasCspm": {
          "Description": "Cloud platform configuration check scan times, interval type, value range:[1000,9999999999].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasCspm"
            ]
          }
        },
        "SasSdkSwitch": {
          "Description": "Malicious file detection SDK.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "SasSdkSwitch"
            ]
          }
        },
        "RenewalPeriodUnit": {
          "Description": "Automatic renewal period unit, value:.",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "RenewalPeriodUnit"
            ]
          }
        },
        "ContainerImageScanNew": {
          "Description": "Container Image security scan. Interval type, value interval:[0,200000].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "ContainerImageScanNew"
            ]
          }
        },
        "Honeypot": {
          "Description": "Number of cloud honeypot licenses. Interval type, value interval:[20,500].",
          "Value": {
            "Fn::GetAtt": [
              "ExtensionResource",
              "Honeypot"
            ]
          }
        }
      }
    }