Skip to content

SecurityGroupEgressProps

Properties for defining a SecurityGroupEgress.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ecs-securitygroupegress

Initializer 

import com.aliyun.ros.cdk.ecs.SecurityGroupEgressProps;
SecurityGroupEgressProps.builder()
    .ipProtocol(java.lang.String)
    .ipProtocol(IResolvable)
    .portRange(java.lang.String)
    .portRange(IResolvable)
//  .description(java.lang.String)
//  .description(IResolvable)
//  .destCidrIp(java.lang.String)
//  .destCidrIp(IResolvable)
//  .destGroupId(java.lang.String)
//  .destGroupId(IResolvable)
//  .destGroupOwnerId(java.lang.String)
//  .destGroupOwnerId(IResolvable)
//  .destPrefixListId(java.lang.String)
//  .destPrefixListId(IResolvable)
//  .ipv6DestCidrIp(java.lang.String)
//  .ipv6DestCidrIp(IResolvable)
//  .nicType(java.lang.String)
//  .nicType(IResolvable)
//  .policy(java.lang.String)
//  .policy(IResolvable)
//  .priority(java.lang.Number)
//  .priority(IResolvable)
//  .securityGroupId(java.lang.String)
//  .securityGroupId(IResolvable)
    .build();

Properties

Name Type Description
ipProtocol java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property ipProtocol: Ip protocol for in rule.
portRange java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property portRange: Ip protocol relative port range.
description java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property description: Description of the security group rule, [1, 512] characters.
destCidrIp java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destCidrIp: The destination IPv4 CIDR block to which you want to control access.
destGroupId java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destGroupId: The destination security group ID to which access permissions need to be set.
destGroupOwnerId java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destGroupOwnerId: When setting security group rules across accounts, the Ali Cloud account ID of the destination security group.
destPrefixListId java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destPrefixListId: The ID of the destination prefix list to which you want to control access.
ipv6DestCidrIp java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property ipv6DestCidrIp: Destination IPv6 CIDR address block for which access rights need to be set.
nicType java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property nicType: Network type, could be 'internet' or 'intranet'.
policy java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access).
priority java.lang.Number OR com.aliyun.ros.cdk.core.IResolvable Property priority: Authorization policies priority range[1, 100].
securityGroupId java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property securityGroupId: Id of the security group.

ipProtocolRequired 

public java.lang.Object getIpProtocol();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property ipProtocol: Ip protocol for in rule.

portRangeRequired 

public java.lang.Object getPortRange();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property portRange: Ip protocol relative port range.

For tcp and udp, the port rang is [1,65535], using format '1/200'For icmp|gre|all protocel, the port range should be '-1/-1'

descriptionOptional 

public java.lang.Object getDescription();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property description: Description of the security group rule, [1, 512] characters.

The default is empty.

destCidrIpOptional 

public java.lang.Object getDestCidrIp();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destCidrIp: The destination IPv4 CIDR block to which you want to control access.

CIDR blocks and IPv4 addresses are supported.

destGroupIdOptional 

public java.lang.Object getDestGroupId();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destGroupId: The destination security group ID to which access permissions need to be set.

Set at least one of the DestGroupId, DestCidrIp, Ipv6DestCidrIp, or DestPrefixListId parameters.

  • If DestGroupId is specified without the DestCidrIp parameter, the NicType parameter can only take the value intranet.
  • If both DestGroupId and DestCidrIp are specified, DestCidrIp is assumed to prevail. You should pay attention to:
  • Enterprise Security groups do not support authorized security group access.
  • The maximum number of authorized security groups supported by ordinary security groups is 20.

destGroupOwnerIdOptional 

public java.lang.Object getDestGroupOwnerId();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destGroupOwnerId: When setting security group rules across accounts, the Ali Cloud account ID of the destination security group.

  • If neither DestGroupOwnerId nor DestGroupOwnerAccount is set, it is considered to set the access rights of your other security group.
  • If you have set the parameter DestCidrIp, the parameter DestGroupOwnerId is invalid.

destPrefixListIdOptional 

public java.lang.Object getDestPrefixListId();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destPrefixListId: The ID of the destination prefix list to which you want to control access.

You can call the DescribePrefixLists operation to query the IDs of available prefix lists.Take note of the following items: If a security group is in the classic network, you cannot configure prefix lists in the security group rules. For information about the limits on security groups and prefix lists, see the "Security group limits" in Limits. If you specify DestCidrIp, Ipv6DestCidrIp, or DestGroupId, DestPrefixListId is ignored.

ipv6DestCidrIpOptional 

public java.lang.Object getIpv6DestCidrIp();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property ipv6DestCidrIp: Destination IPv6 CIDR address block for which access rights need to be set.

CIDR format and IPv6 format IP address range are supported.

nicTypeOptional 

public java.lang.Object getNicType();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property nicType: Network type, could be 'internet' or 'intranet'.

Default value is internet.

policyOptional 

public java.lang.Object getPolicy();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access).

Default value is accept.

priorityOptional 

public java.lang.Object getPriority();
  • Type: java.lang.Number OR com.aliyun.ros.cdk.core.IResolvable

Property priority: Authorization policies priority range[1, 100].

securityGroupIdOptional 

public java.lang.Object getSecurityGroupId();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property securityGroupId: Id of the security group.