Skip to content

TrFirewall

This class encapsulates and extends the ROS resource type ALIYUN::CLOUDFW::TrFirewall, which is used to create a virtual private cloud (VPC) firewall for a transit router.

Initializers

import ros_cdk_cloudfw
ros_cdk_cloudfw.TrFirewall(
  scope: Construct,
  id: str,
  cen_id: typing.Union[str, IResolvable],
  firewall_name: typing.Union[str, IResolvable],
  region_no: typing.Union[str, IResolvable],
  route_mode: typing.Union[str, IResolvable],
  transit_router_id: typing.Union[str, IResolvable],
  firewall_description: typing.Union[str, IResolvable] = None,
  firewall_subnet_cidr: typing.Union[str, IResolvable] = None,
  firewall_vpc_cidr: typing.Union[str, IResolvable] = None,
  firewall_vpc_id: typing.Union[str, IResolvable] = None,
  firewall_vswitch_id: typing.Union[str, IResolvable] = None,
  tr_attachment_master_cidr: typing.Union[str, IResolvable] = None,
  tr_attachment_master_zone: typing.Union[str, IResolvable] = None,
  tr_attachment_slave_cidr: typing.Union[str, IResolvable] = None,
  tr_attachment_slave_zone: typing.Union[str, IResolvable] = None,
  enable_resource_property_constraint: bool = None
)
Name Type Description
scope ros_cdk_core.Construct No description.
id str No description.
cen_id typing.Union[str, ros_cdk_core.IResolvable] Property cenId: The ID of the Cloud Enterprise Network (CEN) instance.
firewall_name typing.Union[str, ros_cdk_core.IResolvable] Property firewallName: The name of the firewall.
region_no typing.Union[str, ros_cdk_core.IResolvable] Property regionNo: The region ID of the route router.
route_mode typing.Union[str, ros_cdk_core.IResolvable] Property routeMode: The routing mode of the VPC firewall.
transit_router_id typing.Union[str, ros_cdk_core.IResolvable] Property transitRouterId: The ID of the transit router.
firewall_description typing.Union[str, ros_cdk_core.IResolvable] Property firewallDescription: The description of the firewall.
firewall_subnet_cidr typing.Union[str, ros_cdk_core.IResolvable] Property firewallSubnetCidr: The subnet CIDR block of the VPC in which the ENI of the firewall is stored in automatic mode.
firewall_vpc_cidr typing.Union[str, ros_cdk_core.IResolvable] Property firewallVpcCidr: The CIDR block that is allocated to the VPC created for the VPC firewall in automatic mode.
firewall_vpc_id typing.Union[str, ros_cdk_core.IResolvable] Property firewallVpcId: The ID of the VPC in which the ENI associated with the VPC firewall is created in manual mode.
firewall_vswitch_id typing.Union[str, ros_cdk_core.IResolvable] Property firewallVswitchId: The ID of the vSwitch that is used to create the ENI in manual mode.
tr_attachment_master_cidr typing.Union[str, ros_cdk_core.IResolvable] Property trAttachmentMasterCidr: The primary subnet CIDR block that the VPC uses to connect to the transit router in automatic mode.
tr_attachment_master_zone typing.Union[str, ros_cdk_core.IResolvable] Property trAttachmentMasterZone: The primary zone for the vSwitch.
tr_attachment_slave_cidr typing.Union[str, ros_cdk_core.IResolvable] Property trAttachmentSlaveCidr: The secondary subnet CIDR block that the VPC uses to connect to the transit router in automatic mode.
tr_attachment_slave_zone typing.Union[str, ros_cdk_core.IResolvable] Property trAttachmentSlaveZone: The secondary zone for the vSwitch.
enable_resource_property_constraint bool No description.

scopeRequired

  • Type: ros_cdk_core.Construct

idRequired

  • Type: str

cen_idRequired

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property cenId: The ID of the Cloud Enterprise Network (CEN) instance.


firewall_nameRequired

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallName: The name of the firewall.


region_noRequired

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property regionNo: The region ID of the route router.


route_modeRequired

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property routeMode: The routing mode of the VPC firewall.

Valid values: managed: automatic mode manual: manual mode


transit_router_idRequired

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property transitRouterId: The ID of the transit router.


firewall_descriptionOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallDescription: The description of the firewall.


firewall_subnet_cidrOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallSubnetCidr: The subnet CIDR block of the VPC in which the ENI of the firewall is stored in automatic mode.


firewall_vpc_cidrOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVpcCidr: The CIDR block that is allocated to the VPC created for the VPC firewall in automatic mode.


firewall_vpc_idOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVpcId: The ID of the VPC in which the ENI associated with the VPC firewall is created in manual mode.


firewall_vswitch_idOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVswitchId: The ID of the vSwitch that is used to create the ENI in manual mode.


tr_attachment_master_cidrOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property trAttachmentMasterCidr: The primary subnet CIDR block that the VPC uses to connect to the transit router in automatic mode.


tr_attachment_master_zoneOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property trAttachmentMasterZone: The primary zone for the vSwitch.


tr_attachment_slave_cidrOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property trAttachmentSlaveCidr: The secondary subnet CIDR block that the VPC uses to connect to the transit router in automatic mode.


tr_attachment_slave_zoneOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property trAttachmentSlaveZone: The secondary zone for the vSwitch.


enable_resource_property_constraintOptional

  • Type: bool

Methods

Name Description
to_string Returns a string representation of this construct.
synthesize Allows this construct to emit artifacts into the cloud assembly during synthesis.
add_condition No description.
add_count No description.
add_dependency No description.
add_resource_desc No description.
apply_removal_policy No description.
fetch_condition No description.
fetch_dependency No description.
fetch_resource_desc No description.
get_att No description.
set_metadata No description.

to_string

def to_string() -> str

Returns a string representation of this construct.

synthesize

def synthesize(
  session: ISynthesisSession
) -> None

Allows this construct to emit artifacts into the cloud assembly during synthesis.

This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.

sessionRequired

  • Type: ros_cdk_core.ISynthesisSession

The synthesis session.


add_condition

def add_condition(
  condition: RosCondition
) -> None

conditionRequired

  • Type: ros_cdk_core.RosCondition

add_count

def add_count(
  count: typing.Union[typing.Union[int, float], IResolvable]
) -> None

countRequired

  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

add_dependency

def add_dependency(
  resource: Resource
) -> None

resourceRequired

  • Type: ros_cdk_core.Resource

add_resource_desc

def add_resource_desc(
  desc: str
) -> None

descRequired

  • Type: str

apply_removal_policy

def apply_removal_policy(
  policy: RemovalPolicy
) -> None

policyRequired

  • Type: ros_cdk_core.RemovalPolicy

fetch_condition

def fetch_condition() -> RosCondition

fetch_dependency

def fetch_dependency() -> typing.List[str]

fetch_resource_desc

def fetch_resource_desc() -> str

get_att

def get_att(
  name: str
) -> IResolvable

nameRequired

  • Type: str

set_metadata

def set_metadata(
  key: str,
  value: typing.Any
) -> None

keyRequired

  • Type: str

valueRequired

  • Type: typing.Any

Static Functions

Name Description
is_construct Return whether the given object is a Construct.

is_construct

import ros_cdk_cloudfw
ros_cdk_cloudfw.TrFirewall.is_construct(
  x: typing.Any
)

Return whether the given object is a Construct.

xRequired

  • Type: typing.Any

Properties

Name Type Description
node ros_cdk_core.ConstructNode The construct tree node associated with this construct.
env ros_cdk_core.IResourceEnvironment The environment this resource belongs to.
ref str No description.
stack ros_cdk_core.Stack The stack in which this resource is defined.
resource ros_cdk_core.RosResource No description.
attr_firewall_id typing.Union[str, ros_cdk_core.IResolvable] Attribute FirewallId: The instance ID of the VPC firewall.
props TrFirewallProps No description.

nodeRequired

node: ConstructNode
  • Type: ros_cdk_core.ConstructNode

The construct tree node associated with this construct.


envRequired

env: IResourceEnvironment
  • Type: ros_cdk_core.IResourceEnvironment

The environment this resource belongs to.

For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.


refRequired

ref: str
  • Type: str

stackRequired

stack: Stack
  • Type: ros_cdk_core.Stack

The stack in which this resource is defined.


resourceOptional

resource: RosResource
  • Type: ros_cdk_core.RosResource

attr_firewall_idRequired

attr_firewall_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute FirewallId: The instance ID of the VPC firewall.


propsRequired

props: TrFirewallProps