VpcFirewallCenProps

Properties for defining a VpcFirewallCen.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-vpcfirewallcen

Initializer

import ros_cdk_cloudfw
ros_cdk_cloudfw.VpcFirewallCenProps(
  cen_id: typing.Union[str, IResolvable],
  firewall_switch: typing.Union[str, IResolvable],
  firewall_vpc_zone_id: typing.Union[str, IResolvable],
  network_instance_id: typing.Union[str, IResolvable],
  vpc_firewall_name: typing.Union[str, IResolvable],
  vpc_region: typing.Union[str, IResolvable],
  firewall_vpc_cidr_block: typing.Union[str, IResolvable] = None,
  firewall_v_switch_cidr_block: typing.Union[str, IResolvable] = None,
  member_uid: typing.Union[str, IResolvable] = None,
  v_switch_id: typing.Union[str, IResolvable] = None
)

Properties

Name	Type	Description
cen_id	typing.Union[str, ros_cdk_core.IResolvable]	Property cenId: The ID of the CEN instance.
firewall_switch	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallSwitch: Specifies whether to enable the VPC firewall.
firewall_vpc_zone_id	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallVpcZoneId: The ID of the zone to which the vSwitch belongs.
network_instance_id	typing.Union[str, ros_cdk_core.IResolvable]	Property networkInstanceId: The ID of the VPC for which you want to create the VPC firewall.
vpc_firewall_name	typing.Union[str, ros_cdk_core.IResolvable]	Property vpcFirewallName: The instance name of the VPC firewall.
vpc_region	typing.Union[str, ros_cdk_core.IResolvable]	Property vpcRegion: The ID of the region to which the VPC belongs.
firewall_vpc_cidr_block	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallVpcCidrBlock: The CIDR block of the VPC that is automatically created for the VPC firewall.
firewall_v_switch_cidr_block	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallVSwitchCidrBlock: The CIDR block of the vSwitch that is automatically created for the VPC firewall.You must specify a CIDR block for the Cloud_Firewall_VSWITCH VPC that is automatically created for the VPC firewall for traffic redirection. The CIDR block does not conflict with your network plan. The subnet mask of the CIDR block must be less than or equal to 29 bits in length. The CIDR block of the vSwitch must be within the network segment of the VPC.If you do not specify a value, the CIDR block 10.219.219.216\/29 is automatically allocated.
member_uid	typing.Union[str, ros_cdk_core.IResolvable]	Property memberUid: The UID of the member that is managed by your Alibaba Cloud account.
v_switch_id	typing.Union[str, ros_cdk_core.IResolvable]	Property vSwitchId: The ID of the vSwitch that is used to associate with the elastic network interface (ENI) required by the VPC firewall.

---

cen_id^Required

cen_id: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property cenId: The ID of the CEN instance.

---

firewall_switch^Required

firewall_switch: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallSwitch: Specifies whether to enable the VPC firewall.

Valid values: open: After you create the VPC firewall, the VPC firewall is automatically enabled. This is the default value. close: After you create the VPC firewall, the VPC firewall is disabled. You can call the ModifyVpcFirewallCenSwitchStatus operation to manually enable the VPC firewall.

---

firewall_vpc_zone_id^Required

firewall_vpc_zone_id: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVpcZoneId: The ID of the zone to which the vSwitch belongs.

If your service is latency-sensitive, you can specify the same zone for the vSwitch of the firewall and the vSwitch of your business VPC to minimize latency.If you do not specify a value, a zone is automatically assigned for the vSwitch.

---

network_instance_id^Required

network_instance_id: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property networkInstanceId: The ID of the VPC for which you want to create the VPC firewall.

---

vpc_firewall_name^Required

vpc_firewall_name: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property vpcFirewallName: The instance name of the VPC firewall.

---

vpc_region^Required

vpc_region: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property vpcRegion: The ID of the region to which the VPC belongs.

---

firewall_vpc_cidr_block^Optional

firewall_vpc_cidr_block: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVpcCidrBlock: The CIDR block of the VPC that is automatically created for the VPC firewall.

You must specify a CIDR block for the Cloud_Firewall_VPC VPC that is automatically created for the VPC firewall for traffic redirection. The subnet mask of the CIDR block must be less than or equal to 28 bits in length.If you do not specify a value, the CIDR block 10.0.0.0/8 is automatically allocated.

---

firewall_v_switch_cidr_block^Optional

firewall_v_switch_cidr_block: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVSwitchCidrBlock: The CIDR block of the vSwitch that is automatically created for the VPC firewall.You must specify a CIDR block for the Cloud_Firewall_VSWITCH VPC that is automatically created for the VPC firewall for traffic redirection. The CIDR block does not conflict with your network plan. The subnet mask of the CIDR block must be less than or equal to 29 bits in length. The CIDR block of the vSwitch must be within the network segment of the VPC.If you do not specify a value, the CIDR block 10.219.219.216\/29 is automatically allocated.

---

member_uid^Optional

member_uid: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property memberUid: The UID of the member that is managed by your Alibaba Cloud account.

---

v_switch_id^Optional

v_switch_id: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property vSwitchId: The ID of the vSwitch that is used to associate with the elastic network interface (ENI) required by the VPC firewall.

---