Skip to content

ContainerDefenseRule

This class encapsulates and extends the ROS resource type ALIYUN::ThreatDetection::ContainerDefenseRule.

Initializers

import ros_cdk_threatdetection
ros_cdk_threatdetection.ContainerDefenseRule(
  scope: Construct,
  id: str,
  description: typing.Union[str, IResolvable] = None,
  rule_action: typing.Union[typing.Union[int, float], IResolvable] = None,
  rule_id: typing.Union[typing.Union[int, float], IResolvable] = None,
  rule_name: typing.Union[str, IResolvable] = None,
  rule_switch: typing.Union[typing.Union[int, float], IResolvable] = None,
  rule_type: typing.Union[typing.Union[int, float], IResolvable] = None,
  scope: typing.Union[IResolvable, typing.List[typing.Union[IResolvable, ScopeProperty]]] = None,
  whitelist: typing.Union[IResolvable, WhitelistProperty] = None,
  whitelist_hash: typing.Union[str, IResolvable] = None,
  enable_resource_property_constraint: bool = None
)
Name Type Description
scope ros_cdk_core.Construct No description.
id str No description.
description typing.Union[str, ros_cdk_core.IResolvable] Property description: Rule description.
rule_action typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] Property ruleAction: The action that is performed when the rule is hit.
rule_id typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] Property ruleId: Rule Id.
rule_name typing.Union[str, ros_cdk_core.IResolvable] Property ruleName: The name of the rule.
rule_switch typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] Property ruleSwitch: The switch of the rule.
rule_type typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] Property ruleType: The rule type.
scope typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[ros_cdk_core.IResolvable, ScopeProperty]]] Property scope: Rule scope.
whitelist typing.Union[ros_cdk_core.IResolvable, WhitelistProperty] Property whitelist: The whitelist of rule.
whitelist_hash typing.Union[str, ros_cdk_core.IResolvable] Property whitelistHash: The whitelist Hash.
enable_resource_property_constraint bool No description.

scopeRequired

  • Type: ros_cdk_core.Construct

idRequired

  • Type: str

descriptionOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property description: Rule description.


rule_actionOptional

  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

Property ruleAction: The action that is performed when the rule is hit.

Valid values:

  • 1: alert
  • 2: block.

rule_idOptional

  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

Property ruleId: Rule Id.


rule_nameOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property ruleName: The name of the rule.


rule_switchOptional

  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

Property ruleSwitch: The switch of the rule.

Valid values:

  • 0: off.
  • 1: on.

rule_typeOptional

  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

Property ruleType: The rule type.

Value:

  • 2: User Rules

scopeOptional

  • Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[ros_cdk_core.IResolvable, ScopeProperty]]]

Property scope: Rule scope.


whitelistOptional

Property whitelist: The whitelist of rule.


whitelist_hashOptional

  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property whitelistHash: The whitelist Hash.


enable_resource_property_constraintOptional

  • Type: bool

Methods

Name Description
to_string Returns a string representation of this construct.
synthesize Allows this construct to emit artifacts into the cloud assembly during synthesis.
add_condition No description.
add_count No description.
add_dependency No description.
add_resource_desc No description.
apply_removal_policy No description.
fetch_condition No description.
fetch_dependency No description.
fetch_resource_desc No description.
get_att No description.
set_metadata No description.

to_string

def to_string() -> str

Returns a string representation of this construct.

synthesize

def synthesize(
  session: ISynthesisSession
) -> None

Allows this construct to emit artifacts into the cloud assembly during synthesis.

This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.

sessionRequired

  • Type: ros_cdk_core.ISynthesisSession

The synthesis session.


add_condition

def add_condition(
  condition: RosCondition
) -> None

conditionRequired

  • Type: ros_cdk_core.RosCondition

add_count

def add_count(
  count: typing.Union[typing.Union[int, float], IResolvable]
) -> None

countRequired

  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

add_dependency

def add_dependency(
  resource: Resource
) -> None

resourceRequired

  • Type: ros_cdk_core.Resource

add_resource_desc

def add_resource_desc(
  desc: str
) -> None

descRequired

  • Type: str

apply_removal_policy

def apply_removal_policy(
  policy: RemovalPolicy
) -> None

policyRequired

  • Type: ros_cdk_core.RemovalPolicy

fetch_condition

def fetch_condition() -> RosCondition

fetch_dependency

def fetch_dependency() -> typing.List[str]

fetch_resource_desc

def fetch_resource_desc() -> str

get_att

def get_att(
  name: str
) -> IResolvable

nameRequired

  • Type: str

set_metadata

def set_metadata(
  key: str,
  value: typing.Any
) -> None

keyRequired

  • Type: str

valueRequired

  • Type: typing.Any

Static Functions

Name Description
is_construct Return whether the given object is a Construct.

is_construct

import ros_cdk_threatdetection
ros_cdk_threatdetection.ContainerDefenseRule.is_construct(
  x: typing.Any
)

Return whether the given object is a Construct.

xRequired

  • Type: typing.Any

Properties

Name Type Description
node ros_cdk_core.ConstructNode The construct tree node associated with this construct.
env ros_cdk_core.IResourceEnvironment The environment this resource belongs to.
ref str No description.
stack ros_cdk_core.Stack The stack in which this resource is defined.
resource ros_cdk_core.RosResource No description.
attr_description typing.Union[str, ros_cdk_core.IResolvable] Attribute Description: Rule description.
attr_rule_action typing.Union[str, ros_cdk_core.IResolvable] Attribute RuleAction: The action that is performed when the rule is hit.
attr_rule_id typing.Union[str, ros_cdk_core.IResolvable] Attribute RuleId: Rule Id.
attr_rule_name typing.Union[str, ros_cdk_core.IResolvable] Attribute RuleName: The name of the rule.
attr_rule_switch typing.Union[str, ros_cdk_core.IResolvable] Attribute RuleSwitch: The switch of the rule.
attr_rule_type typing.Union[str, ros_cdk_core.IResolvable] Attribute RuleType: The rule type.
attr_scope typing.Union[str, ros_cdk_core.IResolvable] Attribute Scope: Rule scope.
attr_whitelist typing.Union[str, ros_cdk_core.IResolvable] Attribute Whitelist: The whitelist of rule.
props ContainerDefenseRuleProps No description.

nodeRequired

node: ConstructNode
  • Type: ros_cdk_core.ConstructNode

The construct tree node associated with this construct.


envRequired

env: IResourceEnvironment
  • Type: ros_cdk_core.IResourceEnvironment

The environment this resource belongs to.

For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.


refRequired

ref: str
  • Type: str

stackRequired

stack: Stack
  • Type: ros_cdk_core.Stack

The stack in which this resource is defined.


resourceOptional

resource: RosResource
  • Type: ros_cdk_core.RosResource

attr_descriptionRequired

attr_description: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute Description: Rule description.


attr_rule_actionRequired

attr_rule_action: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute RuleAction: The action that is performed when the rule is hit.


attr_rule_idRequired

attr_rule_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute RuleId: Rule Id.


attr_rule_nameRequired

attr_rule_name: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute RuleName: The name of the rule.


attr_rule_switchRequired

attr_rule_switch: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute RuleSwitch: The switch of the rule.


attr_rule_typeRequired

attr_rule_type: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute RuleType: The rule type.


attr_scopeRequired

attr_scope: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute Scope: Rule scope.


attr_whitelistRequired

attr_whitelist: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute Whitelist: The whitelist of rule.


propsRequired

props: ContainerDefenseRuleProps