Skip to content

VulWhitelistProps

Properties for defining a VulWhitelist.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-threatdetection-vulwhitelist

Initializer 

import ros_cdk_threatdetection
ros_cdk_threatdetection.VulWhitelistProps(
  target_info: typing.Union[IResolvable, typing.Mapping[typing.Any]],
  whitelist: typing.Union[IResolvable, typing.Mapping[typing.Any]],
  reason: typing.Union[str, IResolvable] = None
)

Properties

Name Type Description
target_info typing.Union[ros_cdk_core.IResolvable, typing.Mapping[typing.Any]] Property targetInfo: The applicable scope of the whitelist.
whitelist typing.Union[ros_cdk_core.IResolvable, typing.Mapping[typing.Any]] Property whitelist: The information about the vulnerability that you want to add to the whitelist.
reason typing.Union[str, ros_cdk_core.IResolvable] Property reason: The reason why you add the vulnerability to the whitelist.

target_infoRequired 

target_info: typing.Union[IResolvable, typing.Mapping[typing.Any]]
  • Type: typing.Union[ros_cdk_core.IResolvable, typing.Mapping[typing.Any]]

Property targetInfo: The applicable scope of the whitelist.

The value of this parameter is in the JSON format and contains the following fields:

  • type: the type of the applicable scope. Valid values:

  • GroupId: the ID of a server group.

  • Uuid: the UUID of a server.
  • uuids: the UUIDs of servers. This field is of the string type.
  • groupIds: the IDs of server groups. This field is of the long type.

If you leave this parameter empty, the applicable scope is all servers. If you set the type field to GroupId, you must also specify the groupIds field. If you set the type field to Uuid, you must also specify the uuids field.

whitelistRequired 

whitelist: typing.Union[IResolvable, typing.Mapping[typing.Any]]
  • Type: typing.Union[ros_cdk_core.IResolvable, typing.Mapping[typing.Any]]

Property whitelist: The information about the vulnerability that you want to add to the whitelist.

The value is a JSON string that contains the following fields:

  • Status: the status of the vulnerability.
  • GmtLast: the timestamp when the vulnerability was last detected. Unit: milliseconds.
  • LaterCount: the number of vulnerabilities that have the medium priority.
  • AsapCount: the number of vulnerabilities that have the high priority.
  • Name: the name of the vulnerability.

  • Type: the type of the vulnerability. Valid values:

  • cve: Linux software vulnerability

  • sys: Windows system vulnerability
  • cms: Web-CMS vulnerability
  • app: application vulnerability
  • emg: urgent vulnerability
  • Related: the Common Vulnerabilities and Exposures (CVE) ID of the vulnerability.
  • HandledCount: the number of handled vulnerabilities.
  • AliasName: the alias of the vulnerability.
  • RuleModifyTime: the time when the vulnerability was last disclosed.
  • NntfCount: the number of vulnerabilities that have the low priority.
  • TotalFixCount: the total number of fixed vulnerabilities.
  • Tags: the tag that is added to the vulnerability.

You can call the DescribeGroupedVul operation to query the information about the vulnerability that you want to add to the whitelist.

reasonOptional 

reason: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property reason: The reason why you add the vulnerability to the whitelist.