SecurityGroupEgressProps

Properties for defining a SecurityGroupEgress.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ecs-securitygroupegress

Initializer

using AlibabaCloud.SDK.ROS.CDK.Ecs;
new SecurityGroupEgressProps {
    object IpProtocol,
    object PortRange,
    object Description = null,
    object DestCidrIp = null,
    object DestGroupId = null,
    object DestGroupOwnerId = null,
    object DestPrefixListId = null,
    object Ipv6DestCidrIp = null,
    object NicType = null,
    object Policy = null,
    object Priority = null,
    object SecurityGroupId = null
};

Properties

Name	Type	Description
IpProtocol	object	Property ipProtocol: Ip protocol for in rule.
PortRange	object	Property portRange: Ip protocol relative port range.
Description	object	Property description: Description of the security group rule, [1, 512] characters.
DestCidrIp	object	Property destCidrIp: The destination IPv4 CIDR block to which you want to control access.
DestGroupId	object	Property destGroupId: The destination security group ID to which access permissions need to be set.
DestGroupOwnerId	object	Property destGroupOwnerId: When setting security group rules across accounts, the Ali Cloud account ID of the destination security group.
DestPrefixListId	object	Property destPrefixListId: The ID of the destination prefix list to which you want to control access.
Ipv6DestCidrIp	object	Property ipv6DestCidrIp: Destination IPv6 CIDR address block for which access rights need to be set.
NicType	object	Property nicType: Network type, could be 'internet' or 'intranet'.
Policy	object	Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access).
Priority	object	Property priority: Authorization policies priority range[1, 100].
SecurityGroupId	object	Property securityGroupId: Id of the security group.

---

IpProtocol^Required

public object IpProtocol { get; set; }

• Type: object

Property ipProtocol: Ip protocol for in rule.

---

PortRange^Required

public object PortRange { get; set; }

• Type: object

Property portRange: Ip protocol relative port range.

For tcp and udp, the port rang is [1,65535], using format '1/200'For icmp|gre|all protocel, the port range should be '-1/-1'

---

Description^Optional

public object Description { get; set; }

• Type: object

Property description: Description of the security group rule, [1, 512] characters.

The default is empty.

---

DestCidrIp^Optional

public object DestCidrIp { get; set; }

• Type: object

Property destCidrIp: The destination IPv4 CIDR block to which you want to control access.

CIDR blocks and IPv4 addresses are supported.

---

DestGroupId^Optional

public object DestGroupId { get; set; }

• Type: object

Property destGroupId: The destination security group ID to which access permissions need to be set.

Set at least one of the DestGroupId, DestCidrIp, Ipv6DestCidrIp, or DestPrefixListId parameters.

• If DestGroupId is specified without the DestCidrIp parameter, the NicType parameter can only take the value intranet.
• If both DestGroupId and DestCidrIp are specified, DestCidrIp is assumed to prevail. You should pay attention to:
• Enterprise Security groups do not support authorized security group access.
• The maximum number of authorized security groups supported by ordinary security groups is 20.

---

DestGroupOwnerId^Optional

public object DestGroupOwnerId { get; set; }

• Type: object

Property destGroupOwnerId: When setting security group rules across accounts, the Ali Cloud account ID of the destination security group.

• If neither DestGroupOwnerId nor DestGroupOwnerAccount is set, it is considered to set the access rights of your other security group.
• If you have set the parameter DestCidrIp, the parameter DestGroupOwnerId is invalid.

---

DestPrefixListId^Optional

public object DestPrefixListId { get; set; }

• Type: object

Property destPrefixListId: The ID of the destination prefix list to which you want to control access.

You can call the DescribePrefixLists operation to query the IDs of available prefix lists.Take note of the following items: If a security group is in the classic network, you cannot configure prefix lists in the security group rules. For information about the limits on security groups and prefix lists, see the "Security group limits" in Limits. If you specify DestCidrIp, Ipv6DestCidrIp, or DestGroupId, DestPrefixListId is ignored.

---

Ipv6DestCidrIp^Optional

public object Ipv6DestCidrIp { get; set; }

• Type: object

Property ipv6DestCidrIp: Destination IPv6 CIDR address block for which access rights need to be set.

CIDR format and IPv6 format IP address range are supported.

---

NicType^Optional

public object NicType { get; set; }

• Type: object

Property nicType: Network type, could be 'internet' or 'intranet'.

Default value is internet.

---

Policy^Optional

public object Policy { get; set; }

• Type: object

Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access).

Default value is accept.

---

Priority^Optional

public object Priority { get; set; }

• Type: object

Property priority: Authorization policies priority range[1, 100].

---

SecurityGroupId^Optional

public object SecurityGroupId { get; set; }

• Type: object

Property securityGroupId: Id of the security group.

---