Skip to content

VpcFirewallControlPolicy

This class encapsulates and extends the ROS resource type ALIYUN::CLOUDFW::VpcFirewallControlPolicy, which is used to add an access control policy to a specified policy group for a Virtual Private Cloud (VPC) firewall.

Initializers 

import com.aliyun.ros.cdk.cloudfw.VpcFirewallControlPolicy;
VpcFirewallControlPolicy.Builder.create(Construct scope, java.lang.String id, java.lang.Boolean enableResourcePropertyConstraint)
    .aclAction(java.lang.String)
    .aclAction(IResolvable)
    .applicationName(java.lang.String)
    .applicationName(IResolvable)
    .description(java.lang.String)
    .description(IResolvable)
    .destination(java.lang.String)
    .destination(IResolvable)
    .destinationType(java.lang.String)
    .destinationType(IResolvable)
    .newOrder(java.lang.String)
    .newOrder(IResolvable)
    .proto(java.lang.String)
    .proto(IResolvable)
    .source(java.lang.String)
    .source(IResolvable)
    .sourceType(java.lang.String)
    .sourceType(IResolvable)
    .vpcFirewallId(java.lang.String)
    .vpcFirewallId(IResolvable)
//  .destPort(java.lang.String)
//  .destPort(IResolvable)
//  .destPortGroup(java.lang.String)
//  .destPortGroup(IResolvable)
//  .destPortType(java.lang.String)
//  .destPortType(IResolvable)
//  .lang(java.lang.String)
//  .lang(IResolvable)
//  .regionId(java.lang.String)
//  .regionId(IResolvable)
    .build();
Name Type Description
scope com.aliyun.ros.cdk.core.Construct No description.
id java.lang.String No description.
enableResourcePropertyConstraint java.lang.Boolean No description.
aclAction java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property aclAction: The action that Cloud Firewall performs on the traffic.
applicationName java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property applicationName: The application type that the access control policy supports.
description java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property description: The description of the access control policy.
destination java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destination: The destination address in the access control policy.
destinationType java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destinationType: The type of the destination address in the access control policy.
newOrder java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property newOrder: The priority of the access control policy.
proto java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property proto: The type of the security protocol in the access control policy.
source java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property source: The source address in the access control policy.
sourceType java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property sourceType: The type of the source address in the access control policy.
vpcFirewallId java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy.
destPort java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destPort: The destination port in the access control policy.
destPortGroup java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destPortGroup: The address book of destination ports in the access control policy.
destPortType java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property destPortType: The type of the destination port in the access control policy.
lang java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property lang: The natural language of the request and response.
regionId java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property regionId: Region ID.

scopeRequired

  • Type: com.aliyun.ros.cdk.core.Construct

idRequired

  • Type: java.lang.String

enableResourcePropertyConstraintOptional

  • Type: java.lang.Boolean

aclActionRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property aclAction: The action that Cloud Firewall performs on the traffic.

Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.

applicationNameRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property applicationName: The application type that the access control policy supports.

Valid values: ANY (indicates that all application types are supported) FTP HTTP HTTPS MySQL SMTP SMTPS RDP VNC SSH Redis MQTT MongoDB Memcache SSL

descriptionRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property description: The description of the access control policy.

destinationRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destination: The destination address in the access control policy.

Set this parameter in the following way: If the DestinationType parameter is set to net, set the value to a Classless Inter-Domain Routing (CIDR) block. Example: 10.2.3.0/24. If the DestinationType parameter is set to group, set the value to the name of an address book. Example: db_group. If the DestinationType parameter is set to domain, set the value to a domain name. Example: *.aliyuncs.com.

destinationTypeRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destinationType: The type of the destination address in the access control policy.

Valid values: net: CIDR block group: address book domain: domain name

newOrderRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property newOrder: The priority of the access control policy.

The priority value starts from 1. A smaller priority value indicates a higher priority. Note The value of -1 indicates the lowest priority.

protoRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property proto: The type of the security protocol in the access control policy.

sourceRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property source: The source address in the access control policy.

If the SourceType parameter is set to net, set the value to a CIDR block. Example: 10.2.3.0/24. If the SourceType parameter is set to group, set the value to the name of an address book. Example: db_group.

sourceTypeRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property sourceType: The type of the source address in the access control policy.

Valid values: net: CIDR block group: address book

vpcFirewallIdRequired

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy.

If the VPC firewall is used to protect CEN, set the value to the ID of the CEN instance that the VPC firewall protects. Example: cen-ervw5jbw1234*. If the VPC firewall is used to protect Express Connect, set the value to the ID of the VPC firewall instance. Example: vfw-a42bbb748c91234***. Note You can call the DescribeVpcFirewallAclGroupList operation to query the ID of the policy group.

destPortOptional

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destPort: The destination port in the access control policy.

Note This parameter must be specified if the DestPortType parameter is set to port.

destPortGroupOptional

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destPortGroup: The address book of destination ports in the access control policy.

Note This parameter must be specified if the DestPortType parameter is set to group.

destPortTypeOptional

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property destPortType: The type of the destination port in the access control policy.

Valid values: port: port group: address book

langOptional

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property lang: The natural language of the request and response.

Valid values: zh: Chinese en: English

regionIdOptional

  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property regionId: Region ID.

Default to cn-hangzhou.

Methods

Name Description
toString Returns a string representation of this construct.
synthesize Allows this construct to emit artifacts into the cloud assembly during synthesis.
addCondition No description.
addCount No description.
addDependency No description.
addResourceDesc No description.
applyRemovalPolicy No description.
getAtt No description.
setMetadata No description.

toString 

public java.lang.String toString()

Returns a string representation of this construct.

synthesize 

public void synthesize(ISynthesisSession session)

Allows this construct to emit artifacts into the cloud assembly during synthesis.

This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.

sessionRequired

  • Type: com.aliyun.ros.cdk.core.ISynthesisSession

The synthesis session.

addCondition 

public void addCondition(RosCondition condition)

conditionRequired

  • Type: com.aliyun.ros.cdk.core.RosCondition

addCount 

public void addCount(java.lang.Number OR IResolvable count)

countRequired

  • Type: java.lang.Number OR com.aliyun.ros.cdk.core.IResolvable

addDependency 

public void addDependency(Resource resource)

resourceRequired

  • Type: com.aliyun.ros.cdk.core.Resource

addResourceDesc 

public void addResourceDesc(java.lang.String desc)

descRequired

  • Type: java.lang.String

applyRemovalPolicy 

public void applyRemovalPolicy(RemovalPolicy policy)

policyRequired

  • Type: com.aliyun.ros.cdk.core.RemovalPolicy

getAtt 

public IResolvable getAtt(java.lang.String name)

nameRequired

  • Type: java.lang.String

setMetadata 

public void setMetadata(java.lang.String key, java.lang.Object value)

keyRequired

  • Type: java.lang.String

valueRequired

  • Type: java.lang.Object

Static Functions

Name Description
isConstruct Return whether the given object is a Construct.

isConstruct 

import com.aliyun.ros.cdk.cloudfw.VpcFirewallControlPolicy;
VpcFirewallControlPolicy.isConstruct(java.lang.Object x)

Return whether the given object is a Construct.

xRequired

  • Type: java.lang.Object

Properties

Name Type Description
node com.aliyun.ros.cdk.core.ConstructNode The construct tree node associated with this construct.
ref java.lang.String No description.
stack com.aliyun.ros.cdk.core.Stack The stack in which this resource is defined.
resource com.aliyun.ros.cdk.core.RosResource No description.
attrAclUuid com.aliyun.ros.cdk.core.IResolvable Attribute AclUuid: The unique ID of the access control policy.

nodeRequired 

public ConstructNode getNode();
  • Type: com.aliyun.ros.cdk.core.ConstructNode

The construct tree node associated with this construct.

refRequired 

public java.lang.String getRef();
  • Type: java.lang.String

stackRequired 

public Stack getStack();
  • Type: com.aliyun.ros.cdk.core.Stack

The stack in which this resource is defined.

resourceOptional 

public RosResource getResource();
  • Type: com.aliyun.ros.cdk.core.RosResource

attrAclUuidRequired 

public IResolvable getAttrAclUuid();
  • Type: com.aliyun.ros.cdk.core.IResolvable

Attribute AclUuid: The unique ID of the access control policy.

Structs