VpcFirewallControlPolicyProps
Properties for defining a VpcFirewallControlPolicy
.
See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-vpcfirewallcontrolpolicy
Initializer
import com.aliyun.ros.cdk.cloudfw.VpcFirewallControlPolicyProps;
VpcFirewallControlPolicyProps.builder()
.aclAction(java.lang.String)
.aclAction(IResolvable)
.applicationName(java.lang.String)
.applicationName(IResolvable)
.description(java.lang.String)
.description(IResolvable)
.destination(java.lang.String)
.destination(IResolvable)
.destinationType(java.lang.String)
.destinationType(IResolvable)
.newOrder(java.lang.String)
.newOrder(IResolvable)
.proto(java.lang.String)
.proto(IResolvable)
.source(java.lang.String)
.source(IResolvable)
.sourceType(java.lang.String)
.sourceType(IResolvable)
.vpcFirewallId(java.lang.String)
.vpcFirewallId(IResolvable)
// .destPort(java.lang.String)
// .destPort(IResolvable)
// .destPortGroup(java.lang.String)
// .destPortGroup(IResolvable)
// .destPortType(java.lang.String)
// .destPortType(IResolvable)
// .lang(java.lang.String)
// .lang(IResolvable)
// .regionId(java.lang.String)
// .regionId(IResolvable)
.build();
Properties
Name | Type | Description |
---|---|---|
aclAction |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property aclAction: The action that Cloud Firewall performs on the traffic. |
applicationName |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property applicationName: The application type that the access control policy supports. |
description |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property description: The description of the access control policy. |
destination |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property destination: The destination address in the access control policy. |
destinationType |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property destinationType: The type of the destination address in the access control policy. |
newOrder |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property newOrder: The priority of the access control policy. |
proto |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property proto: The type of the security protocol in the access control policy. |
source |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property source: The source address in the access control policy. |
sourceType |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property sourceType: The type of the source address in the access control policy. |
vpcFirewallId |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy. |
destPort |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property destPort: The destination port in the access control policy. |
destPortGroup |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property destPortGroup: The address book of destination ports in the access control policy. |
destPortType |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property destPortType: The type of the destination port in the access control policy. |
lang |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property lang: The natural language of the request and response. |
regionId |
java.lang.String OR com.aliyun.ros.cdk.core.IResolvable |
Property regionId: Region ID. |
aclAction
Required
public java.lang.Object getAclAction();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property aclAction: The action that Cloud Firewall performs on the traffic.
Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.
applicationName
Required
public java.lang.Object getApplicationName();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property applicationName: The application type that the access control policy supports.
Valid values: ANY (indicates that all application types are supported) FTP HTTP HTTPS MySQL SMTP SMTPS RDP VNC SSH Redis MQTT MongoDB Memcache SSL
description
Required
public java.lang.Object getDescription();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property description: The description of the access control policy.
destination
Required
public java.lang.Object getDestination();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property destination: The destination address in the access control policy.
Set this parameter in the following way: If the DestinationType parameter is set to net, set the value to a Classless Inter-Domain Routing (CIDR) block. Example: 10.2.3.0/24. If the DestinationType parameter is set to group, set the value to the name of an address book. Example: db_group. If the DestinationType parameter is set to domain, set the value to a domain name. Example: *.aliyuncs.com.
destinationType
Required
public java.lang.Object getDestinationType();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property destinationType: The type of the destination address in the access control policy.
Valid values: net: CIDR block group: address book domain: domain name
newOrder
Required
public java.lang.Object getNewOrder();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property newOrder: The priority of the access control policy.
The priority value starts from 1. A smaller priority value indicates a higher priority. Note The value of -1 indicates the lowest priority.
proto
Required
public java.lang.Object getProto();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property proto: The type of the security protocol in the access control policy.
source
Required
public java.lang.Object getSource();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property source: The source address in the access control policy.
If the SourceType parameter is set to net, set the value to a CIDR block. Example: 10.2.3.0/24. If the SourceType parameter is set to group, set the value to the name of an address book. Example: db_group.
sourceType
Required
public java.lang.Object getSourceType();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property sourceType: The type of the source address in the access control policy.
Valid values: net: CIDR block group: address book
vpcFirewallId
Required
public java.lang.Object getVpcFirewallId();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy.
If the VPC firewall is used to protect CEN, set the value to the ID of the CEN instance that the VPC firewall protects. Example: cen-ervw5jbw1234*. If the VPC firewall is used to protect Express Connect, set the value to the ID of the VPC firewall instance. Example: vfw-a42bbb748c91234***. Note You can call the DescribeVpcFirewallAclGroupList operation to query the ID of the policy group.
destPort
Optional
public java.lang.Object getDestPort();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property destPort: The destination port in the access control policy.
Note This parameter must be specified if the DestPortType parameter is set to port.
destPortGroup
Optional
public java.lang.Object getDestPortGroup();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property destPortGroup: The address book of destination ports in the access control policy.
Note This parameter must be specified if the DestPortType parameter is set to group.
destPortType
Optional
public java.lang.Object getDestPortType();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property destPortType: The type of the destination port in the access control policy.
Valid values: port: port group: address book
lang
Optional
public java.lang.Object getLang();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property lang: The natural language of the request and response.
Valid values: zh: Chinese en: English
regionId
Optional
public java.lang.Object getRegionId();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property regionId: Region ID.
Default to cn-hangzhou.