VulWhitelist

• Implements: IVulWhitelist

This class encapsulates and extends the ROS resource type ALIYUN::ThreatDetection::VulWhitelist.

Initializers

import com.aliyun.ros.cdk.threatdetection.VulWhitelist;
VulWhitelist.Builder.create(Construct scope, java.lang.String id, java.lang.Boolean enableResourcePropertyConstraint)
    .targetInfo(IResolvable)
    .targetInfo(java.util.Map<java.lang.String, java.lang.Object>)
    .whitelist(IResolvable)
    .whitelist(java.util.Map<java.lang.String, java.lang.Object>)
//  .reason(java.lang.String)
//  .reason(IResolvable)
    .build();

scope^Required

• Type: com.aliyun.ros.cdk.core.Construct

id^Required

• Type: java.lang.String

enableResourcePropertyConstraint^Optional

• Type: java.lang.Boolean

targetInfo^Required

• Type: com.aliyun.ros.cdk.core.IResolvable OR java.util.Map

Property targetInfo: The applicable scope of the whitelist.

The value of this parameter is in the JSON format and contains the following fields:

• type: the type of the applicable scope. Valid values:

• GroupId: the ID of a server group.

• Uuid: the UUID of a server.
• uuids: the UUIDs of servers. This field is of the string type.
• groupIds: the IDs of server groups. This field is of the long type.

If you leave this parameter empty, the applicable scope is all servers. If you set the type field to GroupId, you must also specify the groupIds field. If you set the type field to Uuid, you must also specify the uuids field.

whitelist^Required

• Type: com.aliyun.ros.cdk.core.IResolvable OR java.util.Map

Property whitelist: The information about the vulnerability that you want to add to the whitelist.

The value is a JSON string that contains the following fields:

• Status: the status of the vulnerability.
• GmtLast: the timestamp when the vulnerability was last detected. Unit: milliseconds.
• LaterCount: the number of vulnerabilities that have the medium priority.
• AsapCount: the number of vulnerabilities that have the high priority.
• Name: the name of the vulnerability.

• Type: the type of the vulnerability. Valid values:

• cve: Linux software vulnerability

• sys: Windows system vulnerability
• cms: Web-CMS vulnerability
• app: application vulnerability
• emg: urgent vulnerability
• Related: the Common Vulnerabilities and Exposures (CVE) ID of the vulnerability.
• HandledCount: the number of handled vulnerabilities.
• AliasName: the alias of the vulnerability.
• RuleModifyTime: the time when the vulnerability was last disclosed.
• NntfCount: the number of vulnerabilities that have the low priority.
• TotalFixCount: the total number of fixed vulnerabilities.
• Tags: the tag that is added to the vulnerability.

You can call the DescribeGroupedVul operation to query the information about the vulnerability that you want to add to the whitelist.

reason^Optional

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property reason: The reason why you add the vulnerability to the whitelist.

Methods

toString

public java.lang.String toString()

Returns a string representation of this construct.

synthesize

public void synthesize(ISynthesisSession session)

Allows this construct to emit artifacts into the cloud assembly during synthesis.

This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.

session^Required

• Type: com.aliyun.ros.cdk.core.ISynthesisSession

The synthesis session.

addCondition

public void addCondition(RosCondition condition)

condition^Required

• Type: com.aliyun.ros.cdk.core.RosCondition

addCount

public void addCount(java.lang.Number OR IResolvable count)

count^Required

• Type: java.lang.Number OR com.aliyun.ros.cdk.core.IResolvable

addDependency

public void addDependency(Resource resource)

resource^Required

• Type: com.aliyun.ros.cdk.core.Resource

addResourceDesc

public void addResourceDesc(java.lang.String desc)

desc^Required

• Type: java.lang.String

applyRemovalPolicy

public void applyRemovalPolicy(RemovalPolicy policy)

policy^Required

• Type: com.aliyun.ros.cdk.core.RemovalPolicy

fetchCondition

public RosCondition fetchCondition()

fetchDependency

public java.util.List<java.lang.String> fetchDependency()

fetchResourceDesc

public java.lang.String fetchResourceDesc()

getAtt

public IResolvable getAtt(java.lang.String name)

name^Required

• Type: java.lang.String

setMetadata

public void setMetadata(java.lang.String key, java.lang.Object value)

key^Required

• Type: java.lang.String

value^Required

• Type: java.lang.Object

Static Functions

isConstruct

import com.aliyun.ros.cdk.threatdetection.VulWhitelist;
VulWhitelist.isConstruct(java.lang.Object x)

Return whether the given object is a Construct.

x^Required

• Type: java.lang.Object

Properties

node^Required

public ConstructNode getNode();

• Type: com.aliyun.ros.cdk.core.ConstructNode

The construct tree node associated with this construct.

env^Required

public IResourceEnvironment getEnv();

• Type: com.aliyun.ros.cdk.core.IResourceEnvironment

The environment this resource belongs to.

For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.

ref^Required

public java.lang.String getRef();

• Type: java.lang.String

stack^Required

public Stack getStack();

• Type: com.aliyun.ros.cdk.core.Stack

The stack in which this resource is defined.

resource^Optional

public RosResource getResource();

• Type: com.aliyun.ros.cdk.core.RosResource

attrReason^Required

public java.lang.Object getAttrReason();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute Reason: The reason why you add the vulnerability to the whitelist.

attrTargetInfo^Required

public java.lang.Object getAttrTargetInfo();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute TargetInfo: The applicable scope of the whitelist.

attrVulWhitelistId^Required

public java.lang.Object getAttrVulWhitelistId();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute VulWhitelistId: The ID of the whitelist.

attrWhitelist^Required

public java.lang.Object getAttrWhitelist();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute Whitelist: The information about the vulnerability that you want to add to the whitelist.

props^Required

public VulWhitelistProps getProps();

• Type: VulWhitelistProps