SecurityGroupEgressProps
Properties for defining a SecurityGroupEgress
.
See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ecs-securitygroupegress
Initializer
import ros_cdk_ecs
ros_cdk_ecs.SecurityGroupEgressProps(
ip_protocol: typing.Union[str, IResolvable],
port_range: typing.Union[str, IResolvable],
description: typing.Union[str, IResolvable] = None,
dest_cidr_ip: typing.Union[str, IResolvable] = None,
dest_group_id: typing.Union[str, IResolvable] = None,
dest_group_owner_id: typing.Union[str, IResolvable] = None,
dest_prefix_list_id: typing.Union[str, IResolvable] = None,
ipv6_dest_cidr_ip: typing.Union[str, IResolvable] = None,
nic_type: typing.Union[str, IResolvable] = None,
policy: typing.Union[str, IResolvable] = None,
priority: typing.Union[typing.Union[int, float], IResolvable] = None,
security_group_id: typing.Union[str, IResolvable] = None
)
Properties
Name | Type | Description |
---|---|---|
ip_protocol |
typing.Union[str, ros_cdk_core.IResolvable] |
Property ipProtocol: Ip protocol for in rule. |
port_range |
typing.Union[str, ros_cdk_core.IResolvable] |
Property portRange: Ip protocol relative port range. |
description |
typing.Union[str, ros_cdk_core.IResolvable] |
Property description: Description of the security group rule, [1, 512] characters. |
dest_cidr_ip |
typing.Union[str, ros_cdk_core.IResolvable] |
Property destCidrIp: The destination IPv4 CIDR block to which you want to control access. |
dest_group_id |
typing.Union[str, ros_cdk_core.IResolvable] |
Property destGroupId: The destination security group ID to which access permissions need to be set. |
dest_group_owner_id |
typing.Union[str, ros_cdk_core.IResolvable] |
Property destGroupOwnerId: When setting security group rules across accounts, the Ali Cloud account ID of the destination security group. |
dest_prefix_list_id |
typing.Union[str, ros_cdk_core.IResolvable] |
Property destPrefixListId: The ID of the destination prefix list to which you want to control access. |
ipv6_dest_cidr_ip |
typing.Union[str, ros_cdk_core.IResolvable] |
Property ipv6DestCidrIp: Destination IPv6 CIDR address block for which access rights need to be set. |
nic_type |
typing.Union[str, ros_cdk_core.IResolvable] |
Property nicType: Network type, could be 'internet' or 'intranet'. |
policy |
typing.Union[str, ros_cdk_core.IResolvable] |
Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access). |
priority |
typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] |
Property priority: Authorization policies priority range[1, 100]. |
security_group_id |
typing.Union[str, ros_cdk_core.IResolvable] |
Property securityGroupId: Id of the security group. |
ip_protocol
Required
ip_protocol: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property ipProtocol: Ip protocol for in rule.
port_range
Required
port_range: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property portRange: Ip protocol relative port range.
For tcp and udp, the port rang is [1,65535], using format '1/200'For icmp|gre|all protocel, the port range should be '-1/-1'
description
Optional
description: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property description: Description of the security group rule, [1, 512] characters.
The default is empty.
dest_cidr_ip
Optional
dest_cidr_ip: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property destCidrIp: The destination IPv4 CIDR block to which you want to control access.
CIDR blocks and IPv4 addresses are supported.
dest_group_id
Optional
dest_group_id: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property destGroupId: The destination security group ID to which access permissions need to be set.
Set at least one of the DestGroupId, DestCidrIp, Ipv6DestCidrIp, or DestPrefixListId parameters.
- If DestGroupId is specified without the DestCidrIp parameter, the NicType parameter can only take the value intranet.
- If both DestGroupId and DestCidrIp are specified, DestCidrIp is assumed to prevail. You should pay attention to:
- Enterprise Security groups do not support authorized security group access.
- The maximum number of authorized security groups supported by ordinary security groups is 20.
dest_group_owner_id
Optional
dest_group_owner_id: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property destGroupOwnerId: When setting security group rules across accounts, the Ali Cloud account ID of the destination security group.
- If neither DestGroupOwnerId nor DestGroupOwnerAccount is set, it is considered to set the access rights of your other security group.
- If you have set the parameter DestCidrIp, the parameter DestGroupOwnerId is invalid.
dest_prefix_list_id
Optional
dest_prefix_list_id: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property destPrefixListId: The ID of the destination prefix list to which you want to control access.
You can call the DescribePrefixLists operation to query the IDs of available prefix lists.Take note of the following items: If a security group is in the classic network, you cannot configure prefix lists in the security group rules. For information about the limits on security groups and prefix lists, see the "Security group limits" in Limits. If you specify DestCidrIp, Ipv6DestCidrIp, or DestGroupId, DestPrefixListId is ignored.
ipv6_dest_cidr_ip
Optional
ipv6_dest_cidr_ip: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property ipv6DestCidrIp: Destination IPv6 CIDR address block for which access rights need to be set.
CIDR format and IPv6 format IP address range are supported.
nic_type
Optional
nic_type: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property nicType: Network type, could be 'internet' or 'intranet'.
Default value is internet.
policy
Optional
policy: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access).
Default value is accept.
priority
Optional
priority: typing.Union[typing.Union[int, float], IResolvable]
- Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]
Property priority: Authorization policies priority range[1, 100].
security_group_id
Optional
security_group_id: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property securityGroupId: Id of the security group.