Skip to content

SecurityGroupIngressProps

Properties for defining a SecurityGroupIngress.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ecs-securitygroupingress

Initializer 

import ros_cdk_ecs
ros_cdk_ecs.SecurityGroupIngressProps(
  ip_protocol: typing.Union[str, IResolvable],
  port_range: typing.Union[str, IResolvable],
  description: typing.Union[str, IResolvable] = None,
  ipv6_source_cidr_ip: typing.Union[str, IResolvable] = None,
  nic_type: typing.Union[str, IResolvable] = None,
  policy: typing.Union[str, IResolvable] = None,
  priority: typing.Union[typing.Union[int, float], IResolvable] = None,
  security_group_id: typing.Union[str, IResolvable] = None,
  source_cidr_ip: typing.Union[str, IResolvable] = None,
  source_group_id: typing.Union[str, IResolvable] = None,
  source_group_owner_id: typing.Union[str, IResolvable] = None,
  source_port_range: typing.Union[str, IResolvable] = None,
  source_prefix_list_id: typing.Union[str, IResolvable] = None
)

Properties

Name Type Description
ip_protocol typing.Union[str, ros_cdk_core.IResolvable] Property ipProtocol: Ip protocol for in rule.
port_range typing.Union[str, ros_cdk_core.IResolvable] Property portRange: Ip protocol relative port range.
description typing.Union[str, ros_cdk_core.IResolvable] Property description: Description of the security group rule, [1, 512] characters.
ipv6_source_cidr_ip typing.Union[str, ros_cdk_core.IResolvable] Property ipv6SourceCidrIp: Source IPv6 CIDR address segment.
nic_type typing.Union[str, ros_cdk_core.IResolvable] Property nicType: Network type, could be 'internet' or 'intranet'.
policy typing.Union[str, ros_cdk_core.IResolvable] Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access).
priority typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable] Property priority: Authorization policies priority range[1, 100].
security_group_id typing.Union[str, ros_cdk_core.IResolvable] Property securityGroupId: Id of the security group.
source_cidr_ip typing.Union[str, ros_cdk_core.IResolvable] Property sourceCidrIp: The source IPv4 CIDR block to which you want to control access.
source_group_id typing.Union[str, ros_cdk_core.IResolvable] Property sourceGroupId: Source Group Id.
source_group_owner_id typing.Union[str, ros_cdk_core.IResolvable] Property sourceGroupOwnerId: Source Group Owner Account ID.
source_port_range typing.Union[str, ros_cdk_core.IResolvable] Property sourcePortRange: The range of the ports enabled by the source security group for the transport layer protocol.
source_prefix_list_id typing.Union[str, ros_cdk_core.IResolvable] Property sourcePrefixListId: The ID of the source prefix list to which you want to control access.

ip_protocolRequired 

ip_protocol: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property ipProtocol: Ip protocol for in rule.

port_rangeRequired 

port_range: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property portRange: Ip protocol relative port range.

For tcp and udp, the port rang is [1,65535], using format '1/200'For icmp|gre|all protocel, the port range should be '-1/-1'

descriptionOptional 

description: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property description: Description of the security group rule, [1, 512] characters.

The default is empty.

ipv6_source_cidr_ipOptional 

ipv6_source_cidr_ip: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property ipv6SourceCidrIp: Source IPv6 CIDR address segment.

Supports IP address ranges in CIDR format and IPv6 format. Note Only VPC type IP addresses are supported.

nic_typeOptional 

nic_type: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property nicType: Network type, could be 'internet' or 'intranet'.

Default value is internet.

policyOptional 

policy: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property policy: Authorization policies, parameter values can be: accept (accepted access), drop (denied access).

Default value is accept.

priorityOptional 

priority: typing.Union[typing.Union[int, float], IResolvable]
  • Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

Property priority: Authorization policies priority range[1, 100].

security_group_idOptional 

security_group_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property securityGroupId: Id of the security group.

source_cidr_ipOptional 

source_cidr_ip: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property sourceCidrIp: The source IPv4 CIDR block to which you want to control access.

CIDR blocks and IPv4 addresses are supported.

source_group_idOptional 

source_group_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property sourceGroupId: Source Group Id.

source_group_owner_idOptional 

source_group_owner_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property sourceGroupOwnerId: Source Group Owner Account ID.

source_port_rangeOptional 

source_port_range: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property sourcePortRange: The range of the ports enabled by the source security group for the transport layer protocol.

Valid values: TCP/UDP: Value range: 1 to 65535. The start port and the end port are separated by a slash (/). Correct example: 1/200. Incorrect example: 200/1.ICMP: -1/-1.GRE: -1/-1.ALL: -1/-1.

source_prefix_list_idOptional 

source_prefix_list_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property sourcePrefixListId: The ID of the source prefix list to which you want to control access.

You can call the DescribePrefixLists operation to query the IDs of available prefix lists. Take note of the following items:

  • If a security group is in the classic network, you cannot configure prefix lists in the security group rules.
  • If you specify the SourceCidrIp, Ipv6SourceCidrIp, or SourceGroupId parameter, this parameter is ignored.