Skip to content

VpcFirewallControlPolicyProps

Properties for defining a VpcFirewallControlPolicy.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-vpcfirewallcontrolpolicy

Initializer 

import { VpcFirewallControlPolicyProps } from '@alicloud/ros-cdk-cloudfw'
const vpcFirewallControlPolicyProps: VpcFirewallControlPolicyProps = { ... }

Properties

Name Type Description
aclAction string | @alicloud/ros-cdk-core.IResolvable Property aclAction: The action that Cloud Firewall performs on the traffic.
applicationName string | @alicloud/ros-cdk-core.IResolvable Property applicationName: The application type that the access control policy supports.
description string | @alicloud/ros-cdk-core.IResolvable Property description: The description of the access control policy.
destination string | @alicloud/ros-cdk-core.IResolvable Property destination: The destination address in the access control policy.
destinationType string | @alicloud/ros-cdk-core.IResolvable Property destinationType: The type of the destination address in the access control policy.
newOrder string | @alicloud/ros-cdk-core.IResolvable Property newOrder: The priority of the access control policy.
proto string | @alicloud/ros-cdk-core.IResolvable Property proto: The type of the security protocol in the access control policy.
source string | @alicloud/ros-cdk-core.IResolvable Property source: The source address in the access control policy.
sourceType string | @alicloud/ros-cdk-core.IResolvable Property sourceType: The type of the source address in the access control policy.
vpcFirewallId string | @alicloud/ros-cdk-core.IResolvable Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy.
destPort string | @alicloud/ros-cdk-core.IResolvable Property destPort: The destination port in the access control policy.
destPortGroup string | @alicloud/ros-cdk-core.IResolvable Property destPortGroup: The address book of destination ports in the access control policy.
destPortType string | @alicloud/ros-cdk-core.IResolvable Property destPortType: The type of the destination port in the access control policy.
lang string | @alicloud/ros-cdk-core.IResolvable Property lang: The natural language of the request and response.
regionId string | @alicloud/ros-cdk-core.IResolvable Property regionId: Region ID.

aclActionRequired 

public readonly aclAction: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property aclAction: The action that Cloud Firewall performs on the traffic.

Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.

applicationNameRequired 

public readonly applicationName: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property applicationName: The application type that the access control policy supports.

Valid values: ANY (indicates that all application types are supported) FTP HTTP HTTPS MySQL SMTP SMTPS RDP VNC SSH Redis MQTT MongoDB Memcache SSL

descriptionRequired 

public readonly description: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property description: The description of the access control policy.

destinationRequired 

public readonly destination: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destination: The destination address in the access control policy.

Set this parameter in the following way: If the DestinationType parameter is set to net, set the value to a Classless Inter-Domain Routing (CIDR) block. Example: 10.2.3.0\/24. If the DestinationType parameter is set to group, set the value to the name of an address book. Example: db_group. If the DestinationType parameter is set to domain, set the value to a domain name. Example: *.aliyuncs.com.

destinationTypeRequired 

public readonly destinationType: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destinationType: The type of the destination address in the access control policy.

Valid values: net: CIDR block group: address book domain: domain name

newOrderRequired 

public readonly newOrder: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property newOrder: The priority of the access control policy.

The priority value starts from 1. A smaller priority value indicates a higher priority. Note The value of -1 indicates the lowest priority.

protoRequired 

public readonly proto: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property proto: The type of the security protocol in the access control policy.

sourceRequired 

public readonly source: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property source: The source address in the access control policy.

If the SourceType parameter is set to net, set the value to a CIDR block. Example: 10.2.3.0\/24. If the SourceType parameter is set to group, set the value to the name of an address book. Example: db_group.

sourceTypeRequired 

public readonly sourceType: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property sourceType: The type of the source address in the access control policy.

Valid values: net: CIDR block group: address book

vpcFirewallIdRequired 

public readonly vpcFirewallId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy.

If the VPC firewall is used to protect CEN, set the value to the ID of the CEN instance that the VPC firewall protects. Example: cen-ervw5jbw1234*. If the VPC firewall is used to protect Express Connect, set the value to the ID of the VPC firewall instance. Example: vfw-a42bbb748c91234***. Note You can call the DescribeVpcFirewallAclGroupList operation to query the ID of the policy group.

destPortOptional 

public readonly destPort: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destPort: The destination port in the access control policy.

Note This parameter must be specified if the DestPortType parameter is set to port.

destPortGroupOptional 

public readonly destPortGroup: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destPortGroup: The address book of destination ports in the access control policy.

Note This parameter must be specified if the DestPortType parameter is set to group.

destPortTypeOptional 

public readonly destPortType: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destPortType: The type of the destination port in the access control policy.

Valid values: port: port group: address book

langOptional 

public readonly lang: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property lang: The natural language of the request and response.

Valid values: zh: Chinese en: English

regionIdOptional 

public readonly regionId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property regionId: Region ID.

Default to cn-hangzhou.