ALIYUN::ALB::SecurityPolicy类型用于创建自定义安全策略。
语法
{
"Type": "ALIYUN::ALB::SecurityPolicy",
"Properties": {
"Ciphers": List,
"ResourceGroupId": String,
"TLSVersions": List,
"SecurityPolicyName": String
}
}
属性
属性名称 | 类型 | 必须 | 允许更新 | 描述 | 约束 |
---|---|---|---|---|---|
Ciphers | List | 是 | 是 | 支持的加密套件。 | 取值:
说明 当TLSVersions取值支持Ciphers时,该参数才生效。
|
ResourceGroupId | String | 否 | 否 | 资源组ID。 | 无 |
TLSVersions | List | 是 | 是 | 支持的TLS协议版本。 | 取值:
|
SecurityPolicyName | String | 是 | 是 | 安全策略名称。 | 长度为2~128个英文或中文字符,必须以大小字母或中文开头,可包含数字、半角句号(.)、下划线(_)和短划线(-)。 |
返回值
Fn::GetAtt
SecurityPolicyId:安全策略ID。
示例
-
JSON
格式{ "ROSTemplateFormatVersion": "2015-09-01", "Parameters": { "Ciphers": { "Type": "Json", "Description": "The supported cipher suites, which are determined by the TLS protocol version.\nThe specified cipher suites must be supported by at least one TLS protocol version that you specify.\nNote For example, if you set the TLSVersions parameter to TLSv1.3, you must specify cipher suites that are supported by TLS 1.3.", "MinLength": 1, "MaxLength": 20 }, "TLSVersions": { "Type": "Json", "Description": "The supported versions of the Transport Layer Security (TLS) protocol. Valid values: TLSv1.0, TLSv1.1, TLSv1.2, and TLSv1.3 and so on.", "MinLength": 1, "MaxLength": 5 }, "SecurityPolicyName": { "Type": "String", "Description": "The name of the security policy.\nThe name must be 2 to 128 characters in length, and can contain letters, digits, periods\n(.), underscores (_), and hyphens (-). The name must start with a letter." } }, "Resources": { "SecurityPolicy": { "Type": "ALIYUN::ALB::SecurityPolicy", "Properties": { "Ciphers": { "Ref": "Ciphers" }, "TLSVersions": { "Ref": "TLSVersions" }, "SecurityPolicyName": { "Ref": "SecurityPolicyName" } } } }, "Outputs": { "SecurityPolicyId": { "Description": "The ID of the security policy.", "Value": { "Fn::GetAtt": [ "SecurityPolicy", "SecurityPolicyId" ] } } } }