调用ALIYUN::DFS::AccessRule创建权限组规则_资源编排(ROS)-阿里云帮助中心

ALIYUN::DFS::AccessRule类型用于创建权限组规则。

语法

{
  "Type": "ALIYUN::DFS::AccessRule",
  "Properties": {
    "Description": String,
    "Priority": Number,
    "NetworkSegment": String,
    "AccessGroupId": String,
    "RWAccessType": String
  }
}

属性

属性名称	类型	必须	允许更新	描述	约束
Description	String	否	是	权限组规则的描述信息。	无
Priority	Number	否	是	权限组规则优先级。	当同一个授权对象匹配到多条规则时，高优先级规则生效。取值范围：1~100，1为最高优先级。
NetworkSegment	String	是	是	授权对象的IP地址或网段。	无
AccessGroupId	String	是	否	权限组ID。	无
RWAccessType	String	是	是	授权对象对文件系统的读写权限。	取值： RDWR：读写。 RDONLY：只读。

返回值

Fn::GetAtt

AccessRuleId：权限组规则ID。

示例

JSON格式

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
    "NetworkSegment": {
      "Type": "String",
      "Description": "The NetworkSegment of the Access Rule.",
      "MaxLength": 100
    },
    "AccessGroupId": {
      "Type": "String",
      "Description": "The resource ID of Access Group."
    },
    "RWAccessType": {
      "Type": "String",
      "Description": "The read/write permission of the authorized object on the file system.\nValues:\nRDWR (default) : read and write.\nRDONLY: read-only",
      "AllowedValues": [
        "RDWR",
        "RDONLY"
      ],
      "Default": "RDWR"
    }
  },
  "Resources": {
    "AccessRule": {
      "Type": "ALIYUN::DFS::AccessRule",
      "Properties": {
        "NetworkSegment": {
          "Ref": "NetworkSegment"
        },
        "AccessGroupId": {
          "Ref": "AccessGroupId"
        },
        "RWAccessType": {
          "Ref": "RWAccessType"
        }
      }
    }
  },
  "Outputs": {
    "AccessRuleId": {
      "Description": "The ID of the access_rule.",
      "Value": {
        "Fn::GetAtt": [
          "AccessRule",
          "AccessRuleId"
        ]
      }
    }
  }
}

YAML格式

ROSTemplateFormatVersion: '2015-09-01'
Parameters:
  NetworkSegment:
    Type: String
    Description: The NetworkSegment of the Access Rule.
    MaxLength: 100
  AccessGroupId:
    Type: String
    Description: The resource ID of Access Group.
  RWAccessType:
    Type: String
    Description: |-
      The read/write permission of the authorized object on the file system.
      Values:
      RDWR (default) : read and write.
      RDONLY: read-only
    AllowedValues:
      - RDWR
      - RDONLY
    Default: RDWR
Resources:
  AccessRule:
    Type: ALIYUN::DFS::AccessRule
    Properties:
      NetworkSegment:
        Ref: NetworkSegment
      AccessGroupId:
        Ref: AccessGroupId
      RWAccessType:
        Ref: RWAccessType
Outputs:
  AccessRuleId:
    Description: The ID of the access_rule.
    Value:
      Fn::GetAtt:
        - AccessRule
        - AccessRuleId