ALIYUN::ESA::WafRule

ROSTemplateFormatVersion: '2015-09-01'
Parameters:
  SiteVersion:
    Type: Number
    Description:
      en: The website ID, which can be obtained by calling the [ListSites](https://www.alibabacloud.com/help/en/doc-detail/2850189.html) operation.
    Default: Null
    Required: false
  RulesetId:
    Type: Number
    Description:
      en: The ID of the WAF ruleset, which can be obtained by calling the [ListWafRulesets](https://www.alibabacloud.com/help/en/doc-detail/2850233.html) operation.
    Default: Null
    Required: false
  SiteId:
    Type: Number
    Description:
      en: The website ID, which can be obtained by calling the [ListSites](https://www.alibabacloud.com/help/en/doc-detail/2850189.html) operation.
    Required: true
  Phase:
    Type: String
    Description:
      en: The version of the website.
    Required: true
  Shared:
    Description:
      en: The configurations shared by multiple rules.
    Required: false
    Default: Null
    Type: Json
    AssociationPropertyMetadata:
      Parameters:
        Target:
          Type: String
          Description:
            en: 'Protection target type: web/app.'
          AllowedValues:
            - web
            - app
          Default: Null
          Required: false
        Actions:
          Description:
            en: Action Extension.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              Response:
                Description:
                  en: Custom Response.
                Required: false
                Default: Null
                Type: Json
                AssociationPropertyMetadata:
                  Parameters:
                    Code:
                      Type: Number
                      Description:
                        en: Custom Response Codes.
                      Default: Null
                      Required: false
                    Id:
                      Type: Number
                      Description:
                        en: Custom response page id.
                      Default: Null
                      Required: false
        CrossSiteId:
          Type: Number
          Description:
            en: Specify the cross-domain site id.
          Default: Null
          Required: false
        Mode:
          Type: String
          Description:
            en: |-
              Web sdk integration mode:
              - `automatic`
              - `manual`.
          AllowedValues:
            - automatic
            - manual
          Default: Null
          Required: false
        Action:
          Type: String
          Description:
            en: Action.
          Default: Null
          Required: false
        Expression:
          Type: String
          Description:
            en: Expression.
          Default: Null
          Required: false
        Match:
          Description:
            en: Matching Engine.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              MatchType:
                Type: String
                Description:
                  en: Match Domain.
                Default: Null
                Required: false
              Logic:
                Type: String
                Description:
                  en: Logical relationship.
                Default: Null
                Required: false
              Criteria:
                Description:
                  en: Logical List.
                Required: false
                Default: Null
                Type: Json
                AssociationProperty: List[Parameter]
                AssociationPropertyMetadata:
                  Parameter:
                    Description:
                      en: Logical List.
                    Required: false
                    Default: Null
                    Type: Json
                    AssociationPropertyMetadata:
                      Parameters:
                        MatchType:
                          Type: String
                          Description:
                            en: Match Domain.
                          Default: Null
                          Required: false
                        Logic:
                          Type: String
                          Description:
                            en: Logical relationship.
                          Default: Null
                          Required: false
                        Criteria:
                          Description:
                            en: Logical List.
                          Required: false
                          Default: Null
                          Type: Json
                          AssociationProperty: List[Parameter]
                          AssociationPropertyMetadata:
                            Parameter:
                              Description:
                                en: Logical List.
                              Required: false
                              Default: Null
                              Type: Json
                              AssociationPropertyMetadata:
                                Parameters:
                                  MatchType:
                                    Type: String
                                    Description:
                                      en: Match Domain.
                                    Default: Null
                                    Required: false
                                  Logic:
                                    Type: String
                                    Description:
                                      en: Logical relationship.
                                    Default: Null
                                    Required: false
                                  Criteria:
                                    Description:
                                      en: Logical List.
                                    Required: false
                                    Default: Null
                                    Type: Json
                                    AssociationProperty: List[Parameters]
                                    AssociationPropertyMetadata:
                                      Parameters:
                                        MatchType:
                                          Type: String
                                          Description:
                                            en: Match Domain.
                                          Default: Null
                                          Required: false
        Name:
          Type: String
          Description:
            en: Rule Set Name.
          Default: Null
          Required: false
  Config:
    Description:
      en: The configuration of the rule.
    Required: false
    Default: Null
    Type: Json
    AssociationPropertyMetadata:
      Parameters:
        Status:
          Type: String
          Description:
            en: Rule Status.
          Default: Null
          Required: false
        ManagedGroupId:
          Type: Number
          Description:
            en: Managed rule Group id.
          Default: Null
          Required: false
        Type:
          Type: String
          Description:
            en: Rule Type.
          Default: Null
          Required: false
        Sigchl:
          Description:
            en: Token check.
          Required: false
          Default: Null
          Type: Json
          AssociationProperty: List[Parameter]
          AssociationPropertyMetadata:
            Parameter:
              Type: String
              Description:
                en: Token check.
              Default: Null
              Required: false
        Name:
          Type: String
          Description:
            en: Rule Name.
          Default: Null
          Required: false
        SecurityLevel:
          Description:
            en: Security Level.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              Value:
                Type: String
                Description:
                  en: Value of security level.
                Default: Null
                Required: false
        ManagedRulesets:
          Description:
            en: Managed Rule Set List.
          Required: false
          Default: Null
          Type: Json
          AssociationProperty: List[Parameter]
          AssociationPropertyMetadata:
            Parameter:
              Description:
                en: Managed Rule Set List.
              Required: false
              Default: Null
              Type: Json
              AssociationPropertyMetadata:
                Parameters:
                  NumberTotal:
                    Type: Number
                    Description:
                      en: Total number of rules.
                    Default: Null
                    Required: false
                  ProtectionLevel:
                    Type: Number
                    Description:
                      en: Protection level.
                    Default: Null
                    Required: false
                  ManagedRules:
                    Description:
                      en: Managed Rule List.
                    Required: false
                    Default: Null
                    Type: Json
                    AssociationProperty: List[Parameters]
                    AssociationPropertyMetadata:
                      Parameters:
                        Status:
                          Type: String
                          Description:
                            en: Managed Rule Status.
                          Default: Null
                          Required: false
                        Action:
                          Type: String
                          Description:
                            en: Managed Rule Action.
                          Default: Null
                          Required: false
                        Id:
                          Type: Number
                          Description:
                            en: Managed rule ID.
                          Default: Null
                          Required: false
                  NumberEnabled:
                    Type: Number
                    Description:
                      en: Number of rules opened.
                    Default: Null
                    Required: false
                  AttackType:
                    Type: Number
                    Description:
                      en: Attack Type.
                    Default: Null
                    Required: false
                  Action:
                    Type: String
                    Description:
                      en: Execute Action.
                    Default: Null
                    Required: false
        Notes:
          Type: String
          Description:
            en: Remarks.
          Default: Null
          Required: false
        Value:
          Type: String
          Description:
            en: IP access control value.
          Default: Null
          Required: false
        Actions:
          Description:
            en: Extended Action.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              Response:
                Description:
                  en: Customize Response Page.
                Required: false
                Default: Null
                Type: Json
                AssociationPropertyMetadata:
                  Parameters:
                    Code:
                      Type: Number
                      Description:
                        en: Custom Response Codes.
                      Default: Null
                      Required: false
                    Id:
                      Type: Number
                      Description:
                        en: Custom response page ID.
                      Default: Null
                      Required: false
              Bypass:
                Description:
                  en: Skip Module.
                Required: false
                Default: Null
                Type: Json
                AssociationPropertyMetadata:
                  Parameters:
                    Skip:
                      Type: String
                      Description:
                        en: Skip module type.
                      Default: Null
                      Required: false
                    Tags:
                      Description:
                        en: Skip Module List.
                      Required: false
                      Default: Null
                      Type: Json
                      AssociationProperty: List[Parameter]
                      AssociationPropertyMetadata:
                        Parameter:
                          Type: String
                          Description:
                            en: Skip Module List.
                          Default: Null
                          Required: false
                        ListMetadata:
                          Order:
                            - Key
                            - Value
                    RegularTypes:
                      Description:
                        en: Managed rule type list.
                      Required: false
                      Default: Null
                      Type: Json
                      AssociationProperty: List[Parameter]
                      AssociationPropertyMetadata:
                        Parameter:
                          Type: String
                          Description:
                            en: Managed rule type list.
                          Default: Null
                          Required: false
                    RegularRules:
                      Description:
                        en: Managed rule id list.
                      Required: false
                      Default: Null
                      Type: Json
                      AssociationProperty: List[Parameter]
                      AssociationPropertyMetadata:
                        Parameter:
                          Type: Number
                          Description:
                            en: Managed rule id list.
                          Default: Null
                          Required: false
                    CustomRules:
                      Description:
                        en: Custom rule id list.
                      Required: false
                      Default: Null
                      Type: Json
                      AssociationProperty: List[Parameter]
                      AssociationPropertyMetadata:
                        Parameter:
                          Type: Number
                          Description:
                            en: Custom rule id list.
                          Default: Null
                          Required: false
        RateLimit:
          Description:
            en: Frequency Control.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              Threshold:
                Description:
                  en: Threshold.
                Required: false
                Default: Null
                Type: Json
                AssociationPropertyMetadata:
                  Parameters:
                    DistinctManagedRules:
                      Type: Number
                      Description:
                        en: Different Managed Rules Threshold.
                      Default: Null
                      Required: false
                    Request:
                      Type: Number
                      Description:
                        en: Request Threshold.
                      Default: Null
                      Required: false
                    Traffic:
                      Type: String
                      Description:
                        en: Flow Threshold.
                      Default: Null
                      Required: false
                    ResponseStatus:
                      Description:
                        en: Response Code Threshold.
                      Required: false
                      Default: Null
                      Type: Json
                      AssociationPropertyMetadata:
                        Parameters:
                          Count:
                            Type: Number
                            Description:
                              en: Response code times threshold.
                            Default: Null
                            Required: false
                          Code:
                            Type: Number
                            Description:
                              en: HTTP response code.
                            Default: Null
                            Required: false
                          Ratio:
                            Type: Number
                            Description:
                              en: Percentage of response code.
                            Default: Null
                            Required: false
                    ManagedRulesBlocked:
                      Type: Number
                      Description:
                        en: Managed Rule Hit Threshold.
                      Default: Null
                      Required: false
              Characteristics:
                Description:
                  en: Statistical object.
                Required: false
                Default: Null
                Type: Json
                AssociationPropertyMetadata:
                  Parameters:
                    Logic:
                      Type: String
                      Description:
                        en: Logical relationship.
                      Default: Null
                      Required: false
                    Criteria:
                      Description:
                        en: Logical List.
                      Required: false
                      Default: Null
                      Type: Json
                      AssociationProperty: List[Parameter]
                      AssociationPropertyMetadata:
                        Parameter:
                          Description:
                            en: Logical List.
                          Required: false
                          Default: Null
                          Type: Json
                          AssociationPropertyMetadata:
                            Parameters:
                              MatchType:
                                Type: String
                                Description:
                                  en: Match Domain.
                                Default: Null
                                Required: false
                              Logic:
                                Type: String
                                Description:
                                  en: Logical relationship.
                                Default: Null
                                Required: false
                              Criteria:
                                Description:
                                  en: Logical List.
                                Required: false
                                Default: Null
                                Type: Json
                                AssociationProperty: List[Parameter]
                                AssociationPropertyMetadata:
                                  Parameter:
                                    Description:
                                      en: Logical List.
                                    Required: false
                                    Default: Null
                                    Type: Json
                                    AssociationPropertyMetadata:
                                      Parameters:
                                        MatchType:
                                          Type: String
                                          Description:
                                            en: Match Domain.
                                          Default: Null
                                          Required: false
                                        Logic:
                                          Type: String
                                          Description:
                                            en: Logical relationship.
                                          Default: Null
                                          Required: false
                                        Criteria:
                                          Description:
                                            en: Logical List.
                                          Required: false
                                          Default: Null
                                          Type: Json
                                          AssociationProperty: List[Parameters]
                                          AssociationPropertyMetadata:
                                            Parameters:
                                              MatchType:
                                                Type: String
                                                Description:
                                                  en: Match Domain.
                                                Default: Null
                                                Required: false
              Interval:
                Type: Number
                Description:
                  en: Statistical Duration.
                Default: Null
                Required: false
              Ttl:
                Type: Number
                Description:
                  en: Timeout.
                Default: Null
                Required: false
              OnHit:
                Type: Boolean
                Description:
                  en: Apply on requests that hit the cache.
                Default: Null
                Required: false
        Expression:
          Type: String
          Description:
            en: Expression.
          Default: Null
          Required: false
        Timer:
          Description:
            en: Timer.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              Scopes:
                Type: String
                Description:
                  en: |-
                    Timing type: 
                    - `permanent`
                    - `periods`
                    - `weekly`.
                AllowedValues:
                  - permanent
                  - periods
                  - weekly
                Default: Null
                Required: false
              WeeklyPeriods:
                Description:
                  en: Weekly effective time period.
                Required: false
                Default: Null
                Type: Json
                AssociationProperty: List[Parameter]
                AssociationPropertyMetadata:
                  Parameter:
                    Description:
                      en: Weekly effective time period.
                    Required: false
                    Default: Null
                    Type: Json
                    AssociationPropertyMetadata:
                      Parameters:
                        Days:
                          Type: String
                          Description:
                            en: 'Cycle, multiple use comma separated, 1-7 respectively represent Monday-Sunday. <br> Example: Monday, Wednesday value is "1,3".'
                          Default: Null
                          Required: false
                        DailyPeriods:
                          Description:
                            en: Effective time in the cycle.
                          Required: false
                          Default: Null
                          Type: Json
                          AssociationProperty: List[Parameters]
                          AssociationPropertyMetadata:
                            Parameters:
                              Start:
                                Type: String
                                Description:
                                  en: Start time in HH:mm:ss format.
                                Default: Null
                                Required: false
                              End:
                                Type: String
                                Description:
                                  en: End time in HH:mm:ss format.
                                Default: Null
                                Required: false
              Periods:
                Description:
                  en: Effective time period.
                Required: false
                Default: Null
                Type: Json
                AssociationProperty: List[Parameters]
                AssociationPropertyMetadata:
                  Parameters:
                    Start:
                      Type: String
                      Description:
                        en: Start time, value is UTC time in RFC3339 format.
                      Default: Null
                      Required: false
                    End:
                      Type: String
                      Description:
                        en: The end time, which is a UTC time in RFC3339 format.
                      Default: Null
                      Required: false
              Zone:
                Type: Number
                Description:
                  en: 'The time zone. If it is not specified, the default value is UTC +00:00. <br> Example: 8 means East Zone 8,-8 means West Zone 8 <br> Range:-12 -+14.'
                Default: Null
                Required: false
        AppPackage:
          Description:
            en: Secondary packaging inspection.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              PackageSigns:
                Description:
                  en: Secondary packaging inspection.
                Required: false
                Default: Null
                Type: Json
                AssociationProperty: List[Parameters]
                AssociationPropertyMetadata:
                  Parameters:
                    Name:
                      Type: String
                      Description:
                        en: Specify a legal package name.
                      Default: Null
                      Required: false
                    Sign:
                      Type: String
                      Description:
                        en: Package Signing.
                      Default: Null
                      Required: false
        Action:
          Type: String
          Description:
            en: Execute Action.
          Default: Null
          Required: false
        AppSdk:
          Description:
            en: App sdk.
          Required: false
          Default: Null
          Type: Json
          AssociationPropertyMetadata:
            Parameters:
              CustomSign:
                Description:
                  en: Custom Tab Fields.
                Required: false
                Default: Null
                Type: Json
                AssociationPropertyMetadata:
                  Parameters:
                    Key:
                      Type: String
                      Description:
                        en: Field Name.
                      Default: Null
                      Required: false
                    Value:
                      Type: String
                      Description:
                        en: Field Value.
                      Default: Null
                      Required: false
              CustomSignStatus:
                Type: String
                Description:
                  en: Custom Tab Field Switch.
                Default: Null
                Required: false
              FeatureAbnormal:
                Description:
                  en: Characteristic anomaly.
                Required: false
                Default: Null
                Type: Json
                AssociationProperty: List[Parameter]
                AssociationPropertyMetadata:
                  Parameter:
                    Type: String
                    Description:
                      en: Characteristic anomaly.
                    Default: Null
                    Required: false
        ManagedList:
          Type: String
          Description:
            en: List of names.
          Default: Null
          Required: false
        Id:
          Type: Number
          Description:
            en: Rule id.
          Default: Null
          Required: false
Resources:
  ExtensionResource:
    Type: ALIYUN::ESA::WafRule
    Properties:
      SiteVersion:
        Ref: SiteVersion
      RulesetId:
        Ref: RulesetId
      SiteId:
        Ref: SiteId
      Phase:
        Ref: Phase
      Shared:
        Ref: Shared
      Config:
        Ref: Config
Outputs:
  Phase:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Phase
    Description: The version of the website.
  RulesetId:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - RulesetId
    Description: The ID of the WAF ruleset, which can be obtained by calling the [ListWafRulesets](https://www.alibabacloud.com/help/en/doc-detail/2850233.html) operation.
  UpdateTime:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdateTime
    Description: The time when the rule was last modified.
  Config:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Config
    Description: The configuration of the rule.
  WafRuleId:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - WafRuleId
    Description: WafRule Id.

                        

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
    "SiteVersion": {
      "Type": "Number",
      "Description": {
        "en": "The website ID, which can be obtained by calling the [ListSites](https://www.alibabacloud.com/help/en/doc-detail/2850189.html) operation."
      },
      "Default": null,
      "Required": false
    },
    "RulesetId": {
      "Type": "Number",
      "Description": {
        "en": "The ID of the WAF ruleset, which can be obtained by calling the [ListWafRulesets](https://www.alibabacloud.com/help/en/doc-detail/2850233.html) operation."
      },
      "Default": null,
      "Required": false
    },
    "SiteId": {
      "Type": "Number",
      "Description": {
        "en": "The website ID, which can be obtained by calling the [ListSites](https://www.alibabacloud.com/help/en/doc-detail/2850189.html) operation."
      },
      "Required": true
    },
    "Phase": {
      "Type": "String",
      "Description": {
        "en": "The version of the website."
      },
      "Required": true
    },
    "Shared": {
      "Description": {
        "en": "The configurations shared by multiple rules."
      },
      "Required": false,
      "Default": null,
      "Type": "Json",
      "AssociationPropertyMetadata": {
        "Parameters": {
          "Target": {
            "Type": "String",
            "Description": {
              "en": "Protection target type: web/app."
            },
            "AllowedValues": [
              "web",
              "app"
            ],
            "Default": null,
            "Required": false
          },
          "Actions": {
            "Description": {
              "en": "Action Extension."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "Response": {
                  "Description": {
                    "en": "Custom Response."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "Code": {
                        "Type": "Number",
                        "Description": {
                          "en": "Custom Response Codes."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Id": {
                        "Type": "Number",
                        "Description": {
                          "en": "Custom response page id."
                        },
                        "Default": null,
                        "Required": false
                      }
                    }
                  }
                }
              }
            }
          },
          "CrossSiteId": {
            "Type": "Number",
            "Description": {
              "en": "Specify the cross-domain site id."
            },
            "Default": null,
            "Required": false
          },
          "Mode": {
            "Type": "String",
            "Description": {
              "en": "Web sdk integration mode:\n- `automatic`\n- `manual`."
            },
            "AllowedValues": [
              "automatic",
              "manual"
            ],
            "Default": null,
            "Required": false
          },
          "Action": {
            "Type": "String",
            "Description": {
              "en": "Action."
            },
            "Default": null,
            "Required": false
          },
          "Expression": {
            "Type": "String",
            "Description": {
              "en": "Expression."
            },
            "Default": null,
            "Required": false
          },
          "Match": {
            "Description": {
              "en": "Matching Engine."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "MatchType": {
                  "Type": "String",
                  "Description": {
                    "en": "Match Domain."
                  },
                  "Default": null,
                  "Required": false
                },
                "Logic": {
                  "Type": "String",
                  "Description": {
                    "en": "Logical relationship."
                  },
                  "Default": null,
                  "Required": false
                },
                "Criteria": {
                  "Description": {
                    "en": "Logical List."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationProperty": "List[Parameter]",
                  "AssociationPropertyMetadata": {
                    "Parameter": {
                      "Description": {
                        "en": "Logical List."
                      },
                      "Required": false,
                      "Default": null,
                      "Type": "Json",
                      "AssociationPropertyMetadata": {
                        "Parameters": {
                          "MatchType": {
                            "Type": "String",
                            "Description": {
                              "en": "Match Domain."
                            },
                            "Default": null,
                            "Required": false
                          },
                          "Logic": {
                            "Type": "String",
                            "Description": {
                              "en": "Logical relationship."
                            },
                            "Default": null,
                            "Required": false
                          },
                          "Criteria": {
                            "Description": {
                              "en": "Logical List."
                            },
                            "Required": false,
                            "Default": null,
                            "Type": "Json",
                            "AssociationProperty": "List[Parameter]",
                            "AssociationPropertyMetadata": {
                              "Parameter": {
                                "Description": {
                                  "en": "Logical List."
                                },
                                "Required": false,
                                "Default": null,
                                "Type": "Json",
                                "AssociationPropertyMetadata": {
                                  "Parameters": {
                                    "MatchType": {
                                      "Type": "String",
                                      "Description": {
                                        "en": "Match Domain."
                                      },
                                      "Default": null,
                                      "Required": false
                                    },
                                    "Logic": {
                                      "Type": "String",
                                      "Description": {
                                        "en": "Logical relationship."
                                      },
                                      "Default": null,
                                      "Required": false
                                    },
                                    "Criteria": {
                                      "Description": {
                                        "en": "Logical List."
                                      },
                                      "Required": false,
                                      "Default": null,
                                      "Type": "Json",
                                      "AssociationProperty": "List[Parameters]",
                                      "AssociationPropertyMetadata": {
                                        "Parameters": {
                                          "MatchType": {
                                            "Type": "String",
                                            "Description": {
                                              "en": "Match Domain."
                                            },
                                            "Default": null,
                                            "Required": false
                                          }
                                        }
                                      }
                                    }
                                  }
                                }
                              }
                            }
                          }
                        }
                      }
                    }
                  }
                }
              }
            }
          },
          "Name": {
            "Type": "String",
            "Description": {
              "en": "Rule Set Name."
            },
            "Default": null,
            "Required": false
          }
        }
      }
    },
    "Config": {
      "Description": {
        "en": "The configuration of the rule."
      },
      "Required": false,
      "Default": null,
      "Type": "Json",
      "AssociationPropertyMetadata": {
        "Parameters": {
          "Status": {
            "Type": "String",
            "Description": {
              "en": "Rule Status."
            },
            "Default": null,
            "Required": false
          },
          "ManagedGroupId": {
            "Type": "Number",
            "Description": {
              "en": "Managed rule Group id."
            },
            "Default": null,
            "Required": false
          },
          "Type": {
            "Type": "String",
            "Description": {
              "en": "Rule Type."
            },
            "Default": null,
            "Required": false
          },
          "Sigchl": {
            "Description": {
              "en": "Token check."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationProperty": "List[Parameter]",
            "AssociationPropertyMetadata": {
              "Parameter": {
                "Type": "String",
                "Description": {
                  "en": "Token check."
                },
                "Default": null,
                "Required": false
              }
            }
          },
          "Name": {
            "Type": "String",
            "Description": {
              "en": "Rule Name."
            },
            "Default": null,
            "Required": false
          },
          "SecurityLevel": {
            "Description": {
              "en": "Security Level."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "Value": {
                  "Type": "String",
                  "Description": {
                    "en": "Value of security level."
                  },
                  "Default": null,
                  "Required": false
                }
              }
            }
          },
          "ManagedRulesets": {
            "Description": {
              "en": "Managed Rule Set List."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationProperty": "List[Parameter]",
            "AssociationPropertyMetadata": {
              "Parameter": {
                "Description": {
                  "en": "Managed Rule Set List."
                },
                "Required": false,
                "Default": null,
                "Type": "Json",
                "AssociationPropertyMetadata": {
                  "Parameters": {
                    "NumberTotal": {
                      "Type": "Number",
                      "Description": {
                        "en": "Total number of rules."
                      },
                      "Default": null,
                      "Required": false
                    },
                    "ProtectionLevel": {
                      "Type": "Number",
                      "Description": {
                        "en": "Protection level."
                      },
                      "Default": null,
                      "Required": false
                    },
                    "ManagedRules": {
                      "Description": {
                        "en": "Managed Rule List."
                      },
                      "Required": false,
                      "Default": null,
                      "Type": "Json",
                      "AssociationProperty": "List[Parameters]",
                      "AssociationPropertyMetadata": {
                        "Parameters": {
                          "Status": {
                            "Type": "String",
                            "Description": {
                              "en": "Managed Rule Status."
                            },
                            "Default": null,
                            "Required": false
                          },
                          "Action": {
                            "Type": "String",
                            "Description": {
                              "en": "Managed Rule Action."
                            },
                            "Default": null,
                            "Required": false
                          },
                          "Id": {
                            "Type": "Number",
                            "Description": {
                              "en": "Managed rule ID."
                            },
                            "Default": null,
                            "Required": false
                          }
                        }
                      }
                    },
                    "NumberEnabled": {
                      "Type": "Number",
                      "Description": {
                        "en": "Number of rules opened."
                      },
                      "Default": null,
                      "Required": false
                    },
                    "AttackType": {
                      "Type": "Number",
                      "Description": {
                        "en": "Attack Type."
                      },
                      "Default": null,
                      "Required": false
                    },
                    "Action": {
                      "Type": "String",
                      "Description": {
                        "en": "Execute Action."
                      },
                      "Default": null,
                      "Required": false
                    }
                  }
                }
              }
            }
          },
          "Notes": {
            "Type": "String",
            "Description": {
              "en": "Remarks."
            },
            "Default": null,
            "Required": false
          },
          "Value": {
            "Type": "String",
            "Description": {
              "en": "IP access control value."
            },
            "Default": null,
            "Required": false
          },
          "Actions": {
            "Description": {
              "en": "Extended Action."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "Response": {
                  "Description": {
                    "en": "Customize Response Page."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "Code": {
                        "Type": "Number",
                        "Description": {
                          "en": "Custom Response Codes."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Id": {
                        "Type": "Number",
                        "Description": {
                          "en": "Custom response page ID."
                        },
                        "Default": null,
                        "Required": false
                      }
                    }
                  }
                },
                "Bypass": {
                  "Description": {
                    "en": "Skip Module."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "Skip": {
                        "Type": "String",
                        "Description": {
                          "en": "Skip module type."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Tags": {
                        "Description": {
                          "en": "Skip Module List."
                        },
                        "Required": false,
                        "Default": null,
                        "Type": "Json",
                        "AssociationProperty": "List[Parameter]",
                        "AssociationPropertyMetadata": {
                          "Parameter": {
                            "Type": "String",
                            "Description": {
                              "en": "Skip Module List."
                            },
                            "Default": null,
                            "Required": false
                          },
                          "ListMetadata": {
                            "Order": [
                              "Key",
                              "Value"
                            ]
                          }
                        }
                      },
                      "RegularTypes": {
                        "Description": {
                          "en": "Managed rule type list."
                        },
                        "Required": false,
                        "Default": null,
                        "Type": "Json",
                        "AssociationProperty": "List[Parameter]",
                        "AssociationPropertyMetadata": {
                          "Parameter": {
                            "Type": "String",
                            "Description": {
                              "en": "Managed rule type list."
                            },
                            "Default": null,
                            "Required": false
                          }
                        }
                      },
                      "RegularRules": {
                        "Description": {
                          "en": "Managed rule id list."
                        },
                        "Required": false,
                        "Default": null,
                        "Type": "Json",
                        "AssociationProperty": "List[Parameter]",
                        "AssociationPropertyMetadata": {
                          "Parameter": {
                            "Type": "Number",
                            "Description": {
                              "en": "Managed rule id list."
                            },
                            "Default": null,
                            "Required": false
                          }
                        }
                      },
                      "CustomRules": {
                        "Description": {
                          "en": "Custom rule id list."
                        },
                        "Required": false,
                        "Default": null,
                        "Type": "Json",
                        "AssociationProperty": "List[Parameter]",
                        "AssociationPropertyMetadata": {
                          "Parameter": {
                            "Type": "Number",
                            "Description": {
                              "en": "Custom rule id list."
                            },
                            "Default": null,
                            "Required": false
                          }
                        }
                      }
                    }
                  }
                }
              }
            }
          },
          "RateLimit": {
            "Description": {
              "en": "Frequency Control."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "Threshold": {
                  "Description": {
                    "en": "Threshold."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "DistinctManagedRules": {
                        "Type": "Number",
                        "Description": {
                          "en": "Different Managed Rules Threshold."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Request": {
                        "Type": "Number",
                        "Description": {
                          "en": "Request Threshold."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Traffic": {
                        "Type": "String",
                        "Description": {
                          "en": "Flow Threshold."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "ResponseStatus": {
                        "Description": {
                          "en": "Response Code Threshold."
                        },
                        "Required": false,
                        "Default": null,
                        "Type": "Json",
                        "AssociationPropertyMetadata": {
                          "Parameters": {
                            "Count": {
                              "Type": "Number",
                              "Description": {
                                "en": "Response code times threshold."
                              },
                              "Default": null,
                              "Required": false
                            },
                            "Code": {
                              "Type": "Number",
                              "Description": {
                                "en": "HTTP response code."
                              },
                              "Default": null,
                              "Required": false
                            },
                            "Ratio": {
                              "Type": "Number",
                              "Description": {
                                "en": "Percentage of response code."
                              },
                              "Default": null,
                              "Required": false
                            }
                          }
                        }
                      },
                      "ManagedRulesBlocked": {
                        "Type": "Number",
                        "Description": {
                          "en": "Managed Rule Hit Threshold."
                        },
                        "Default": null,
                        "Required": false
                      }
                    }
                  }
                },
                "Characteristics": {
                  "Description": {
                    "en": "Statistical object."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "Logic": {
                        "Type": "String",
                        "Description": {
                          "en": "Logical relationship."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Criteria": {
                        "Description": {
                          "en": "Logical List."
                        },
                        "Required": false,
                        "Default": null,
                        "Type": "Json",
                        "AssociationProperty": "List[Parameter]",
                        "AssociationPropertyMetadata": {
                          "Parameter": {
                            "Description": {
                              "en": "Logical List."
                            },
                            "Required": false,
                            "Default": null,
                            "Type": "Json",
                            "AssociationPropertyMetadata": {
                              "Parameters": {
                                "MatchType": {
                                  "Type": "String",
                                  "Description": {
                                    "en": "Match Domain."
                                  },
                                  "Default": null,
                                  "Required": false
                                },
                                "Logic": {
                                  "Type": "String",
                                  "Description": {
                                    "en": "Logical relationship."
                                  },
                                  "Default": null,
                                  "Required": false
                                },
                                "Criteria": {
                                  "Description": {
                                    "en": "Logical List."
                                  },
                                  "Required": false,
                                  "Default": null,
                                  "Type": "Json",
                                  "AssociationProperty": "List[Parameter]",
                                  "AssociationPropertyMetadata": {
                                    "Parameter": {
                                      "Description": {
                                        "en": "Logical List."
                                      },
                                      "Required": false,
                                      "Default": null,
                                      "Type": "Json",
                                      "AssociationPropertyMetadata": {
                                        "Parameters": {
                                          "MatchType": {
                                            "Type": "String",
                                            "Description": {
                                              "en": "Match Domain."
                                            },
                                            "Default": null,
                                            "Required": false
                                          },
                                          "Logic": {
                                            "Type": "String",
                                            "Description": {
                                              "en": "Logical relationship."
                                            },
                                            "Default": null,
                                            "Required": false
                                          },
                                          "Criteria": {
                                            "Description": {
                                              "en": "Logical List."
                                            },
                                            "Required": false,
                                            "Default": null,
                                            "Type": "Json",
                                            "AssociationProperty": "List[Parameters]",
                                            "AssociationPropertyMetadata": {
                                              "Parameters": {
                                                "MatchType": {
                                                  "Type": "String",
                                                  "Description": {
                                                    "en": "Match Domain."
                                                  },
                                                  "Default": null,
                                                  "Required": false
                                                }
                                              }
                                            }
                                          }
                                        }
                                      }
                                    }
                                  }
                                }
                              }
                            }
                          }
                        }
                      }
                    }
                  }
                },
                "Interval": {
                  "Type": "Number",
                  "Description": {
                    "en": "Statistical Duration."
                  },
                  "Default": null,
                  "Required": false
                },
                "Ttl": {
                  "Type": "Number",
                  "Description": {
                    "en": "Timeout."
                  },
                  "Default": null,
                  "Required": false
                },
                "OnHit": {
                  "Type": "Boolean",
                  "Description": {
                    "en": "Apply on requests that hit the cache."
                  },
                  "Default": null,
                  "Required": false
                }
              }
            }
          },
          "Expression": {
            "Type": "String",
            "Description": {
              "en": "Expression."
            },
            "Default": null,
            "Required": false
          },
          "Timer": {
            "Description": {
              "en": "Timer."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "Scopes": {
                  "Type": "String",
                  "Description": {
                    "en": "Timing type: \n- `permanent`\n- `periods`\n- `weekly`."
                  },
                  "AllowedValues": [
                    "permanent",
                    "periods",
                    "weekly"
                  ],
                  "Default": null,
                  "Required": false
                },
                "WeeklyPeriods": {
                  "Description": {
                    "en": "Weekly effective time period."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationProperty": "List[Parameter]",
                  "AssociationPropertyMetadata": {
                    "Parameter": {
                      "Description": {
                        "en": "Weekly effective time period."
                      },
                      "Required": false,
                      "Default": null,
                      "Type": "Json",
                      "AssociationPropertyMetadata": {
                        "Parameters": {
                          "Days": {
                            "Type": "String",
                            "Description": {
                              "en": "Cycle, multiple use comma separated, 1-7 respectively represent Monday-Sunday. <br> Example: Monday, Wednesday value is \"1,3\"."
                            },
                            "Default": null,
                            "Required": false
                          },
                          "DailyPeriods": {
                            "Description": {
                              "en": "Effective time in the cycle."
                            },
                            "Required": false,
                            "Default": null,
                            "Type": "Json",
                            "AssociationProperty": "List[Parameters]",
                            "AssociationPropertyMetadata": {
                              "Parameters": {
                                "Start": {
                                  "Type": "String",
                                  "Description": {
                                    "en": "Start time in HH:mm:ss format."
                                  },
                                  "Default": null,
                                  "Required": false
                                },
                                "End": {
                                  "Type": "String",
                                  "Description": {
                                    "en": "End time in HH:mm:ss format."
                                  },
                                  "Default": null,
                                  "Required": false
                                }
                              }
                            }
                          }
                        }
                      }
                    }
                  }
                },
                "Periods": {
                  "Description": {
                    "en": "Effective time period."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationProperty": "List[Parameters]",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "Start": {
                        "Type": "String",
                        "Description": {
                          "en": "Start time, value is UTC time in RFC3339 format."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "End": {
                        "Type": "String",
                        "Description": {
                          "en": "The end time, which is a UTC time in RFC3339 format."
                        },
                        "Default": null,
                        "Required": false
                      }
                    }
                  }
                },
                "Zone": {
                  "Type": "Number",
                  "Description": {
                    "en": "The time zone. If it is not specified, the default value is UTC +00:00. <br> Example: 8 means East Zone 8,-8 means West Zone 8 <br> Range:-12 -+14."
                  },
                  "Default": null,
                  "Required": false
                }
              }
            }
          },
          "AppPackage": {
            "Description": {
              "en": "Secondary packaging inspection."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "PackageSigns": {
                  "Description": {
                    "en": "Secondary packaging inspection."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationProperty": "List[Parameters]",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "Name": {
                        "Type": "String",
                        "Description": {
                          "en": "Specify a legal package name."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Sign": {
                        "Type": "String",
                        "Description": {
                          "en": "Package Signing."
                        },
                        "Default": null,
                        "Required": false
                      }
                    }
                  }
                }
              }
            }
          },
          "Action": {
            "Type": "String",
            "Description": {
              "en": "Execute Action."
            },
            "Default": null,
            "Required": false
          },
          "AppSdk": {
            "Description": {
              "en": "App sdk."
            },
            "Required": false,
            "Default": null,
            "Type": "Json",
            "AssociationPropertyMetadata": {
              "Parameters": {
                "CustomSign": {
                  "Description": {
                    "en": "Custom Tab Fields."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationPropertyMetadata": {
                    "Parameters": {
                      "Key": {
                        "Type": "String",
                        "Description": {
                          "en": "Field Name."
                        },
                        "Default": null,
                        "Required": false
                      },
                      "Value": {
                        "Type": "String",
                        "Description": {
                          "en": "Field Value."
                        },
                        "Default": null,
                        "Required": false
                      }
                    }
                  }
                },
                "CustomSignStatus": {
                  "Type": "String",
                  "Description": {
                    "en": "Custom Tab Field Switch."
                  },
                  "Default": null,
                  "Required": false
                },
                "FeatureAbnormal": {
                  "Description": {
                    "en": "Characteristic anomaly."
                  },
                  "Required": false,
                  "Default": null,
                  "Type": "Json",
                  "AssociationProperty": "List[Parameter]",
                  "AssociationPropertyMetadata": {
                    "Parameter": {
                      "Type": "String",
                      "Description": {
                        "en": "Characteristic anomaly."
                      },
                      "Default": null,
                      "Required": false
                    }
                  }
                }
              }
            }
          },
          "ManagedList": {
            "Type": "String",
            "Description": {
              "en": "List of names."
            },
            "Default": null,
            "Required": false
          },
          "Id": {
            "Type": "Number",
            "Description": {
              "en": "Rule id."
            },
            "Default": null,
            "Required": false
          }
        }
      }
    }
  },
  "Resources": {
    "ExtensionResource": {
      "Type": "ALIYUN::ESA::WafRule",
      "Properties": {
        "SiteVersion": {
          "Ref": "SiteVersion"
        },
        "RulesetId": {
          "Ref": "RulesetId"
        },
        "SiteId": {
          "Ref": "SiteId"
        },
        "Phase": {
          "Ref": "Phase"
        },
        "Shared": {
          "Ref": "Shared"
        },
        "Config": {
          "Ref": "Config"
        }
      }
    }
  },
  "Outputs": {
    "Phase": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Phase"
        ]
      },
      "Description": "The version of the website."
    },
    "RulesetId": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "RulesetId"
        ]
      },
      "Description": "The ID of the WAF ruleset, which can be obtained by calling the [ListWafRulesets](https://www.alibabacloud.com/help/en/doc-detail/2850233.html) operation."
    },
    "UpdateTime": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdateTime"
        ]
      },
      "Description": "The time when the rule was last modified."
    },
    "Config": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Config"
        ]
      },
      "Description": "The configuration of the rule."
    },
    "WafRuleId": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "WafRuleId"
        ]
      },
      "Description": "WafRule Id."
    }
  }
}