ALIYUN::SAS::Instance

ROSTemplateFormatVersion: '2015-09-01'
Parameters:
  AntiRansomware:
    Description:
      en: Security Center provides a comprehensive anti-ransomware solution to protect
        your business. We recommend that you configure a data protection capacity
        of 50GB for each server.
    Required: false
    Type: Number
  AutoPay:
    Default: true
    Description:
      en: 'Whether to auto pay the bill.Default: True'
    Required: false
    Type: Boolean
  AutoRenew:
    Default: false
    Description:
      en: 'Whether to auto renew the prepay instance.Default: False'
    Required: false
    Type: Boolean
  CloudHoneypot:
    Description:
      en: The cloud honeypot feature can capture attacks in a timely and efficient
        manner. You can use the feature to protect your core assets and detect attacks
        in attack and defense scenarios.
    Required: false
    Type: Boolean
  ConfigurationAssessment:
    Description:
      en: 'The configuration assessment feature detects configuration errors and security
        risks on cloud services from the following dimensions: identity and permission
        management, security risks in Alibaba Cloud services, and compliance risks.This
        ensures the security of the running environment of your cloud services.'
    Required: false
    Type: Boolean
  ContainerImageScan:
    Description:
      en: Security Center provides the container image scan feature to protect containers.
        Security Center can detect CVEs, application vulnerabilities, viruses, and
        malicious samples and allows you to handle the detected risks. You can configure
        this parameter based on the number of images or digests. For example, if the
        number of images or digests that are updated in the previous day is 10, you
        can set this parameter to 300 for a monthly subscription or to 3650 for a
        yearly subscription. This is more cost-effective.
    Required: false
    Type: Number
  Edition:
    AllowedValues:
    - Anti-virus
    - Advanced
    - Enterprise
    - Ultimate
    Description:
      en: The version of Security center.
    Required: false
    Type: String
  LogAnalysis:
    Description:
      en: In response to the requirements of the network security law, which requires
        logs to be stored for at least 180 days, we recommend that you configure a
        40GB log storage each server. Log analysis supports multi-dimensional security
        logs of cloud assets, out-of-the-box reports, and powerful SQL syntax analysis,
        so as to monitor business status, troubleshoot attacks, security operations
        such as traceability and positioning are easier.
    Required: false
    Type: Number
  MaliciousFileDetectionSDK:
    Description:
      en: 'The configuration assessment feature detects configuration errors and security
        risks on cloud services from the following dimensions: identity and permission
        management, security risks in Alibaba Cloud services, and compliance risks.
        This ensures the security of the running environment of your cloud services.'
    Required: false
    Type: Boolean
  Period:
    AllowedValues:
    - 1
    - 2
    - 3
    - 6
    AssociationProperty: PayPeriod
    Description:
      en: 'The subscription period of the firewallIf PeriodUnit is month, the valid
        range is 1, 3, 6

        If periodUnit is year, the valid range is 1, 2, 3'
    Required: true
    Type: Number
  PeriodUnit:
    AllowedValues:
    - Month
    - Year
    AssociationProperty: PayPeriodUnit
    Description:
      en: 'The unit of the subscription duration. Valid values:

        Month

        Year

        '
    Required: true
    Type: String
  ProtectedServers:
    Description:
      en: Authorization is the same as the number of servers you have.
    Required: false
    Type: Number
  QuotaForApplicationProtection:
    Description:
      en: The application protection feature can detect attacks on applications and
        provide self-protection during application runtime. The feature supports simple
        and convenient O&M and can effectively defend against zero-day and OWASP Top
        vulnerabilities. The feature is a value-added feature. You are charged based
        on the number of assets on which the RASP agent is installed. You must configure
        protection policies after you purchase the feature.
    Required: false
    Type: Number
  QuotaForCloudHoneypot:
    Required: false
    Type: Number
  QuotaForConfigurationAssessment:
    Required: false
    Type: Number
  QuotaForMaliciousFileDetectionSDK:
    Required: false
    Type: Number
  QuotaForVulnerabilityFixing:
    Description:
      en: Specify the quota for vulnerability fixing based on the number of vulnerabilities
        that you want to fix each month. The quota is equal to the total number of
        vulnerabilities that you want to fix on all servers regardless of the vulnerability
        names. For example, if you use Security Center to fix the same vulnerability
        on 10 servers, the quota is deducted by 10.
    Required: false
    Type: Number
  QuotaForWebTamperProofing:
    Required: false
    Type: Number
  ThreatAnalysis:
    Description:
      en: 'The threat analysis feature allows you to handle alerts that are generated
        for assets in the cloud within different accounts and assets of multiple cloud
        services in a centralized manner. The feature also allows you to handle risks
        with a few clicks. The feature provides automatic orchestration and response
        capabilities. '
    Required: false
    Type: Boolean
  ThreatAnalysisLogStorageCapacity:
    Required: false
    Type: Number
  VCore:
    Description:
      en: This parameter indicates the number of server vCPUs.
    Required: false
    Type: Number
  VulnerabilityFixing:
    Description:
      en: The vulnerability fixing feature allows you to fix system vulnerabilities
        with a few clicks. This improves O&M efficiency. You can separately purchase
        the vulnerability fixing feature. You are charged based on the number of times
        that you perform vulnerability fixing.
    Required: false
    Type: Boolean
  WebTamperProtection:
    Description:
      en: To ensure that the website information of important systems is not maliciously
        tampered with, there are bad content such as hanging horses, black chains,
        illegal implantation of terrorist threats, pornography, etc.
    Required: false
    Type: Boolean
Resources:
  Instance:
    Properties:
      AntiRansomware:
        Ref: AntiRansomware
      AutoPay:
        Ref: AutoPay
      AutoRenew:
        Ref: AutoRenew
      CloudHoneypot:
        Ref: CloudHoneypot
      ConfigurationAssessment:
        Ref: ConfigurationAssessment
      ContainerImageScan:
        Ref: ContainerImageScan
      Edition:
        Ref: Edition
      LogAnalysis:
        Ref: LogAnalysis
      MaliciousFileDetectionSDK:
        Ref: MaliciousFileDetectionSDK
      Period:
        Ref: Period
      PeriodUnit:
        Ref: PeriodUnit
      ProtectedServers:
        Ref: ProtectedServers
      QuotaForApplicationProtection:
        Ref: QuotaForApplicationProtection
      QuotaForCloudHoneypot:
        Ref: QuotaForCloudHoneypot
      QuotaForConfigurationAssessment:
        Ref: QuotaForConfigurationAssessment
      QuotaForMaliciousFileDetectionSDK:
        Ref: QuotaForMaliciousFileDetectionSDK
      QuotaForVulnerabilityFixing:
        Ref: QuotaForVulnerabilityFixing
      QuotaForWebTamperProofing:
        Ref: QuotaForWebTamperProofing
      ThreatAnalysis:
        Ref: ThreatAnalysis
      ThreatAnalysisLogStorageCapacity:
        Ref: ThreatAnalysisLogStorageCapacity
      VCore:
        Ref: VCore
      VulnerabilityFixing:
        Ref: VulnerabilityFixing
      WebTamperProtection:
        Ref: WebTamperProtection
    Type: ALIYUN::SAS::Instance
Outputs:
  InstanceId:
    Description: Instance Id.
    Value:
      Fn::GetAtt:
      - Instance
      - InstanceId
                        

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
    "QuotaForApplicationProtection": {
      "Type": "Number",
      "Description": {
        "en": "The application protection feature can detect attacks on applications and provide self-protection during application runtime. The feature supports simple and convenient O&M and can effectively defend against zero-day and OWASP Top vulnerabilities. The feature is a value-added feature. You are charged based on the number of assets on which the RASP agent is installed. You must configure protection policies after you purchase the feature."
      },
      "Required": false
    },
    "ThreatAnalysis": {
      "Type": "Boolean",
      "Description": {
        "en": "The threat analysis feature allows you to handle alerts that are generated for assets in the cloud within different accounts and assets of multiple cloud services in a centralized manner. The feature also allows you to handle risks with a few clicks. The feature provides automatic orchestration and response capabilities. "
      },
      "Required": false
    },
    "QuotaForMaliciousFileDetectionSDK": {
      "Type": "Number",
      "Required": false
    },
    "ContainerImageScan": {
      "Type": "Number",
      "Description": {
        "en": "Security Center provides the container image scan feature to protect containers. Security Center can detect CVEs, application vulnerabilities, viruses, and malicious samples and allows you to handle the detected risks. You can configure this parameter based on the number of images or digests. For example, if the number of images or digests that are updated in the previous day is 10, you can set this parameter to 300 for a monthly subscription or to 3650 for a yearly subscription. This is more cost-effective."
      },
      "Required": false
    },
    "ThreatAnalysisLogStorageCapacity": {
      "Type": "Number",
      "Required": false
    },
    "AutoRenew": {
      "Type": "Boolean",
      "Description": {
        "en": "Whether to auto renew the prepay instance.Default: False"
      },
      "Required": false,
      "Default": false
    },
    "MaliciousFileDetectionSDK": {
      "Type": "Boolean",
      "Description": {
        "en": "The configuration assessment feature detects configuration errors and security risks on cloud services from the following dimensions: identity and permission management, security risks in Alibaba Cloud services, and compliance risks. This ensures the security of the running environment of your cloud services."
      },
      "Required": false
    },
    "VCore": {
      "Type": "Number",
      "Description": {
        "en": "This parameter indicates the number of server vCPUs."
      },
      "Required": false
    },
    "Period": {
      "AssociationProperty": "PayPeriod",
      "Type": "Number",
      "Description": {
        "en": "The subscription period of the firewallIf PeriodUnit is month, the valid range is 1, 3, 6\nIf periodUnit is year, the valid range is 1, 2, 3"
      },
      "AllowedValues": [
        1,
        2,
        3,
        6
      ],
      "Required": true
    },
    "VulnerabilityFixing": {
      "Type": "Boolean",
      "Description": {
        "en": "The vulnerability fixing feature allows you to fix system vulnerabilities with a few clicks. This improves O&M efficiency. You can separately purchase the vulnerability fixing feature. You are charged based on the number of times that you perform vulnerability fixing."
      },
      "Required": false
    },
    "QuotaForCloudHoneypot": {
      "Type": "Number",
      "Required": false
    },
    "QuotaForWebTamperProofing": {
      "Type": "Number",
      "Required": false
    },
    "AutoPay": {
      "Type": "Boolean",
      "Description": {
        "en": "Whether to auto pay the bill.Default: True"
      },
      "Required": false,
      "Default": true
    },
    "Edition": {
      "Type": "String",
      "Description": {
        "en": "The version of Security center."
      },
      "AllowedValues": [
        "Anti-virus",
        "Advanced",
        "Enterprise",
        "Ultimate"
      ],
      "Required": false
    },
    "ConfigurationAssessment": {
      "Type": "Boolean",
      "Description": {
        "en": "The configuration assessment feature detects configuration errors and security risks on cloud services from the following dimensions: identity and permission management, security risks in Alibaba Cloud services, and compliance risks.This ensures the security of the running environment of your cloud services."
      },
      "Required": false
    },
    "LogAnalysis": {
      "Type": "Number",
      "Description": {
        "en": "In response to the requirements of the network security law, which requires logs to be stored for at least 180 days, we recommend that you configure a 40GB log storage each server. Log analysis supports multi-dimensional security logs of cloud assets, out-of-the-box reports, and powerful SQL syntax analysis, so as to monitor business status, troubleshoot attacks, security operations such as traceability and positioning are easier."
      },
      "Required": false
    },
    "ProtectedServers": {
      "Type": "Number",
      "Description": {
        "en": "Authorization is the same as the number of servers you have."
      },
      "Required": false
    },
    "CloudHoneypot": {
      "Type": "Boolean",
      "Description": {
        "en": "The cloud honeypot feature can capture attacks in a timely and efficient manner. You can use the feature to protect your core assets and detect attacks in attack and defense scenarios."
      },
      "Required": false
    },
    "WebTamperProtection": {
      "Type": "Boolean",
      "Description": {
        "en": "To ensure that the website information of important systems is not maliciously tampered with, there are bad content such as hanging horses, black chains, illegal implantation of terrorist threats, pornography, etc."
      },
      "Required": false
    },
    "QuotaForConfigurationAssessment": {
      "Type": "Number",
      "Required": false
    },
    "QuotaForVulnerabilityFixing": {
      "Type": "Number",
      "Description": {
        "en": "Specify the quota for vulnerability fixing based on the number of vulnerabilities that you want to fix each month. The quota is equal to the total number of vulnerabilities that you want to fix on all servers regardless of the vulnerability names. For example, if you use Security Center to fix the same vulnerability on 10 servers, the quota is deducted by 10."
      },
      "Required": false
    },
    "AntiRansomware": {
      "Type": "Number",
      "Description": {
        "en": "Security Center provides a comprehensive anti-ransomware solution to protect your business. We recommend that you configure a data protection capacity of 50GB for each server."
      },
      "Required": false
    },
    "PeriodUnit": {
      "AssociationProperty": "PayPeriodUnit",
      "Type": "String",
      "Description": {
        "en": "The unit of the subscription duration. Valid values:\nMonth\nYear\n"
      },
      "AllowedValues": [
        "Month",
        "Year"
      ],
      "Required": true
    }
  },
  "Resources": {
    "Instance": {
      "Type": "ALIYUN::SAS::Instance",
      "Properties": {
        "QuotaForApplicationProtection": {
          "Ref": "QuotaForApplicationProtection"
        },
        "ThreatAnalysis": {
          "Ref": "ThreatAnalysis"
        },
        "QuotaForMaliciousFileDetectionSDK": {
          "Ref": "QuotaForMaliciousFileDetectionSDK"
        },
        "ContainerImageScan": {
          "Ref": "ContainerImageScan"
        },
        "ThreatAnalysisLogStorageCapacity": {
          "Ref": "ThreatAnalysisLogStorageCapacity"
        },
        "AutoRenew": {
          "Ref": "AutoRenew"
        },
        "MaliciousFileDetectionSDK": {
          "Ref": "MaliciousFileDetectionSDK"
        },
        "VCore": {
          "Ref": "VCore"
        },
        "Period": {
          "Ref": "Period"
        },
        "VulnerabilityFixing": {
          "Ref": "VulnerabilityFixing"
        },
        "QuotaForCloudHoneypot": {
          "Ref": "QuotaForCloudHoneypot"
        },
        "QuotaForWebTamperProofing": {
          "Ref": "QuotaForWebTamperProofing"
        },
        "AutoPay": {
          "Ref": "AutoPay"
        },
        "Edition": {
          "Ref": "Edition"
        },
        "ConfigurationAssessment": {
          "Ref": "ConfigurationAssessment"
        },
        "LogAnalysis": {
          "Ref": "LogAnalysis"
        },
        "ProtectedServers": {
          "Ref": "ProtectedServers"
        },
        "CloudHoneypot": {
          "Ref": "CloudHoneypot"
        },
        "WebTamperProtection": {
          "Ref": "WebTamperProtection"
        },
        "QuotaForConfigurationAssessment": {
          "Ref": "QuotaForConfigurationAssessment"
        },
        "QuotaForVulnerabilityFixing": {
          "Ref": "QuotaForVulnerabilityFixing"
        },
        "AntiRansomware": {
          "Ref": "AntiRansomware"
        },
        "PeriodUnit": {
          "Ref": "PeriodUnit"
        }
      }
    }
  },
  "Outputs": {
    "InstanceId": {
      "Description": "Instance Id.",
      "Value": {
        "Fn::GetAtt": [
          "Instance",
          "InstanceId"
        ]
      }
    }
  }
}