ALIYUN::SAS::Instance

Outputs:
  InstanceId:
    Description: Instance Id.
    Value:
      Fn::GetAtt:
        - Instance
        - InstanceId
ROSTemplateFormatVersion: '2015-09-01'
Parameters:
  QuotaForCloudHoneypot:
    Default: Null
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${CloudHoneypot}
            - true
    Required: false
    Type: Number
    Label:
      zh-cn: 云蜜罐授权数
      en: QuotaForCloudHoneypot
  PostPayInstanceModule:
    Default: Null
    AssociationPropertyMetadata:
      Parameters:
        ServerlessAssetProtection:
          Default: false
          Required: false
          Type: Boolean
          Description:
            en: Whether to enable the serverless asset protection module.
        CTDR:
          Default: false
          Required: false
          Type: Boolean
          Description:
            en: Whether to enable the cloud-native threat detection and response module.
        CloudSecurityPostureManagement:
          Default: false
          Required: false
          Type: Boolean
          Description:
            en: Whether to enable the cloud security posture management module.
        AgentlessDetection:
          Default: false
          Required: false
          Type: Boolean
          Description:
            en: Whether to enable the agentless detection module.
        HostAndContainerSecurity:
          Default: false
          Required: false
          Type: Boolean
          Description:
            en: Whether to enable the host and container security module.
        VulnerabilityFixing:
          Default: false
          Required: false
          Type: Boolean
          Description:
            en: Whether to enable the vulnerability fixing module.
    Required: false
    Type: Json
    Description:
      en: PayAsYouGo instance module configuration.
  ThreatAnalysisLogStorageCapacity:
    Default: Null
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${ThreatAnalysis}
            - true
    Required: false
    Type: Number
    Label:
      zh-cn: 威胁分析日志存储容量
      en: ThreatAnalysisLogStorageCapacity
  ConfigurationAssessment:
    Default: Null
    Required: false
    Type: Boolean
    Description:
      en: 'The configuration assessment feature detects configuration errors and security risks on cloud services from the following dimensions: identity and permission management, security risks in Alibaba Cloud services, and compliance risks.This ensures the security of the running environment of your cloud services.'
    Label:
      zh-cn: 是否配置评估
      en: ConfigurationAssessment
  QuotaForConfigurationAssessment:
    Default: Null
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${ConfigurationAssessment}
            - true
    Required: false
    Type: Number
    Label:
      zh-cn: 配置评估配额
      en: QuotaForConfigurationAssessment
  WebTamperProtection:
    Default: Null
    Required: false
    Type: Boolean
    Description:
      en: To ensure that the website information of important systems is not maliciously tampered with, there are bad content such as hanging horses, black chains, illegal implantation of terrorist threats, pornography, etc.
    Label:
      zh-cn: 是否开启网页防篡改
      en: WebTamperProtection
  LogAnalysis:
    Default: Null
    Required: false
    Type: Number
    Description:
      en: In response to the requirements of the network security law, which requires logs to be stored for at least 180 days, we recommend that you configure a 40GB log storage each server. Log analysis supports multi-dimensional security logs of cloud assets, out-of-the-box reports, and powerful SQL syntax analysis, so as to monitor business status, troubleshoot attacks, security operations such as traceability and positioning are easier.
    Label:
      zh-cn: 日志分析
      en: LogAnalysis
  ContainerImageScan:
    Default: Null
    Required: false
    Type: Number
    Description:
      en: Security Center provides the container image scan feature to protect containers. Security Center can detect CVEs, application vulnerabilities, viruses, and malicious samples and allows you to handle the detected risks. You can configure this parameter based on the number of images or digests. For example, if the number of images or digests that are updated in the previous day is 10, you can set this parameter to 300 for a monthly subscription or to 3650 for a yearly subscription. This is more cost-effective.
    Label:
      zh-cn: 器镜像安全扫描
      en: ContainerImageScan
  PeriodUnit:
    Description:
      en: |
        The unit of the subscription duration. Valid values:
        Month
        Year
    Default: Null
    Required: false
    Label:
      zh-cn: 订阅持续时间的单位
      en: PeriodUnit
    AssociationProperty: PayPeriodUnit
    AllowedValues:
      - Month
      - Year
    Type: String
  QuotaForWebTamperProofing:
    Default: Null
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${WebTamperProofing}
            - true
    Required: false
    Type: Number
    Label:
      zh-cn: 网页防篡改配额
      en: QuotaForWebTamperProofing
  AutoRenew:
    Default: false
    Required: false
    Type: Boolean
    Description:
      en: 'Whether to auto renew the prepay instance.Default: False'
    Label:
      zh-cn: 是否自动续订预付费实例
      en: AutoRenew
  ThreatAnalysis:
    Default: Null
    Required: false
    Type: Boolean
    Description:
      en: 'The threat analysis feature allows you to handle alerts that are generated for assets in the cloud within different accounts and assets of multiple cloud services in a centralized manner. The feature also allows you to handle risks with a few clicks. The feature provides automatic orchestration and response capabilities. '
    Label:
      zh-cn: 是否威胁分析
      en: ThreatAnalysis
  VulnerabilityFixing:
    Default: Null
    Required: false
    Type: Boolean
    Description:
      en: The vulnerability fixing feature allows you to fix system vulnerabilities with a few clicks. This improves O&M efficiency. You can separately purchase the vulnerability fixing feature. You are charged based on the number of times that you perform vulnerability fixing.
    Label:
      zh-cn: 是否漏洞修复
      en: VulnerabilityFixing
  VCore:
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Or:
            - Fn::Equals:
                - ${Edition}
                - Anti-virus
            - Fn::Equals:
                - ${Edition}
                - Ultimate
    Description:
      en: This parameter indicates the number of server vCPUs.
    Default: Null
    Required: false
    Label:
      zh-cn: 计算核数
      en: VCore
    Type: Number
  AutoPay:
    Default: true
    Required: false
    Type: Boolean
    Description:
      en: 'Whether to auto pay the bill.Default: True'
    Label:
      zh-cn: 是否自动付款
      en: AutoPay
  CloudHoneypot:
    Default: Null
    Required: false
    Type: Boolean
    Description:
      en: The cloud honeypot feature can capture attacks in a timely and efficient manner. You can use the feature to protect your core assets and detect attacks in attack and defense scenarios.
    Label:
      zh-cn: 是否开启云蜜罐
      en: CloudHoneypot
  QuotaForVulnerabilityFixing:
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${VulnerabilityFixing}
            - true
    Description:
      en: Specify the quota for vulnerability fixing based on the number of vulnerabilities that you want to fix each month. The quota is equal to the total number of vulnerabilities that you want to fix on all servers regardless of the vulnerability names. For example, if you use Security Center to fix the same vulnerability on 10 servers, the quota is deducted by 10.
    Default: Null
    Required: false
    Label:
      zh-cn: 漏洞修复配额
      en: QuotaForVulnerabilityFixing
    Type: Number
  AntiRansomwareManageService:
    Default: Null
    Required: false
    Type: Boolean
    Description:
      en: |-
        Provide you with security hosting services such as anti-ransomware configuration, monitoring, and anti-ransomware incident emergency response.
        Note: 
    Label:
      zh-cn: 是否提供安全托管服务
      en: AntiRansomwareManageService
  Period:
    Description:
      en: |-
        The subscription period of the firewallIf PeriodUnit is month, the valid range is 1, 3, 6
        If periodUnit is year, the valid range is 1, 2, 3
    Default: Null
    Required: false
    Label:
      zh-cn: 购买时长
      en: Period
    AssociationProperty: PayPeriod
    AllowedValues:
      - 1
      - 2
      - 3
      - 6
    Type: Number
  QuotaForMaliciousFileDetectionSDK:
    Default: Null
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${MaliciousFileDetectionSDK}
            - true
    Required: false
    Type: Number
    Label:
      zh-cn: 恶意文件检测SDK次数
      en: QuotaForMaliciousFileDetectionSDK
  Edition:
    Description:
      en: The version of Security center.
    Default: Null
    Required: false
    Label:
      zh-cn: 版本
      en: Edition
    AllowedValues:
      - Anti-virus
      - Advanced
      - Enterprise
      - Ultimate
      - Value-added Plan
    Type: String
  AntiRansomware:
    Default: Null
    Required: false
    Type: Number
    Description:
      en: Security Center provides a comprehensive anti-ransomware solution to protect your business. We recommend that you configure a data protection capacity of 50GB for each server.
    Label:
      zh-cn: 防勒索
      en: AntiRansomware
  MaliciousFileDetectionSDK:
    Default: Null
    Required: false
    Type: Boolean
    Description:
      en: 'The configuration assessment feature detects configuration errors and security risks on cloud services from the following dimensions: identity and permission management, security risks in Alibaba Cloud services, and compliance risks. This ensures the security of the running environment of your cloud services.'
    Label:
      zh-cn: 是否恶意文件检测SDK
      en: MaliciousFileDetectionSDK
  ProtectedServers:
    Default: Null
    Required: false
    Type: Number
    Description:
      en: Authorization is the same as the number of servers you have.
    Label:
      zh-cn: 保有服务器台数
      en: ProtectedServers
  QuotaForApplicationProtection:
    Default: Null
    Required: false
    Type: Number
    Description:
      en: The application protection feature can detect attacks on applications and provide self-protection during application runtime. The feature supports simple and convenient O&M and can effectively defend against zero-day and OWASP Top vulnerabilities. The feature is a value-added feature. You are charged based on the number of assets on which the RASP agent is installed. You must configure protection policies after you purchase the feature.
    Label:
      zh-cn: 应用防护授权数
      en: QuotaForApplicationProtection
  PayType:
    Required: true
    Type: String
    Description:
      en: |-
        The billing method of the firewall instance. Valid values:
        PayAsYouGo: pay-as-you-go
        Subscription: subscription
    AllowedValues:
      - PayAsYouGo
      - Subscription
Resources:
  Instance:
    Type: ALIYUN::SAS::Instance
    Properties:
      QuotaForCloudHoneypot:
        Ref: QuotaForCloudHoneypot
      PostPayInstanceModule:
        Ref: PostPayInstanceModule
      ThreatAnalysisLogStorageCapacity:
        Ref: ThreatAnalysisLogStorageCapacity
      ConfigurationAssessment:
        Ref: ConfigurationAssessment
      QuotaForConfigurationAssessment:
        Ref: QuotaForConfigurationAssessment
      WebTamperProtection:
        Ref: WebTamperProtection
      LogAnalysis:
        Ref: LogAnalysis
      ContainerImageScan:
        Ref: ContainerImageScan
      PeriodUnit:
        Ref: PeriodUnit
      QuotaForWebTamperProofing:
        Ref: QuotaForWebTamperProofing
      AutoRenew:
        Ref: AutoRenew
      ThreatAnalysis:
        Ref: ThreatAnalysis
      VulnerabilityFixing:
        Ref: VulnerabilityFixing
      VCore:
        Ref: VCore
      AutoPay:
        Ref: AutoPay
      CloudHoneypot:
        Ref: CloudHoneypot
      QuotaForVulnerabilityFixing:
        Ref: QuotaForVulnerabilityFixing
      AntiRansomwareManageService:
        Ref: AntiRansomwareManageService
      Period:
        Ref: Period
      QuotaForMaliciousFileDetectionSDK:
        Ref: QuotaForMaliciousFileDetectionSDK
      Edition:
        Ref: Edition
      AntiRansomware:
        Ref: AntiRansomware
      MaliciousFileDetectionSDK:
        Ref: MaliciousFileDetectionSDK
      ProtectedServers:
        Ref: ProtectedServers
      QuotaForApplicationProtection:
        Ref: QuotaForApplicationProtection
      PayType:
        Ref: PayType
Metadata:
  ALIYUN::ROS::Interface:
    ParameterGroups:
      - GroupType: Payment
        Parameters:
          - Items:
              - Period
              - PeriodUnit
            Label: 支付方式
        Label:
          default:
            zh-cn: 付费类型
            en: Payment
      - Parameters:
          - AutoRenew
          - AutoPay
        Label:
          default:
            zh-cn: 订单配置
            en: Order Configuration
      - Parameters:
          - Edition
          - ProtectedServers
          - VCore
        Label:
          default:
            zh-cn: 版本配置
            en: Version Configuration
      - Parameters:
          - AntiRansomware
        Label:
          default:
            zh-cn: 反勒索配置
            en: AntiRansomware Configuration
      - Parameters:
          - LogAnalysis
        Label:
          default:
            zh-cn: 日志分析配置
            en: Log Configuration
      - Parameters:
          - AntiRansomware
        Label:
          default:
            zh-cn: 反勒索配置
            en: AntiRansomware Configuration
      - Parameters:
          - QuotaForApplicationProtection
        Label:
          default:
            zh-cn: 应用防护配置
            en: Application Protection Configuration
      - Parameters:
          - ThreatAnalysis
          - ThreatAnalysisLogStorageCapacity
        Label:
          default:
            zh-cn: 威胁分析配置
            en: ThreatAnalysis Configuration
      - Parameters:
          - MaliciousFileDetectionSDK
          - QuotaForMaliciousFileDetectionSDK
        Label:
          default:
            zh-cn: 恶意文件检测配置
            en: Malicious File Detection Configuration
      - Parameters:
          - ConfigurationAssessment
          - QuotaForConfigurationAssessment
        Label:
          default:
            zh-cn: 配置评估
            en: Configuration Assessment Configuration
      - Parameters:
          - WebTamperProtection
          - QuotaForWebTamperProofing
        Label:
          default:
            zh-cn: 网页防篡改配置
            en: WebTamper Protection Configuration
      - Parameters:
          - VulnerabilityFixing
          - QuotaForVulnerabilityFixing
        Label:
          default:
            zh-cn: 漏洞修复配置
            en: Vulnerability Fixing Configuration
      - Parameters:
          - CloudHoneypot
          - QuotaForCloudHoneypot
        Label:
          default:
            zh-cn: 云蜜罐配置
            en: Cloud Honeypot Configuration
      - Parameters:
          - ContainerImageScan
        Label:
          default:
            zh-cn: 容器镜像安全扫描
            en: Container Image Scan Configuration

{
  "Outputs": {
    "InstanceId": {
      "Description": "Instance Id.",
      "Value": {
        "Fn::GetAtt": [
          "Instance",
          "InstanceId"
        ]
      }
    }
  },
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
    "QuotaForCloudHoneypot": {
      "Default": null,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${CloudHoneypot}",
              true
            ]
          }
        }
      },
      "Required": false,
      "Type": "Number",
      "Label": {
        "zh-cn": "云蜜罐授权数",
        "en": "QuotaForCloudHoneypot"
      }
    },
    "PostPayInstanceModule": {
      "Default": null,
      "AssociationPropertyMetadata": {
        "Parameters": {
          "ServerlessAssetProtection": {
            "Default": false,
            "Required": false,
            "Type": "Boolean",
            "Description": {
              "en": "Whether to enable the serverless asset protection module."
            }
          },
          "CTDR": {
            "Default": false,
            "Required": false,
            "Type": "Boolean",
            "Description": {
              "en": "Whether to enable the cloud-native threat detection and response module."
            }
          },
          "CloudSecurityPostureManagement": {
            "Default": false,
            "Required": false,
            "Type": "Boolean",
            "Description": {
              "en": "Whether to enable the cloud security posture management module."
            }
          },
          "AgentlessDetection": {
            "Default": false,
            "Required": false,
            "Type": "Boolean",
            "Description": {
              "en": "Whether to enable the agentless detection module."
            }
          },
          "HostAndContainerSecurity": {
            "Default": false,
            "Required": false,
            "Type": "Boolean",
            "Description": {
              "en": "Whether to enable the host and container security module."
            }
          },
          "VulnerabilityFixing": {
            "Default": false,
            "Required": false,
            "Type": "Boolean",
            "Description": {
              "en": "Whether to enable the vulnerability fixing module."
            }
          }
        }
      },
      "Required": false,
      "Type": "Json",
      "Description": {
        "en": "PayAsYouGo instance module configuration."
      }
    },
    "ThreatAnalysisLogStorageCapacity": {
      "Default": null,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${ThreatAnalysis}",
              true
            ]
          }
        }
      },
      "Required": false,
      "Type": "Number",
      "Label": {
        "zh-cn": "威胁分析日志存储容量",
        "en": "ThreatAnalysisLogStorageCapacity"
      }
    },
    "ConfigurationAssessment": {
      "Default": null,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "The configuration assessment feature detects configuration errors and security risks on cloud services from the following dimensions: identity and permission management, security risks in Alibaba Cloud services, and compliance risks.This ensures the security of the running environment of your cloud services."
      },
      "Label": {
        "zh-cn": "是否配置评估",
        "en": "ConfigurationAssessment"
      }
    },
    "QuotaForConfigurationAssessment": {
      "Default": null,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${ConfigurationAssessment}",
              true
            ]
          }
        }
      },
      "Required": false,
      "Type": "Number",
      "Label": {
        "zh-cn": "配置评估配额",
        "en": "QuotaForConfigurationAssessment"
      }
    },
    "WebTamperProtection": {
      "Default": null,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "To ensure that the website information of important systems is not maliciously tampered with, there are bad content such as hanging horses, black chains, illegal implantation of terrorist threats, pornography, etc."
      },
      "Label": {
        "zh-cn": "是否开启网页防篡改",
        "en": "WebTamperProtection"
      }
    },
    "LogAnalysis": {
      "Default": null,
      "Required": false,
      "Type": "Number",
      "Description": {
        "en": "In response to the requirements of the network security law, which requires logs to be stored for at least 180 days, we recommend that you configure a 40GB log storage each server. Log analysis supports multi-dimensional security logs of cloud assets, out-of-the-box reports, and powerful SQL syntax analysis, so as to monitor business status, troubleshoot attacks, security operations such as traceability and positioning are easier."
      },
      "Label": {
        "zh-cn": "日志分析",
        "en": "LogAnalysis"
      }
    },
    "ContainerImageScan": {
      "Default": null,
      "Required": false,
      "Type": "Number",
      "Description": {
        "en": "Security Center provides the container image scan feature to protect containers. Security Center can detect CVEs, application vulnerabilities, viruses, and malicious samples and allows you to handle the detected risks. You can configure this parameter based on the number of images or digests. For example, if the number of images or digests that are updated in the previous day is 10, you can set this parameter to 300 for a monthly subscription or to 3650 for a yearly subscription. This is more cost-effective."
      },
      "Label": {
        "zh-cn": "器镜像安全扫描",
        "en": "ContainerImageScan"
      }
    },
    "PeriodUnit": {
      "Description": {
        "en": "The unit of the subscription duration. Valid values:\nMonth\nYear\n"
      },
      "Default": null,
      "Required": false,
      "Label": {
        "zh-cn": "订阅持续时间的单位",
        "en": "PeriodUnit"
      },
      "AssociationProperty": "PayPeriodUnit",
      "AllowedValues": [
        "Month",
        "Year"
      ],
      "Type": "String"
    },
    "QuotaForWebTamperProofing": {
      "Default": null,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${WebTamperProofing}",
              true
            ]
          }
        }
      },
      "Required": false,
      "Type": "Number",
      "Label": {
        "zh-cn": "网页防篡改配额",
        "en": "QuotaForWebTamperProofing"
      }
    },
    "AutoRenew": {
      "Default": false,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "Whether to auto renew the prepay instance.Default: False"
      },
      "Label": {
        "zh-cn": "是否自动续订预付费实例",
        "en": "AutoRenew"
      }
    },
    "ThreatAnalysis": {
      "Default": null,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "The threat analysis feature allows you to handle alerts that are generated for assets in the cloud within different accounts and assets of multiple cloud services in a centralized manner. The feature also allows you to handle risks with a few clicks. The feature provides automatic orchestration and response capabilities. "
      },
      "Label": {
        "zh-cn": "是否威胁分析",
        "en": "ThreatAnalysis"
      }
    },
    "VulnerabilityFixing": {
      "Default": null,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "The vulnerability fixing feature allows you to fix system vulnerabilities with a few clicks. This improves O&M efficiency. You can separately purchase the vulnerability fixing feature. You are charged based on the number of times that you perform vulnerability fixing."
      },
      "Label": {
        "zh-cn": "是否漏洞修复",
        "en": "VulnerabilityFixing"
      }
    },
    "VCore": {
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Or": [
              {
                "Fn::Equals": [
                  "${Edition}",
                  "Anti-virus"
                ]
              },
              {
                "Fn::Equals": [
                  "${Edition}",
                  "Ultimate"
                ]
              }
            ]
          }
        }
      },
      "Description": {
        "en": "This parameter indicates the number of server vCPUs."
      },
      "Default": null,
      "Required": false,
      "Label": {
        "zh-cn": "计算核数",
        "en": "VCore"
      },
      "Type": "Number"
    },
    "AutoPay": {
      "Default": true,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "Whether to auto pay the bill.Default: True"
      },
      "Label": {
        "zh-cn": "是否自动付款",
        "en": "AutoPay"
      }
    },
    "CloudHoneypot": {
      "Default": null,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "The cloud honeypot feature can capture attacks in a timely and efficient manner. You can use the feature to protect your core assets and detect attacks in attack and defense scenarios."
      },
      "Label": {
        "zh-cn": "是否开启云蜜罐",
        "en": "CloudHoneypot"
      }
    },
    "QuotaForVulnerabilityFixing": {
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${VulnerabilityFixing}",
              true
            ]
          }
        }
      },
      "Description": {
        "en": "Specify the quota for vulnerability fixing based on the number of vulnerabilities that you want to fix each month. The quota is equal to the total number of vulnerabilities that you want to fix on all servers regardless of the vulnerability names. For example, if you use Security Center to fix the same vulnerability on 10 servers, the quota is deducted by 10."
      },
      "Default": null,
      "Required": false,
      "Label": {
        "zh-cn": "漏洞修复配额",
        "en": "QuotaForVulnerabilityFixing"
      },
      "Type": "Number"
    },
    "AntiRansomwareManageService": {
      "Default": null,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "Provide you with security hosting services such as anti-ransomware configuration, monitoring, and anti-ransomware incident emergency response.\nNote: "
      },
      "Label": {
        "zh-cn": "是否提供安全托管服务",
        "en": "AntiRansomwareManageService"
      }
    },
    "Period": {
      "Description": {
        "en": "The subscription period of the firewallIf PeriodUnit is month, the valid range is 1, 3, 6\nIf periodUnit is year, the valid range is 1, 2, 3"
      },
      "Default": null,
      "Required": false,
      "Label": {
        "zh-cn": "购买时长",
        "en": "Period"
      },
      "AssociationProperty": "PayPeriod",
      "AllowedValues": [
        1,
        2,
        3,
        6
      ],
      "Type": "Number"
    },
    "QuotaForMaliciousFileDetectionSDK": {
      "Default": null,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${MaliciousFileDetectionSDK}",
              true
            ]
          }
        }
      },
      "Required": false,
      "Type": "Number",
      "Label": {
        "zh-cn": "恶意文件检测SDK次数",
        "en": "QuotaForMaliciousFileDetectionSDK"
      }
    },
    "Edition": {
      "Description": {
        "en": "The version of Security center."
      },
      "Default": null,
      "Required": false,
      "Label": {
        "zh-cn": "版本",
        "en": "Edition"
      },
      "AllowedValues": [
        "Anti-virus",
        "Advanced",
        "Enterprise",
        "Ultimate",
        "Value-added Plan"
      ],
      "Type": "String"
    },
    "AntiRansomware": {
      "Default": null,
      "Required": false,
      "Type": "Number",
      "Description": {
        "en": "Security Center provides a comprehensive anti-ransomware solution to protect your business. We recommend that you configure a data protection capacity of 50GB for each server."
      },
      "Label": {
        "zh-cn": "防勒索",
        "en": "AntiRansomware"
      }
    },
    "MaliciousFileDetectionSDK": {
      "Default": null,
      "Required": false,
      "Type": "Boolean",
      "Description": {
        "en": "The configuration assessment feature detects configuration errors and security risks on cloud services from the following dimensions: identity and permission management, security risks in Alibaba Cloud services, and compliance risks. This ensures the security of the running environment of your cloud services."
      },
      "Label": {
        "zh-cn": "是否恶意文件检测SDK",
        "en": "MaliciousFileDetectionSDK"
      }
    },
    "ProtectedServers": {
      "Default": null,
      "Required": false,
      "Type": "Number",
      "Description": {
        "en": "Authorization is the same as the number of servers you have."
      },
      "Label": {
        "zh-cn": "保有服务器台数",
        "en": "ProtectedServers"
      }
    },
    "QuotaForApplicationProtection": {
      "Default": null,
      "Required": false,
      "Type": "Number",
      "Description": {
        "en": "The application protection feature can detect attacks on applications and provide self-protection during application runtime. The feature supports simple and convenient O&M and can effectively defend against zero-day and OWASP Top vulnerabilities. The feature is a value-added feature. You are charged based on the number of assets on which the RASP agent is installed. You must configure protection policies after you purchase the feature."
      },
      "Label": {
        "zh-cn": "应用防护授权数",
        "en": "QuotaForApplicationProtection"
      }
    },
    "PayType": {
      "Required": true,
      "Type": "String",
      "Description": {
        "en": "The billing method of the firewall instance. Valid values:\nPayAsYouGo: pay-as-you-go\nSubscription: subscription"
      },
      "AllowedValues": [
        "PayAsYouGo",
        "Subscription"
      ]
    }
  },
  "Resources": {
    "Instance": {
      "Type": "ALIYUN::SAS::Instance",
      "Properties": {
        "QuotaForCloudHoneypot": {
          "Ref": "QuotaForCloudHoneypot"
        },
        "PostPayInstanceModule": {
          "Ref": "PostPayInstanceModule"
        },
        "ThreatAnalysisLogStorageCapacity": {
          "Ref": "ThreatAnalysisLogStorageCapacity"
        },
        "ConfigurationAssessment": {
          "Ref": "ConfigurationAssessment"
        },
        "QuotaForConfigurationAssessment": {
          "Ref": "QuotaForConfigurationAssessment"
        },
        "WebTamperProtection": {
          "Ref": "WebTamperProtection"
        },
        "LogAnalysis": {
          "Ref": "LogAnalysis"
        },
        "ContainerImageScan": {
          "Ref": "ContainerImageScan"
        },
        "PeriodUnit": {
          "Ref": "PeriodUnit"
        },
        "QuotaForWebTamperProofing": {
          "Ref": "QuotaForWebTamperProofing"
        },
        "AutoRenew": {
          "Ref": "AutoRenew"
        },
        "ThreatAnalysis": {
          "Ref": "ThreatAnalysis"
        },
        "VulnerabilityFixing": {
          "Ref": "VulnerabilityFixing"
        },
        "VCore": {
          "Ref": "VCore"
        },
        "AutoPay": {
          "Ref": "AutoPay"
        },
        "CloudHoneypot": {
          "Ref": "CloudHoneypot"
        },
        "QuotaForVulnerabilityFixing": {
          "Ref": "QuotaForVulnerabilityFixing"
        },
        "AntiRansomwareManageService": {
          "Ref": "AntiRansomwareManageService"
        },
        "Period": {
          "Ref": "Period"
        },
        "QuotaForMaliciousFileDetectionSDK": {
          "Ref": "QuotaForMaliciousFileDetectionSDK"
        },
        "Edition": {
          "Ref": "Edition"
        },
        "AntiRansomware": {
          "Ref": "AntiRansomware"
        },
        "MaliciousFileDetectionSDK": {
          "Ref": "MaliciousFileDetectionSDK"
        },
        "ProtectedServers": {
          "Ref": "ProtectedServers"
        },
        "QuotaForApplicationProtection": {
          "Ref": "QuotaForApplicationProtection"
        },
        "PayType": {
          "Ref": "PayType"
        }
      }
    }
  },
  "Metadata": {
    "ALIYUN::ROS::Interface": {
      "ParameterGroups": [
        {
          "GroupType": "Payment",
          "Parameters": [
            {
              "Items": [
                "Period",
                "PeriodUnit"
              ],
              "Label": "支付方式"
            }
          ],
          "Label": {
            "default": {
              "zh-cn": "付费类型",
              "en": "Payment"
            }
          }
        },
        {
          "Parameters": [
            "AutoRenew",
            "AutoPay"
          ],
          "Label": {
            "default": {
              "zh-cn": "订单配置",
              "en": "Order Configuration"
            }
          }
        },
        {
          "Parameters": [
            "Edition",
            "ProtectedServers",
            "VCore"
          ],
          "Label": {
            "default": {
              "zh-cn": "版本配置",
              "en": "Version Configuration"
            }
          }
        },
        {
          "Parameters": [
            "AntiRansomware"
          ],
          "Label": {
            "default": {
              "zh-cn": "反勒索配置",
              "en": "AntiRansomware Configuration"
            }
          }
        },
        {
          "Parameters": [
            "LogAnalysis"
          ],
          "Label": {
            "default": {
              "zh-cn": "日志分析配置",
              "en": "Log Configuration"
            }
          }
        },
        {
          "Parameters": [
            "AntiRansomware"
          ],
          "Label": {
            "default": {
              "zh-cn": "反勒索配置",
              "en": "AntiRansomware Configuration"
            }
          }
        },
        {
          "Parameters": [
            "QuotaForApplicationProtection"
          ],
          "Label": {
            "default": {
              "zh-cn": "应用防护配置",
              "en": "Application Protection Configuration"
            }
          }
        },
        {
          "Parameters": [
            "ThreatAnalysis",
            "ThreatAnalysisLogStorageCapacity"
          ],
          "Label": {
            "default": {
              "zh-cn": "威胁分析配置",
              "en": "ThreatAnalysis Configuration"
            }
          }
        },
        {
          "Parameters": [
            "MaliciousFileDetectionSDK",
            "QuotaForMaliciousFileDetectionSDK"
          ],
          "Label": {
            "default": {
              "zh-cn": "恶意文件检测配置",
              "en": "Malicious File Detection Configuration"
            }
          }
        },
        {
          "Parameters": [
            "ConfigurationAssessment",
            "QuotaForConfigurationAssessment"
          ],
          "Label": {
            "default": {
              "zh-cn": "配置评估",
              "en": "Configuration Assessment Configuration"
            }
          }
        },
        {
          "Parameters": [
            "WebTamperProtection",
            "QuotaForWebTamperProofing"
          ],
          "Label": {
            "default": {
              "zh-cn": "网页防篡改配置",
              "en": "WebTamper Protection Configuration"
            }
          }
        },
        {
          "Parameters": [
            "VulnerabilityFixing",
            "QuotaForVulnerabilityFixing"
          ],
          "Label": {
            "default": {
              "zh-cn": "漏洞修复配置",
              "en": "Vulnerability Fixing Configuration"
            }
          }
        },
        {
          "Parameters": [
            "CloudHoneypot",
            "QuotaForCloudHoneypot"
          ],
          "Label": {
            "default": {
              "zh-cn": "云蜜罐配置",
              "en": "Cloud Honeypot Configuration"
            }
          }
        },
        {
          "Parameters": [
            "ContainerImageScan"
          ],
          "Label": {
            "default": {
              "zh-cn": "容器镜像安全扫描",
              "en": "Container Image Scan Configuration"
            }
          }
        }
      ]
    }
  }
}