ALIYUN::ThreatDetection::HoneypotNode-资源编排(ROS)-阿里云帮助中心

语法

{
  "Type": "ALIYUN::ThreatDetection::HoneypotNode",
  "Properties": {
    "NodeName": String,
    "AvailableProbeNum": Integer,
    "AllowHoneypotAccessInternet": Boolean,
    "SecurityGroupProbeIpList": List
  }
}

属性

属性名称	类型	必须	允许更新	描述	约束
NodeName	String	是	是	管理节点名称。	无
AllowHoneypotAccessInternet	Boolean	否	否	是否允许蜜罐访问互联网。	取值： true：允许 false：禁止
AvailableProbeNum	Integer	否	是	可用探针数量。	无
SecurityGroupProbeIpList	List	否	是	允许访问管理节点的CIDR网段。	长度：最小0，最大100

返回值

Fn::GetAtt

NodeName：管理节点名称。
AvailableProbeNum：可用探针数量。
CreateTime：管理节点创建时间。
AllowHoneypotAccessInternet：是否允许蜜罐访问互联网。
NodeId：蜜罐管理节点ID。
SecurityGroupProbeIpList：允许访问管理节点的CIDR网段。

示例

YAML

ROSTemplateFormatVersion: '2015-09-01'
Parameters:
  AllowHoneypotAccessInternet:
    Type: Boolean
    Description:
      en: |-
        Specifies whether to allow honeypots to access the Internet. Valid values:
        *   **true**: allows honeypots to access the Internet.
        *   **false**: does not allow honeypots to access the Internet.
    Default: Null
    Required: false
  SecurityGroupProbeIpList:
    Description:
      en: The CIDR blocks that are allowed to access the management node.
    Required: false
    Default: Null
    Type: Json
    MinLength: 0
    MaxLength: 100
    AssociationProperty: List[Parameter]
    AssociationPropertyMetadata:
      Parameter:
        Type: String
        Description:
          en: The CIDR block that is allowed to access the management node.
        Default: Null
        Required: false
  NodeName:
    Type: String
    Description:
      en: The name of the management node.
    Required: true
  AvailableProbeNum:
    Type: Number
    Description:
      en: The number of available probes.
    Default: Null
    Required: false
Resources:
  ExtensionResource:
    Type: ALIYUN::ThreatDetection::HoneypotNode
    Properties:
      AllowHoneypotAccessInternet:
        Ref: AllowHoneypotAccessInternet
      SecurityGroupProbeIpList:
        Ref: SecurityGroupProbeIpList
      NodeName:
        Ref: NodeName
      AvailableProbeNum:
        Ref: AvailableProbeNum
Outputs:
  NodeName:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - NodeName
    Description: The name of the management node.
  AllowHoneypotAccessInternet:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - AllowHoneypotAccessInternet
    Description: Specifies whether to allow honeypots to access the Internet.
  NodeId:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - NodeId
    Description: Honeypot management node id.
  SecurityGroupProbeIpList:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - SecurityGroupProbeIpList
    Description: The CIDR blocks that are allowed to access the management node.
  CreateTime:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreateTime
    Description: The time when the management node was created.
  AvailableProbeNum:
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - AvailableProbeNum
    Description: The number of available probes.

JSON

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
    "AllowHoneypotAccessInternet": {
      "Type": "Boolean",
      "Description": {
        "en": "Specifies whether to allow honeypots to access the Internet. Valid values:\n*   **true**: allows honeypots to access the Internet.\n*   **false**: does not allow honeypots to access the Internet."
      },
      "Default": null,
      "Required": false
    },
    "SecurityGroupProbeIpList": {
      "Description": {
        "en": "The CIDR blocks that are allowed to access the management node."
      },
      "Required": false,
      "Default": null,
      "Type": "Json",
      "MinLength": 0,
      "MaxLength": 100,
      "AssociationProperty": "List[Parameter]",
      "AssociationPropertyMetadata": {
        "Parameter": {
          "Type": "String",
          "Description": {
            "en": "The CIDR block that is allowed to access the management node."
          },
          "Default": null,
          "Required": false
        }
      }
    },
    "NodeName": {
      "Type": "String",
      "Description": {
        "en": "The name of the management node."
      },
      "Required": true
    },
    "AvailableProbeNum": {
      "Type": "Number",
      "Description": {
        "en": "The number of available probes."
      },
      "Default": null,
      "Required": false
    }
  },
  "Resources": {
    "ExtensionResource": {
      "Type": "ALIYUN::ThreatDetection::HoneypotNode",
      "Properties": {
        "AllowHoneypotAccessInternet": {
          "Ref": "AllowHoneypotAccessInternet"
        },
        "SecurityGroupProbeIpList": {
          "Ref": "SecurityGroupProbeIpList"
        },
        "NodeName": {
          "Ref": "NodeName"
        },
        "AvailableProbeNum": {
          "Ref": "AvailableProbeNum"
        }
      }
    }
  },
  "Outputs": {
    "NodeName": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "NodeName"
        ]
      },
      "Description": "The name of the management node."
    },
    "AllowHoneypotAccessInternet": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "AllowHoneypotAccessInternet"
        ]
      },
      "Description": "Specifies whether to allow honeypots to access the Internet."
    },
    "NodeId": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "NodeId"
        ]
      },
      "Description": "Honeypot management node id."
    },
    "SecurityGroupProbeIpList": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "SecurityGroupProbeIpList"
        ]
      },
      "Description": "The CIDR blocks that are allowed to access the management node."
    },
    "CreateTime": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreateTime"
        ]
      },
      "Description": "The time when the management node was created."
    },
    "AvailableProbeNum": {
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "AvailableProbeNum"
        ]
      },
      "Description": "The number of available probes."
    }
  }
}