DATASOURCE::ThreatDetection::AntiBruteForceRule_资源编排(ROS)-阿里云帮助中心

DATASOURCE::ThreatDetection::AntiBruteForceRule类型用于查询已创建的防暴力破解规则详情。

语法

{
  "Type": "DATASOURCE::ThreatDetection::AntiBruteForceRule",
  "Properties": {
    "AntiBruteForceRuleId": Integer,
    "RefreshOptions": String
  }
}

属性

属性名称

类型

必须

允许更新

描述

约束

AntiBruteForceRuleId

Integer

是

防暴力破解规则 ID。

无

RefreshOptions

String

否

是

当资源栈更新时，数据源资源的刷新策略。

有效值：

Never（默认值）：更新堆栈时，从不刷新数据源资源。
Always：更新堆栈时，始终刷新数据源资源。

返回值

Fn::GetAtt

DefaultRule：当前规则是否为默认规则。
AntiBruteForceRuleName：暴力破解规则的名称。
ForbiddenTime：暴力破解防御规则生效后对攻击方 IP 禁用的时间。
AntiBruteForceRuleId：防暴力破解规则 ID。
UuidList：配置该暴力破解防御规则的服务器的 UUID 列表。
FailCount：暴力破解防御规则生效的用户登录的失败次数阈值。
Span：暴力破解防御规则生效的时间阈值。

示例

YAML

ROSTemplateFormatVersion: '2015-09-01'
Parameters:
  AntiBruteForceRuleId:
    Type: Number
    Description:
      en: The ID of the defense rule.
    Required: true
Resources:
  ExtensionDataSource:
    Type: DATASOURCE::ThreatDetection::AntiBruteForceRule
    Properties:
      AntiBruteForceRuleId:
        Ref: AntiBruteForceRuleId
Outputs:
  DefaultRule:
    Description: 'Indicates whether the defense rule is the default rule. '
    Value:
      Fn::GetAtt:
        - ExtensionDataSource
        - DefaultRule
  AntiBruteForceRuleName:
    Description: The name of the defense rule.
    Value:
      Fn::GetAtt:
        - ExtensionDataSource
        - AntiBruteForceRuleName
  ForbiddenTime:
    Description: 'The period of time during which logons from an account are not allowed. Unit: minutes.'
    Value:
      Fn::GetAtt:
        - ExtensionDataSource
        - ForbiddenTime
  AntiBruteForceRuleId:
    Description: The ID of the defense rule.
    Value:
      Fn::GetAtt:
        - ExtensionDataSource
        - AntiBruteForceRuleId
  UuidList:
    Description: An array consisting of the UUIDs of servers to which the defense rule is applied.
    Value:
      Fn::GetAtt:
        - ExtensionDataSource
        - UuidList
  FailCount:
    Description: The threshold of logon failures that is specified in the defense rule.
    Value:
      Fn::GetAtt:
        - ExtensionDataSource
        - FailCount
  Span:
    Description: 'The period of time during which logon failures from an account are measured. Unit: minutes. If Span is set to 10, the defense rule takes effect when the logon failures measured within 10 minutes reaches the specified threshold. The IP address of attackers cannot be used to log on to the server in the specified period of time.'
    Value:
      Fn::GetAtt:
        - ExtensionDataSource
        - Span

JSON

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
    "AntiBruteForceRuleId": {
      "Type": "Number",
      "Description": {
        "en": "The ID of the defense rule."
      },
      "Required": true
    }
  },
  "Resources": {
    "ExtensionDataSource": {
      "Type": "DATASOURCE::ThreatDetection::AntiBruteForceRule",
      "Properties": {
        "AntiBruteForceRuleId": {
          "Ref": "AntiBruteForceRuleId"
        }
      }
    }
  },
  "Outputs": {
    "DefaultRule": {
      "Description": "Indicates whether the defense rule is the default rule. ",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "DefaultRule"
        ]
      }
    },
    "AntiBruteForceRuleName": {
      "Description": "The name of the defense rule.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "AntiBruteForceRuleName"
        ]
      }
    },
    "ForbiddenTime": {
      "Description": "The period of time during which logons from an account are not allowed. Unit: minutes.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "ForbiddenTime"
        ]
      }
    },
    "AntiBruteForceRuleId": {
      "Description": "The ID of the defense rule.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "AntiBruteForceRuleId"
        ]
      }
    },
    "UuidList": {
      "Description": "An array consisting of the UUIDs of servers to which the defense rule is applied.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "UuidList"
        ]
      }
    },
    "FailCount": {
      "Description": "The threshold of logon failures that is specified in the defense rule.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "FailCount"
        ]
      }
    },
    "Span": {
      "Description": "The period of time during which logon failures from an account are measured. Unit: minutes. If Span is set to 10, the defense rule takes effect when the logon failures measured within 10 minutes reaches the specified threshold. The IP address of attackers cannot be used to log on to the server in the specified period of time.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "Span"
        ]
      }
    }
  }
}