acl.yml

ROSTemplateFormatVersion: '2015-09-01'
Description: SAG ACL/ACLRule/ACLAssociation resource example
Parameters:
  ACLName:
    Type: String
  Direction:
    Type: String
    Description: 'Regular direction.Value: in|out'
    AllowedValues:
    - in
    - out
  Policy:
    Type: String
    AllowedValues:
    - accept
    - drop
  DestCidr:
    Type: String
    Description: Destination address, CIDR format and IP address range in IPv4 format.
  DestPortRange:
    Type: String
    Description: Destination port range, 80/80.
  SourceCidr:
    Type: String
    Description: Source address, CIDR format and IP address range in IPv4 format.
  SourcePortRange:
    Type: String
    Description: Source port range, 80/80.
  RuleDescription:
    Type: String
    Default: null
    MinLength: 1
    MaxLength: 512
  Priority:
    Type: Number
    Description: 'Priority, ranging from 1 to 100.Default: 1'
    Default: 1
    MinValue: 1
    MaxValue: 100
  IpProtocol:
    Type: String
    Description: Protocol, not case sensitive.
    Default: tcp
  SmartAGId:
    Type: String
    Description: An intelligent gateway instance that needs to bind access control.
Resources:
  ACL:
    Type: ALIYUN::SAG::ACL
    Properties:
      Name:
        Ref: ACLName
  ACLRule:
    Type: ALIYUN::SAG::ACLRule
    Properties:
      Policy:
        Ref: Policy
      Description:
        Ref: RuleDescription
      DestCidr:
        Ref: DestCidr
      SourcePortRange:
        Ref: SourcePortRange
      SourceCidr:
        Ref: SourceCidr
      Priority:
        Ref: Priority
      AclId:
        Fn::GetAtt:
        - ACL
        - AclId
      IpProtocol:
        Ref: IpProtocol
      DestPortRange:
        Ref: DestPortRange
      Direction:
        Ref: Direction
    DependsOn: ACL
  ACLAssociation:
    Type: ALIYUN::SAG::ACLAssociation
    Properties:
      SmartAGId:
        Ref: SmartAGId
      AclId:
        Ref: ACL
    DependsOn: ACLRule
Outputs:
  AclId:
    Description: Access control set ID.
    Value:
      Fn::GetAtt:
      - ACL
      - AclId
  AcrId:
    Description: Access control rule ID.
    Value:
      Fn::GetAtt:
      - ACLRule
      - AcrId