-
Notifications
You must be signed in to change notification settings - Fork 17
/
ACS-RDS-BulkyModifySecurityIpsByInstanceIPArray.yml
73 lines (73 loc) · 2.21 KB
/
ACS-RDS-BulkyModifySecurityIpsByInstanceIPArray.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
FormatVersion: OOS-2019-06-01
Description:
en: Del 0.0.0.0/0 from the ip white list array of rds instances
zh-cn: 从RDS实例IP白名单分组里删除0.0.0.0/0
name-en: ACS-RDS-BulkyModifySecurityIpsByInstanceIPArray
name-zh-cn: 从RDS实例IP白名单分组里删除0.0.0.0/0
categories:
- security
Parameters:
regionId:
Type: String
Label:
en: RegionId
zh-cn: 地域ID
AssociationProperty: RegionId
Default: '{{ ACS::RegionId }}'
instanceId:
Label:
en: InstanceId
zh-cn: RDS实例ID
AssociationProperty: ALIYUN::RDS::Instance::InstanceId
AssociationPropertyMetadata:
RegionId: regionId
Type: String
OOSAssumeRole:
Label:
en: OOSAssumeRole
zh-cn: OOS扮演的RAM角色
Type: String
Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
- Name: describeDBInstanceIPArray
Action: 'ACS::ExecuteAPI'
Description:
en: Query SecurityIPList of a rds instance
zh-cn: 查询一个RDS实例包含的SecurityIPList
Properties:
Service: RDS
API: DescribeDBInstanceIPArrayList
Parameters:
RegionId: '{{ regionId }}'
DBInstanceId: '{{ instanceId }}'
Outputs:
DBInstanceIPArray:
Type: List
ValueSelector: '.Items.DBInstanceIPArray[] | {"SecurityIPList": .SecurityIPList, "DBInstanceIPArrayName": .DBInstanceIPArrayName, "WhitelistNetworkType": .WhitelistNetworkType}'
- Name: modifySecurityByDBInstanceIPArray
Action: ACS::RDS::ModifySecurityIpsByInstanceIPArray
Description:
en: Query SecurityIPList of a rds instance
zh-cn: 查询一个RDS实例包含的SecurityIPList
Properties:
regionId: '{{ regionId }}'
instanceId: '{{ instanceId }}'
securityIps:
'Fn::Select':
- SecurityIPList
- '{{ ACS::TaskLoopItem }}'
instanceIPArrayName:
'Fn::Select':
- DBInstanceIPArrayName
- '{{ ACS::TaskLoopItem }}'
whitelistNetworkType:
'Fn::Select':
- WhitelistNetworkType
- '{{ ACS::TaskLoopItem }}'
Loop:
Items: '{{ describeDBInstanceIPArray.DBInstanceIPArray }}'
RateControl:
Mode: Concurrency
MaxErrors: 0
Concurrency: 1