-
Notifications
You must be signed in to change notification settings - Fork 17
/
ACS-Redis-BulkyDeleteSecurityIpByInstanceIPArray.yml
95 lines (95 loc) · 2.62 KB
/
ACS-Redis-BulkyDeleteSecurityIpByInstanceIPArray.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
FormatVersion: OOS-2019-06-01
Description:
en: Bulky del specified ip from the ip white list array of redis instances
zh-cn: 批量从Redis实例IP白名单分组里删除指定IP
name-en: ACS-Redis-BulkyDeleteSecurityIpByInstanceIPArray
name-zh-cn: 批量从Redis实例IP白名单分组里删除指定IP
categories:
- security
Parameters:
regionId:
Label:
en: RegionId
zh-cn: 地域ID
Type: String
AssociationProperty: RegionId
Default: '{{ ACS::RegionId }}'
instanceId:
Label:
en: The id of Redis instances
zh-cn: Redis实例ID
Type: String
securityIp:
Label:
en: The security ip to delete
zh-cn: 要删除的IP
Type: String
Default: 0.0.0.0/0
OOSAssumeRole:
Label:
en: OOSAssumeRole
zh-cn: OOS扮演的RAM角色
Type: String
Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
- Name: describeSecurityIps
Action: ACS::ExecuteAPI
Description:
en: Query SecurityIPList of a redis instance
zh-cn: 查询一个redis实例包含的SecurityIPList
Properties:
Service: R-KVSTORE
API: DescribeSecurityIps
Parameters:
RegionId: '{{ regionId }}'
InstanceId: '{{ instanceId }}'
Outputs:
SecurityIpGroupName:
Type: List
ValueSelector: '.SecurityIpGroups.SecurityIpGroup[] | {"SecurityIpList": .SecurityIpList, "SecurityIpGroupName": .SecurityIpGroupName}'
- Name: modifySecurityIps
Action: ACS::Redis::DeleteSecurityIpByInstanceIPArray
Description:
en: Query SecurityIPList of a redis instance
zh-cn: 查询一个redis实例包含的SecurityIPList
Properties:
regionId: '{{ regionId }}'
instanceId: '{{ instanceId }}'
securityIpList:
Fn::Select:
- SecurityIpList
- '{{ ACS::TaskLoopItem }}'
securityIpGroupName:
Fn::Select:
- SecurityIpGroupName
- '{{ ACS::TaskLoopItem }}'
securityIp: '{{ securityIp }}'
Loop:
Items: '{{ describeSecurityIps.SecurityIpGroupName }}'
RateControl:
Mode: Concurrency
MaxErrors: 0
Concurrency: 1
Metadata:
ALIYUN::OOS::Interface:
ParameterGroups:
- Parameters:
- securityIp
Label:
default:
zh-cn: 设置参数
en: Configure Parameters
- Parameters:
- regionId
- instanceId
Label:
default:
zh-cn: 选择实例
en: Select Instances
- Parameters:
- OOSAssumeRole
Label:
default:
zh-cn: 高级选项
en: Control Options