-
Notifications
You must be signed in to change notification settings - Fork 35
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
e133fd9
commit ad1074b
Showing
6 changed files
with
229 additions
and
86 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
174 changes: 131 additions & 43 deletions
174
documents/solution/ops-on-cloud/global-view-and-search-of-cross-account-resources.yml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,55 +1,143 @@ | ||
| ROSTemplateFormatVersion: '2015-09-01' | ||
| Description: | ||
| en: Global view and search of cross-account resources. | ||
| zh-cn: 跨账号资源全局视图及搜索。 | ||
| Parameters: | ||
| CommonName: | ||
| Type: String | ||
| Default: for-search | ||
| ZoneId: | ||
| Type: String | ||
| AssociationProperty: ALIYUN::ECS::Instance::ZoneId | ||
| Label: | ||
| en: VSwitch Availability Zone | ||
| zh-cn: 交换机可用区 | ||
| en: VSwitch Available Zone | ||
| zh-cn: 可用区 | ||
| AssociationProperty: ALIYUN::VPC::Zone::ZoneId | ||
| AssociationPropertyMetadata: | ||
| AutoSelectFirst: true | ||
| FolderName: | ||
| Type: String | ||
| Label: | ||
| zh-cn: 资源目录名称 | ||
| en: Resource directory folder name | ||
| AssociationProperty: AutoCompleteInput | ||
| AssociationPropertyMetadata: | ||
| Length: 5 | ||
| Prefix: ros-folder- | ||
| CharacterClasses: | ||
| - Class: lowercase | ||
| AccountDisplayName: | ||
| Type: String | ||
| AssociationProperty: AutoCompleteInput | ||
| AssociationPropertyMetadata: | ||
| Length: 5 | ||
| Prefix: account-for-search- | ||
| CharacterClasses: | ||
| - Class: lowercase | ||
| Resources: | ||
| EcsVpc: | ||
| Type: 'ALIYUN::ECS::VPC' | ||
| RDFolder: | ||
| Type: ALIYUN::ResourceManager::Folder | ||
| Properties: | ||
| FolderName: | ||
| Ref: FolderName | ||
| RDAccount1: | ||
| Type: ALIYUN::ResourceManager::Account | ||
| Properties: | ||
| DeleteAccount: true | ||
| DisplayName: | ||
| 'Fn::Sub': '${AccountDisplayName}-1' | ||
| FolderId: | ||
| Fn::GetAtt: | ||
| - RDFolder | ||
| - FolderId | ||
| RDAccount2: | ||
| Type: ALIYUN::ResourceManager::Account | ||
| Properties: | ||
| DeleteAccount: true | ||
| DisplayName: | ||
| 'Fn::Sub': '${AccountDisplayName}-2' | ||
| FolderId: | ||
| Fn::GetAtt: | ||
| - RDFolder | ||
| - FolderId | ||
| AutoEnableTrustedRos: | ||
| Type: ALIYUN::ROS::AutoEnableService | ||
| Properties: | ||
| VpcName: | ||
| 'Fn::Sub': 'vpc-${CommonName}-${ALIYUN::TenantId}' | ||
| CidrBlock: 192.168.0.0/16 | ||
| EcsVSwitch: | ||
| Type: 'ALIYUN::ECS::VSwitch' | ||
| ServiceName: 'TrustedService/ROS' | ||
| StackGroup: | ||
| Type: ALIYUN::ROS::StackGroup | ||
| DependsOn: AutoEnableTrustedRos | ||
| Properties: | ||
| ZoneId: | ||
| Ref: ZoneId | ||
| VpcId: | ||
| Ref: EcsVpc | ||
| VSwitchName: | ||
| 'Fn::Sub': 'vsw-${CommonName}-${ALIYUN::TenantId}' | ||
| CidrBlock: 192.168.0.0/24 | ||
| EcsSecurityGroup: | ||
| Type: 'ALIYUN::ECS::SecurityGroup' | ||
| StackGroupName: ros-test-stack-group | ||
| PermissionModel: SERVICE_MANAGED | ||
| AutoDeployment: | ||
| Enabled: false | ||
| Parameters: | ||
| ZoneId: | ||
| Ref: ZoneId | ||
| TemplateBody: | ||
| ROSTemplateFormatVersion: '2015-09-01' | ||
| Parameters: | ||
| CommonName: | ||
| Type: String | ||
| Default: for-search | ||
| ZoneId: | ||
| Type: String | ||
| Resources: | ||
| EcsVpc: | ||
| Type: 'ALIYUN::ECS::VPC' | ||
| Properties: | ||
| VpcName: | ||
| 'Fn::Sub': 'vpc-${CommonName}-${ALIYUN::TenantId}' | ||
| CidrBlock: 192.168.0.0/16 | ||
| EcsVSwitch: | ||
| Type: 'ALIYUN::ECS::VSwitch' | ||
| Properties: | ||
| ZoneId: | ||
| Ref: ZoneId | ||
| VpcId: | ||
| Ref: EcsVpc | ||
| VSwitchName: | ||
| 'Fn::Sub': 'vsw-${CommonName}-${ALIYUN::TenantId}' | ||
| CidrBlock: 192.168.0.0/24 | ||
| EcsSecurityGroup: | ||
| Type: 'ALIYUN::ECS::SecurityGroup' | ||
| Properties: | ||
| VpcId: | ||
| Ref: EcsVpc | ||
| SecurityGroupName: | ||
| 'Fn::Sub': 'sg-${CommonName}-${ALIYUN::TenantId}' | ||
| SecurityGroupIngress: | ||
| - PortRange: 22/22 | ||
| Priority: 1 | ||
| SourceCidrIp: 0.0.0.0/0 | ||
| IpProtocol: tcp | ||
| NicType: internet | ||
| - PortRange: 80/80 | ||
| Priority: 1 | ||
| SourceCidrIp: 0.0.0.0/0 | ||
| IpProtocol: tcp | ||
| NicType: internet | ||
| StackGroupInstances: | ||
| Type: ALIYUN::ROS::StackInstances | ||
| DependsOn: | ||
| - RDAccount1 | ||
| - RDAccount2 | ||
| Properties: | ||
| VpcId: | ||
| Ref: EcsVpc | ||
| SecurityGroupName: | ||
| 'Fn::Sub': 'sg-${CommonName}-${ALIYUN::TenantId}' | ||
| SecurityGroupIngress: | ||
| - PortRange: 22/22 | ||
| Priority: 1 | ||
| SourceCidrIp: 0.0.0.0/0 | ||
| IpProtocol: tcp | ||
| NicType: internet | ||
| - PortRange: 80/80 | ||
| Priority: 1 | ||
| SourceCidrIp: 0.0.0.0/0 | ||
| IpProtocol: tcp | ||
| NicType: internet | ||
| StackGroupName: | ||
| Ref: StackGroup | ||
| RegionIds: | ||
| - Ref: ALIYUN::Region | ||
| DeploymentTargets: | ||
| RdFolderIds: | ||
| - Ref: RDFolder | ||
| ParameterOverrides: | ||
| ZoneId: | ||
| Ref: ZoneId | ||
| RetainStacks: false | ||
| OperationPreferences: | ||
| MaxConcurrentCount: 2 | ||
| Metadata: | ||
| ALIYUN::ROS::Interface: | ||
| 'ALIYUN::ROS::Interface': | ||
| ParameterGroups: | ||
| - Parameters: | ||
| - FolderName | ||
| - AccountDisplayName | ||
| - ZoneId | ||
| TemplateTags: | ||
| - acs:technical-solution:ops-on-cloud:跨账号资源全局视图及搜索-tech_solu_70 | ||
| - 'acs:technical-solution:ops-on-cloud:跨账号资源全局视图及搜索-tech_solu_70' | ||
| Hidden: | ||
| - CommonName | ||
| - CommonName |
68 changes: 68 additions & 0 deletions
68
documents/solution/security-and-compliance/enterprise-multi-account-identity-permissions.yml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,68 @@ | ||
| ROSTemplateFormatVersion: '2015-09-01' | ||
| Description: | ||
| en: Centralized management of enterprise multi-account identity permissions. | ||
| zh-cn: 企业多账号身份权限集中管理。 | ||
| Parameters: | ||
| FolderName1: | ||
| Type: String | ||
| Label: | ||
| zh-cn: Core 资源目录名称 | ||
| en: Resource directory folder name | ||
| AssociationProperty: AutoCompleteInput | ||
| AssociationPropertyMetadata: | ||
| Length: 5 | ||
| Prefix: core- | ||
| CharacterClasses: | ||
| - Class: lowercase | ||
| FolderName2: | ||
| Type: String | ||
| Label: | ||
| zh-cn: Application 资源目录名称 | ||
| en: Resource directory folder name | ||
| AssociationProperty: AutoCompleteInput | ||
| AssociationPropertyMetadata: | ||
| Length: 5 | ||
| Prefix: application- | ||
| CharacterClasses: | ||
| - Class: lowercase | ||
| AccountDisplayName: | ||
| Type: String | ||
| Label: | ||
| zh-cn: Core文件夹下的账号名称 | ||
| en: The account name under the Core folder | ||
| AssociationProperty: AutoCompleteInput | ||
| AssociationPropertyMetadata: | ||
| Length: 5 | ||
| Prefix: sandbox-account- | ||
| CharacterClasses: | ||
| - Class: lowercase | ||
| Resources: | ||
| RDFolder1: | ||
| Type: ALIYUN::ResourceManager::Folder | ||
| Properties: | ||
| FolderName: | ||
| Ref: FolderName1 | ||
| RDFolder2: | ||
| Type: ALIYUN::ResourceManager::Folder | ||
| Properties: | ||
| FolderName: | ||
| Ref: FolderName2 | ||
| RDAccount1: | ||
| Type: ALIYUN::ResourceManager::Account | ||
| Properties: | ||
| DeleteAccount: true | ||
| DisplayName: | ||
| Ref: AccountDisplayName | ||
| FolderId: | ||
| Fn::GetAtt: | ||
| - RDFolder1 | ||
| - FolderId | ||
| Metadata: | ||
| 'ALIYUN::ROS::Interface': | ||
| ParameterGroups: | ||
| - Parameters: | ||
| - FolderName1 | ||
| - FolderName2 | ||
| - AccountDisplayName | ||
| TemplateTags: | ||
| - 'acs:technical-solution:account:企业多账号身份权限集中管理-tech_solu_67' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters