instance-endpoint-acl-policy.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建CR实例端点访问控制策略，配置指定模块的白名单，允许特定IP范围访问。
  en: Create a CR instance endpoint access control policy to configure the whitelist
    for specified modules, allowing access from specific IP ranges.
Parameters:
  Comment:
    Type: String
    Description: The description of the entry.
    Default: Test white list
  ModuleName:
    Type: String
    Description: The name of the module in the instance for which a whitelist is configured.
    Default: Registry
    AllowedValues:
    - Registry
    - Chart
  InstanceId:
    Type: String
    Description: The ID of the instance. <a href="https://api.aliyun.com/#/?product=cr&version=2018-12-01&api=ListInstance&tab=DEMO&lang=JAVA">Inquire
      Instance</a>
  EndpointType:
    Type: String
    Description: The type of the endpoint.
    Default: internet
  Entry:
    Type: String
    Description: The IP address range that is allowed to access the instance.
    Default: 192.168.1.1/32
Resources:
  InstanceEndpointAclPolicy:
    Type: ALIYUN::CR::InstanceEndpointAclPolicy
    Properties:
      InstanceId:
        Ref: InstanceId
      Comment:
        Ref: Comment
      ModuleName:
        Ref: ModuleName
      RegionId:
        Ref: ALIYUN::Region
      EndpointType:
        Ref: EndpointType
      Entry:
        Ref: Entry
Outputs:
  InstanceId:
    Description: The ID of the instance.
    Value:
      Fn::GetAtt:
      - InstanceEndpointAclPolicy
      - InstanceId
  Entry:
    Description: The IP address range that is allowed to access the instance.
    Value:
      Fn::GetAtt:
      - InstanceEndpointAclPolicy
      - Entry