Python ec2.SecurityGroup方法代码示例

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def update_sg_with_cidr(
        self,
        security_group,
        cidr_ip,
        ports,
        ip_protocol='tcp'
    ):
        """
        Helper method for adding rules to an sg from an sg
        @param security_group [SecurityGroup] security group to update
        @param cidr_ip [string] cidr ip
        @param ports [Dict] dictionary of from:to port objects
        @param ip_protocol [string] name of the IP protocol to set this rule
        for
        """
        security_group_rules = security_group.SecurityGroupIngress
        for from_port, to_port in ports.items():
            security_group_rules.append(ec2.SecurityGroupRule(
                IpProtocol=ip_protocol,
                FromPort=to_port,
                ToPort=to_port,
                CidrIp=cidr_ip
            )) 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def update_sg_with_sg(
        self,
        security_group,
        source_security_group_id,
        ports,
        ip_protocol='tcp'
    ):
        """
        Helper method for adding rules to an sg from an sg
        @param security_group [SecurityGroup] security group to update
        @param source_security_group_id [string] Id of the security group to
        allow ingress from
        @param ports [Dict] dictionary of from:to port objects
        @param ip_protocol [string] name of the IP protocol to set this rule
        for
        """
        security_group_rules = security_group.SecurityGroupIngress
        for from_port, to_port in ports.items():
            security_group_rules.append(ec2.SecurityGroupRule(
                IpProtocol=ip_protocol,
                FromPort=to_port,
                ToPort=to_port,
                SourceSecurityGroupId=source_security_group_id
            )) 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def sceptre_handler(sceptre_user_data):
    return SecurityGroup(sceptre_user_data).template.to_json() 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def add_sg_with_sg(
        self,
        name,
        description,
        vpc_id,
        source_security_group_id,
        ports,
        ip_protocol='tcp'
    ):
        """
        Helper method creates ingress given a source cidr range and a set of
        ports
        @param name [string] Unique name for the security group
        @param description [string] Simple description of the security group
        @param vpc_id [string] id of the vpc this sg will target
        @param source_security_group_id [string] Id of the security group to
        allow ingress from
        @param ports [Dict] dictionary of from:to port objects
        @param ip_protocol [string] name of the IP protocol to set this rule
        for
        """
        security_group_rules = []
        for from_port, to_port in ports.items():
            security_group_rules.append(ec2.SecurityGroupRule(
                IpProtocol=ip_protocol,
                FromPort=to_port,
                ToPort=to_port,
                SourceSecurityGroupId=source_security_group_id
            ))

        return self.add_resource(
            ec2.SecurityGroup(
                name,
                GroupDescription=description,
                VpcId=Ref(vpc_id),
                SecurityGroupIngress=security_group_rules,
            )
        ) 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def add_sg_with_cidr(
        self,
        name,
        description,
        vpc_id,
        cidr,
        ports,
        ip_protocol='tcp'
    ):
        """
        Helper method creates ingress given a source cidr range and a set of
        ports
        @param name [string] Unique name for the security group
        @param description [string] Simple description of the security group
        @param vpc_id [string] id of the vpc this sg will target
        @param cidr [string] cidr ip range for ingress
        @param ports [Dict] dictionary of from:to port objects
        @param ip_protocol [string] name of the IP protocol to set this rule
        for
        """
        securityGroupRules = []
        for from_port, to_port in ports.items():
            securityGroupRules.append(ec2.SecurityGroupRule(
                IpProtocol=ip_protocol,
                FromPort=to_port,
                ToPort=to_port,
                CidrIp=cidr
            ))

        return self.add_resource(
            ec2.SecurityGroup(
                name,
                GroupDescription=description,
                VpcId=Ref(vpc_id),
                SecurityGroupIngress=securityGroupRules,
            )
        ) 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def add_simple_sg_with_sg(
        self,
        name,
        description,
        vpc_id,
        source_security_group_id,
        from_port,
        to_port=None,
        ip_protocol='tcp'
    ):
        """
        Helper method creates ingress given a source cidr range and a set of
        ports
        @param name [string] Unique name for the security group
        @param description [string] Simple description of the security group
        @param vpc_id [string] id of the vpc this sg will target
        @param source_security_group_id [string] Id of the security group to
        allow ingress from
        @param from_port [string] lower boundary of the port range to set for
        the secuirty group rules
        @param to_port [string] upper boundary of the port range to set for the
        security group rules
        @param ip_protocol [string] name of the IP protocol to set this rule
        for
        """

        return self.add_resource(
            ec2.SecurityGroup(
                name,
                GroupDescription=description,
                VpcId=Ref(vpc_id),
                SecurityGroupIngress=[
                    ec2.SecurityGroupRule(
                        IpProtocol=ip_protocol,
                        FromPort=from_port,
                        ToPort=to_port,
                        SourceSecurityGroupId=source_security_group_id
                    )
                ],
            )
        ) 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def add_rds_security_group(self, name, vpc_id):
        return self.add_resource(
            ec2.SecurityGroup(
                name + "RDSSecurityGroup",
                GroupDescription="Security group for RDS DB Instance.",
                VpcId=Ref(vpc_id)
            )
        ) 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def add_elasticache_sg(self, name, engine):
        return self.add_resource(
            elasticache.SecurityGroup(
                name + engine + 'ClusterSecurityGroup',
                Description='ElastiCache security group for ' + name + engine
            )
        ) 

# 需要导入模块: from troposphere import ec2 [as 别名]
# 或者: from troposphere.ec2 import SecurityGroup [as 别名]
def security_group(group_id, vpc_id, ingress_structs, description=""):
    return ec2.SecurityGroup(group_id, **{
        'GroupDescription': description or 'security group',
        'VpcId': vpc_id,
        'SecurityGroupIngress': map(complex_ingress, ingress_structs)
    })