Plugins

turbot/alicloud

GitHub
Overview
62Tables
Versions
GitHub
steampipe plugin install alicloudsteampipe plugin install alicloud
alicloud_accountalicloud_action_trailalicloud_cas_certificatealicloud_cms_monitor_hostalicloud_cs_kubernetes_clusteralicloud_cs_kubernetes_cluster_nodealicloud_ecs_auto_provisioning_groupalicloud_ecs_autoscaling_groupalicloud_ecs_diskalicloud_ecs_disk_metric_read_iopsalicloud_ecs_disk_metric_read_iops_dailyalicloud_ecs_disk_metric_read_iops_hourlyalicloud_ecs_disk_metric_write_iopsalicloud_ecs_disk_metric_write_iops_dailyalicloud_ecs_disk_metric_write_iops_hourlyalicloud_ecs_imagealicloud_ecs_instancealicloud_ecs_instance_metric_cpu_utilization_dailyalicloud_ecs_instance_metric_cpu_utilization_hourlyalicloud_ecs_key_pairalicloud_ecs_launch_templatealicloud_ecs_network_interfacealicloud_ecs_regionalicloud_ecs_security_groupalicloud_ecs_snapshotalicloud_ecs_zonealicloud_kms_keyalicloud_kms_secretalicloud_oss_bucketalicloud_ram_access_keyalicloud_ram_credential_reportalicloud_ram_groupalicloud_ram_password_policyalicloud_ram_policyalicloud_ram_rolealicloud_ram_security_preferencealicloud_ram_useralicloud_rds_backupalicloud_rds_databasealicloud_rds_instancealicloud_rds_instance_metric_connectionsalicloud_rds_instance_metric_connections_dailyalicloud_rds_instance_metric_cpu_utilizationalicloud_rds_instance_metric_cpu_utilization_dailyalicloud_rds_instance_metric_cpu_utilization_hourlyalicloud_security_center_field_statisticsalicloud_security_center_versionalicloud_slb_load_balanceralicloud_vpcalicloud_vpc_dhcp_options_setalicloud_vpc_eipalicloud_vpc_flow_logalicloud_vpc_nat_gatewayalicloud_vpc_network_aclalicloud_vpc_route_entryalicloud_vpc_route_tablealicloud_vpc_ssl_vpn_client_certalicloud_vpc_ssl_vpn_serveralicloud_vpc_vpn_connectionalicloud_vpc_vpn_customer_gatewayalicloud_vpc_vpn_gatewayalicloud_vpc_vswitch
On This Page
Examples
Query examples
.inspect
Get Involved
Discuss on Slack

Table: alicloud_ecs_security_group

A security group is a logically isolated, mutually accessible group of instances within the same region that all share the same security requirements.

Examples

List of security groups where all instances within the security group are isolated from each other

select
  name,
  security_group_id,
  type,
  inner_access_policy
from
  alicloud_ecs_security_group
where
  inner_access_policy = 'drop';

Get the security group rules of each security group

select
  name,
  security_group_id,
  p ->> 'IpProtocol' as ip_protocol_type,
  p ->> 'PortRange' as port_range,
  p ->> 'Direction' as direction,
  p ->> 'SourceCidrIp' as source_cidr_ip,
  p ->> 'SourcePortRange' as source_port_range
from
  alicloud_ecs_security_group,
  jsonb_array_elements(permissions) as p;

List of all enterprise security groups

select
  name,
  security_group_id,
  region_id,
  type
from
  alicloud_ecs_security_group
where
  type = 'enterprise';

Count of security groups by VPC ID

select
  vpc_id,
  count(*) as count
from
  alicloud_ecs_security_group
group by
  vpc_id;

Get the security group rules that allow inbound public access to all tcp or udp ports

select
  name,
  security_group_id,
  p ->> 'IpProtocol' as ip_protocol_type,
  p ->> 'PortRange' as port_range,
  p ->> 'Direction' as direction,
  p ->> 'SourceCidrIp' as source_cidr_ip,
  p ->> 'SourcePortRange' as source_port_range
from
  alicloud_ecs_security_group,
  jsonb_array_elements(permissions) as p
where
  p ->> 'IpProtocol' in ('TCP', 'UDP', 'ALL')
  and p ->> 'Direction' = 'ingress'
  and p ->> 'SourceCidrIp' = '0.0.0.0/0'
  and (
    p ->> 'PortRange' = '-1/-1'
    or p ->> 'PortRange' = '1/65535'
  );

Get the security group rules that allow inbound public access to all tcp or udp ports, along with instances attached to them

select
  i.name,
  i.instance_id,
  sg.name,
  sg.security_group_id,
  p ->> 'IpProtocol' as ip_protocol_type,
  p ->> 'PortRange' as port_range,
  p ->> 'Direction' as direction,
  p ->> 'SourceCidrIp' as source_cidr_ip,
  p ->> 'SourcePortRange' as source_port_range
from
  alicloud_ecs_security_group as sg,
  jsonb_array_elements(permissions) as p,
  alicloud_ecs_instance as i,
  jsonb_array_elements_text(i.security_group_ids) as instance_sg
where
  p ->> 'IpProtocol' in ('TCP', 'UDP', 'ALL')
  and p ->> 'Direction' = 'ingress'
  and p ->> 'SourceCidrIp' = '0.0.0.0/0'
  and (
    p ->> 'PortRange' = '-1/-1'
    or p ->> 'PortRange' = '1/65535'
  )
  and instance_sg = sg.security_group_id;

Query examples

.inspect alicloud_ecs_security_group

ECS Security Group

NameTypeDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
account_idtextThe alicloud Account ID in which the resource is located.
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
arntextThe Alibaba Cloud Resource Name (ARN) of the ECS security group.
creation_timetimestamp with time zoneThe time when the security group was created.
descriptiontextThe description of the security group.
inner_access_policytextThe description of the security group.
nametextThe name of the security group.
permissionsjsonbDetails about the security group rules.
regiontextThe name of the region where the resource belongs.
resource_group_idtextThe ID of the resource group to which the security group belongs.
security_group_idtextThe ID of the security group.
service_idbigintThe ID of the distributor to which the security group belongs.
service_managedbooleanIndicates whether the user is an Alibaba Cloud service or a distributor.
tagsjsonbA map of tags for the resource.
tags_srcjsonbA list of tags attached with the security group.
titletextTitle of the resource.
typetextThe type of the security group. Possible values are: normal, and enterprise.
vpc_idtexthe ID of the VPC to which the security group belongs.