turbot/alicloud

GitHub
steampipe plugin install alicloudsteampipe plugin install alicloud
alicloud_accountalicloud_action_trailalicloud_cas_certificatealicloud_cms_monitor_hostalicloud_cs_kubernetes_clusteralicloud_cs_kubernetes_cluster_nodealicloud_ecs_auto_provisioning_groupalicloud_ecs_autoscaling_groupalicloud_ecs_diskalicloud_ecs_disk_metric_read_iopsalicloud_ecs_disk_metric_read_iops_dailyalicloud_ecs_disk_metric_read_iops_hourlyalicloud_ecs_disk_metric_write_iopsalicloud_ecs_disk_metric_write_iops_dailyalicloud_ecs_disk_metric_write_iops_hourlyalicloud_ecs_imagealicloud_ecs_instancealicloud_ecs_instance_metric_cpu_utilization_dailyalicloud_ecs_instance_metric_cpu_utilization_hourlyalicloud_ecs_key_pairalicloud_ecs_launch_templatealicloud_ecs_network_interfacealicloud_ecs_regionalicloud_ecs_security_groupalicloud_ecs_snapshotalicloud_ecs_zonealicloud_kms_keyalicloud_kms_secretalicloud_oss_bucketalicloud_ram_access_keyalicloud_ram_credential_reportalicloud_ram_groupalicloud_ram_password_policyalicloud_ram_policyalicloud_ram_rolealicloud_ram_security_preferencealicloud_ram_useralicloud_rds_backupalicloud_rds_databasealicloud_rds_instancealicloud_rds_instance_metric_connectionsalicloud_rds_instance_metric_connections_dailyalicloud_rds_instance_metric_cpu_utilizationalicloud_rds_instance_metric_cpu_utilization_dailyalicloud_rds_instance_metric_cpu_utilization_hourlyalicloud_security_center_field_statisticsalicloud_security_center_versionalicloud_slb_load_balanceralicloud_vpcalicloud_vpc_dhcp_options_setalicloud_vpc_eipalicloud_vpc_flow_logalicloud_vpc_nat_gatewayalicloud_vpc_network_aclalicloud_vpc_route_entryalicloud_vpc_route_tablealicloud_vpc_ssl_vpn_client_certalicloud_vpc_ssl_vpn_serveralicloud_vpc_vpn_connectionalicloud_vpc_vpn_customer_gatewayalicloud_vpc_vpn_gatewayalicloud_vpc_vswitch

Table: alicloud_vpc_ssl_vpn_server

A Secure Socket Layer Virtual Private Network (SSL VPN) lets remote users access Web applications, client-server apps, and internal network utilities and directories without the need for specialized client software. SSL VPN provide safe communication for all types of device traffic across public networks and private networks.

Examples

Basic info

select
name,
ssl_vpn_server_id,
cipher,
max_connections,
port,
proto
from
alicloud_vpc_ssl_vpn_server;

Get the SSL VPN servers that do not compress the transmitted data

select
name,
ssl_vpn_server_id,
is_compressed
from
alicloud_vpc_ssl_vpn_server
where
not is_compressed;

List of all SSL VPN servers that do not use AES-256-CBC encryption

select
name,
ssl_vpn_server_id,
cipher
from
alicloud_vpc_ssl_vpn_server
where
cipher <> 'AES-256-CBC';

List of all SSL VPN servers for which Two-factor Authentication is not enabled

select
name,
ssl_vpn_server_id,
enable_multi_factor_auth
from
alicloud_vpc_ssl_vpn_server
where
not enable_multi_factor_auth;

View SSL VPN server IP information

select
name,
ssl_vpn_server_id,
internet_ip,
client_ip_pool,
local_subnet
from
alicloud_vpc_ssl_vpn_server;

List of Client Certs for each SSL VPN server

select
s.name,
s.ssl_vpn_server_id,
c.name,
c.ssl_vpn_client_cert_id
from
alicloud_vpc_ssl_vpn_server as s
left join alicloud_vpc_ssl_vpn_client_cert as c on s.ssl_vpn_server_id = c.ssl_vpn_server_id

Count of Client Certs for each SSL VPN server

select
s.name,
count(c.ssl_vpn_client_cert_id)
from
alicloud_vpc_ssl_vpn_server as s
left join alicloud_vpc_ssl_vpn_client_cert as c on s.ssl_vpn_server_id = c.ssl_vpn_server_id
group by
s.name;

.inspect alicloud_vpc_ssl_vpn_server

SSL Server refers to the SSL-VPN server within the VPC. It authenticates clients and manages configurations.

NameTypeDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
account_idtextThe Alicloud Account ID in which the resource is located.
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
ciphertextThe encryption algorithm.
client_ip_poolcidrThe client IP address pool.
connectionsbigintThe total number of current connections.
create_timetimestamp with time zoneThe time when the SSL-VPN server was created.
enable_multi_factor_authbooleanIndicates whether the multi factor authenticaton is enabled.
internet_ipinetThe public IP address.
is_compressedbooleanIndicates whether the transmitted data is compressed.
local_subnettextThe CIDR block of the client.
max_connectionsbigintThe maximum number of connections.
nametextThe name of the SSL-VPN server.
portbigintThe port used by the SSL-VPN server.
prototextThe protocol used by the SSL-VPN server.
regiontextThe Alicloud region in which the resource is located.
ssl_vpn_server_idtextThe ID of the SSL-VPN server.
titletextTitle of the resource.
vpn_gateway_idtextThe ID of the VPN gateway.