创建合规规则 - CreatePolicyAssignments

package com.huaweicloud.sdk.test;

import com.huaweicloud.sdk.core.auth.ICredential;
import com.huaweicloud.sdk.core.auth.GlobalCredentials;
import com.huaweicloud.sdk.core.exception.ConnectionException;
import com.huaweicloud.sdk.core.exception.RequestTimeoutException;
import com.huaweicloud.sdk.core.exception.ServiceResponseException;
import com.huaweicloud.sdk.config.v1.region.ConfigRegion;
import com.huaweicloud.sdk.config.v1.*;
import com.huaweicloud.sdk.config.v1.model.*;

import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.util.HashMap;

public class CreatePolicyAssignmentsSolution {

    public static void main(String[] args) {
        // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security.
        // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment
        String ak = System.getenv("CLOUD_SDK_AK");
        String sk = System.getenv("CLOUD_SDK_SK");

        ICredential auth = new GlobalCredentials()
                .withAk(ak)
                .withSk(sk);

        ConfigClient client = ConfigClient.newBuilder()
                .withCredential(auth)
                .withRegion(ConfigRegion.valueOf("<YOUR REGION>"))
                .build();
        CreatePolicyAssignmentsRequest request = new CreatePolicyAssignmentsRequest();
        PolicyAssignmentRequestBody body = new PolicyAssignmentRequestBody();
        List<ResourceTag> listbodyTags = new ArrayList<>();
        listbodyTags.add(
            new ResourceTag()
                .withKey("tagkey")
                .withValue("tagValue")
        );
        PolicyParameterValue parametersParameters = new PolicyParameterValue();
        parametersParameters.withValue("[ea0d6e0e-99c3-406d-a873-3bb45462b624]");
        Map<String, PolicyParameterValue> listbodyParameters = new HashMap<>();
        listbodyParameters.put("listOfAllowedImages", parametersParameters);
        PolicyFilterDefinition policyFilterbody = new PolicyFilterDefinition();
        policyFilterbody.withResourceProvider("ecs")
            .withResourceType("cloudservers");
        body.withTags(listbodyTags);
        body.withParameters(listbodyParameters);
        body.withPolicyDefinitionId("5f3c8b9a9811a13739a32ed9");
        body.withPolicyFilter(policyFilterbody);
        body.withDescription("The ECS resource is non-compliant if the image it used is not in the allowed list");
        body.withName("allowed-images-by-id");
        request.withBody(body);
        try {
            CreatePolicyAssignmentsResponse response = client.createPolicyAssignments(request);
            System.out.println(response.toString());
        } catch (ConnectionException e) {
            e.printStackTrace();
        } catch (RequestTimeoutException e) {
            e.printStackTrace();
        } catch (ServiceResponseException e) {
            e.printStackTrace();
            System.out.println(e.getHttpStatusCode());
            System.out.println(e.getRequestId());
            System.out.println(e.getErrorCode());
            System.out.println(e.getErrorMsg());
        }
    }
}

# coding: utf-8

import os
from huaweicloudsdkcore.auth.credentials import GlobalCredentials
from huaweicloudsdkconfig.v1.region.config_region import ConfigRegion
from huaweicloudsdkcore.exceptions import exceptions
from huaweicloudsdkconfig.v1 import *

if __name__ == "__main__":
    # The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security.
    # In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment
    ak = os.environ["CLOUD_SDK_AK"]
    sk = os.environ["CLOUD_SDK_SK"]

    credentials = GlobalCredentials(ak, sk)

    client = ConfigClient.new_builder() \
        .with_credentials(credentials) \
        .with_region(ConfigRegion.value_of("<YOUR REGION>")) \
        .build()

    try:
        request = CreatePolicyAssignmentsRequest()
        listTagsbody = [
            ResourceTag(
                key="tagkey",
                value="tagValue"
            )
        ]
        parametersParameters = PolicyParameterValue(
            value="[ea0d6e0e-99c3-406d-a873-3bb45462b624]"
        )
        listParametersbody = {
            "listOfAllowedImages": parametersParameters
        }
        policyFilterbody = PolicyFilterDefinition(
            resource_provider="ecs",
            resource_type="cloudservers"
        )
        request.body = PolicyAssignmentRequestBody(
            tags=listTagsbody,
            parameters=listParametersbody,
            policy_definition_id="5f3c8b9a9811a13739a32ed9",
            policy_filter=policyFilterbody,
            description="The ECS resource is non-compliant if the image it used is not in the allowed list",
            name="allowed-images-by-id"
        )
        response = client.create_policy_assignments(request)
        print(response)
    except exceptions.ClientRequestException as e:
        print(e.status_code)
        print(e.request_id)
        print(e.error_code)
        print(e.error_msg)

package main

import (
	"fmt"
	"github.com/huaweicloud/huaweicloud-sdk-go-v3/core/auth/global"
    config "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/config/v1"
	"github.com/huaweicloud/huaweicloud-sdk-go-v3/services/config/v1/model"
    region "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/config/v1/region"
)

func main() {
    // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security.
    // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment
    ak := os.Getenv("CLOUD_SDK_AK")
    sk := os.Getenv("CLOUD_SDK_SK")

    auth, err := global.NewCredentialsBuilder().
        WithAk(ak).
        WithSk(sk).
        SafeBuild()

    if err != nil {
        fmt.Println(err)
        return
    }

    hcClient, err := config.ConfigClientBuilder().
         WithRegion(region.ValueOf("<YOUR REGION>")).
         WithCredential(auth).
         SafeBuild()


    if err != nil {
        fmt.Println(err)
        return
    }

    client := config.NewConfigClient(hcClient)

    request := &model.CreatePolicyAssignmentsRequest{}
	var listTagsbody = []model.ResourceTag{
        {
            Key: "tagkey",
            Value: "tagValue",
        },
    }
	var valueParameters interface{} = "[ea0d6e0e-99c3-406d-a873-3bb45462b624]"
	parametersParameters := model.PolicyParameterValue{
		Value: &valueParameters,
	}
	var listParametersbody = map[string](model.PolicyParameterValue){
        "listOfAllowedImages": parametersParameters,
    }
	resourceProviderPolicyFilter:= "ecs"
	resourceTypePolicyFilter:= "cloudservers"
	policyFilterbody := &model.PolicyFilterDefinition{
		ResourceProvider: &resourceProviderPolicyFilter,
		ResourceType: &resourceTypePolicyFilter,
	}
	policyDefinitionIdPolicyAssignmentRequestBody:= "5f3c8b9a9811a13739a32ed9"
	descriptionPolicyAssignmentRequestBody:= "The ECS resource is non-compliant if the image it used is not in the allowed list"
	request.Body = &model.PolicyAssignmentRequestBody{
		Tags: &listTagsbody,
		Parameters: listParametersbody,
		PolicyDefinitionId: &policyDefinitionIdPolicyAssignmentRequestBody,
		PolicyFilter: policyFilterbody,
		Description: &descriptionPolicyAssignmentRequestBody,
		Name: "allowed-images-by-id",
	}
	response, err := client.CreatePolicyAssignments(request)
	if err == nil {
        fmt.Printf("%+v\n", response)
    } else {
        fmt.Println(err)
    }
}