1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
|
# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"). You
# may not use this file except in compliance with the License. A copy of
# the License is located at
#
# http://aws.amazon.com/apache2.0/
#
# or in the "license" file accompanying this file. This file is
# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
# ANY KIND, either express or implied. See the License for the specific
# language governing permissions and limitations under the License.
module AWS
class ELB
class LoadBalancerPolicyCollection
include Core::Collection::Simple
def initialize load_balancer, options = {}
@load_balancer = load_balancer
super
end
attr_reader :load_balancer
# Creates a new load balancer policy that contains the necessary
# attributes depending on the policy type. Policies are settings
# that are saved for your load balancer and that can be applied to
# the front-end listener, or the back-end application server,
# depending on your policy type.
#
# ## Applying Policies
#
# To apply a policy to a front-end listener:
#
# # each listener may only have a single policy
# load_balancer.listener[80].policy = listener_policy
#
# To apply a policy to backend instance port
#
# # back end servers can have multiple policies per instance port
# load_balancer.backend_server_policies.add(80, back_end_policy)
#
# @param [String] name The name of the policy being created. The name
# must be unique within the set of policies for this load balancer.
#
# @param [String] type The policy type name. Valid values inlucde:
#
# * 'PublicKeyPolicyType'
# * 'AppCookieStickinessPolicyType'
# * 'LBCookieStickinessPolicyType'
# * 'SSLNegotiationPolicyType'
# * 'BackendServerAuthenticationPolicyType'
#
# @param [Hash] attributes A hash of policy attributes. Each policy
# type accepts a different list of hash options. Below each
# policy type name is listed with its list of accepted options.
# Attributes that accept more than one value should be provided
# as an array of values.
#
# Hash keys should be attribute names, values may be single
# values or arrays of values.
#
# PublicKeyPolicyType
#
# Policy containing a list of public keys to accept when authenticating the back-end server(s). This policy cannot be applied directly to back-end servers or listeners but must be part of a BackendServerAuthenticationPolicyType.
#
# * 'PublicKey', String, one
#
# AppCookieStickinessPolicyType
#
# Stickiness policy with session lifetimes controlled by the lifetime of the application-generated cookie. This policy can be associated only with HTTP/HTTPS listeners.
#
# * 'CookieName', String, one
#
# LBCookieStickinessPolicyType
#
# Stickiness policy with session lifetimes controlled by the browser (user-agent) or a specified expiration period. This policy can be associated only with HTTP/HTTPS listeners.
#
# * 'CookieExpirationPeriod', Long, zero or one
#
# SSLNegotiationPolicyType
#
# Listener policy that defines the ciphers and protocols that will be accepted by the load balancer. This policy can be associated only with HTTPS/SSL listeners.
#
# * 'Protocol-SSLv2', Boolean, zero or one
# * 'Protocol-TLSv1', Boolean, zero or one
# * 'Protocol-SSLv3', Boolean, zero or one
# * 'DHE-RSA-AES256-SHA', Boolean, zero or one
# * 'DHE-DSS-AES256-SHA', Boolean, zero or one
# * 'DHE-RSA-CAMELLIA256-SHA', Boolean, zero or one
# * 'DHE-DSS-CAMELLIA256-SHA', Boolean, zero or one
# * 'ADH-AES256-SHA', Boolean, zero or one
# * 'ADH-CAMELLIA256-SHA', Boolean, zero or one
# * 'AES256-SHA', Boolean, zero or one
# * 'CAMELLIA256-SHA', Boolean, zero or one
# * 'PSK-AES256-CBC-SHA', Boolean, zero or one
# * 'EDH-RSA-DES-CBC3-SHA', Boolean, zero or one
# * 'EDH-DSS-DES-CBC3-SHA', Boolean, zero or one
# * 'ADH-DES-CBC3-SHA', Boolean, zero or one
# * 'DES-CBC3-SHA', Boolean, zero or one
# * 'DES-CBC3-MD5', Boolean, zero or one
# * 'PSK-3DES-EDE-CBC-SHA', Boolean, zero or one
# * 'KRB5-DES-CBC3-SHA', Boolean, zero or one
# * 'KRB5-DES-CBC3-MD5', Boolean, zero or one
# * 'DHE-RSA-AES128-SHA', Boolean, zero or one
# * 'DHE-DSS-AES128-SHA', Boolean, zero or one
# * 'DHE-RSA-SEED-SHA', Boolean, zero or one
# * 'DHE-DSS-SEED-SHA', Boolean, zero or one
# * 'DHE-RSA-CAMELLIA128-SHA', Boolean, zero or one
# * 'DHE-DSS-CAMELLIA128-SHA', Boolean, zero or one
# * 'ADH-AES128-SHA', Boolean, zero or one
# * 'ADH-SEED-SHA', Boolean, zero or one
# * 'ADH-CAMELLIA128-SHA', Boolean, zero or one
# * 'AES128-SHA', Boolean, zero or one
# * 'SEED-SHA', Boolean, zero or one
# * 'CAMELLIA128-SHA', Boolean, zero or one
# * 'RC2-CBC-MD5', Boolean, zero or one
# * 'PSK-AES128-CBC-SHA', Boolean, zero or one
# * 'ADH-RC4-MD5', Boolean, zero or one
# * 'IDEA-CBC-SHA', Boolean, zero or one
# * 'RC4-SHA', Boolean, zero or one
# * 'RC4-MD5', Boolean, zero or one
# * 'PSK-RC4-SHA', Boolean, zero or one
# * 'KRB5-RC4-SHA', Boolean, zero or one
# * 'KRB5-RC4-MD5', Boolean, zero or one
# * 'EDH-RSA-DES-CBC-SHA', Boolean, zero or one
# * 'EDH-DSS-DES-CBC-SHA', Boolean, zero or one
# * 'ADH-DES-CBC-SHA', Boolean, zero or one
# * 'DES-CBC-SHA', Boolean, zero or one
# * 'DES-CBC-MD5', Boolean, zero or one
# * 'KRB5-DES-CBC-SHA', Boolean, zero or one
# * 'KRB5-DES-CBC-MD5', Boolean, zero or one
# * 'EXP-EDH-RSA-DES-CBC-SHA', Boolean, zero or one
# * 'EXP-EDH-DSS-DES-CBC-SHA', Boolean, zero or one
# * 'EXP-ADH-DES-CBC-SHA', Boolean, zero or one
# * 'EXP-DES-CBC-SHA', Boolean, zero or one
# * 'EXP-RC2-CBC-MD5', Boolean, zero or one
# * 'EXP-KRB5-RC2-CBC-SHA', Boolean, zero or one
# * 'EXP-KRB5-DES-CBC-SHA', Boolean, zero or one
# * 'EXP-KRB5-RC2-CBC-MD5', Boolean, zero or one
# * 'EXP-KRB5-DES-CBC-MD5', Boolean, zero or one
# * 'EXP-ADH-RC4-MD5', Boolean, zero or one
# * 'EXP-RC4-MD5', Boolean, zero or one
# * 'EXP-KRB5-RC4-SHA', Boolean, zero or one
# * 'EXP-KRB5-RC4-MD5', Boolean, zero or one
#
# BackendServerAuthenticationPolicyType
#
# Policy that controls authentication to back-end server(s) and contains one or more policies, such as an instance of a PublicKeyPolicyType. This policy can be associated only with back-end servers that are using HTTPS/SSL.
#
# * 'PublicKeyPolicyName', PolicyName, one or more
#
# @return [nil]
#
def create name, type, attributes = {}
attribute_list = []
attributes.each do |attr_name,values|
[values].flatten.each do |value|
attribute_list << {
:attribute_name => attr_name,
:attribute_value => value.to_s
}
end
end
client.create_load_balancer_policy(
:load_balancer_name => load_balancer.name,
:policy_name => name.to_s,
:policy_type_name => type.to_s,
:policy_attributes => attribute_list)
LoadBalancerPolicy.new(load_balancer, name, :type => type.to_s)
end
# @param [String] policy_name The name of the policy to return.
# @return [LoadBalancerPolicy] Returns a reference to the load balancer
# policy with the given name.
def [] policy_name
LoadBalancerPolicy.new(load_balancer, policy_name)
end
protected
def _each_item options = {}, &block
options[:load_balancer_name] = load_balancer.name
response = client.describe_load_balancer_policies(options)
response.policy_descriptions.each do |desc|
load_balancer_policy = LoadBalancerPolicy.new_from(
:describe_load_balancer_policies,
desc, load_balancer, desc.policy_name)
yield(load_balancer_policy)
end
end
end
end
end
|
