alicloud_ecs_instances Resource
Use the alicloud_ecs_instances
InSpec audit resource to test properties of a collection of Alicloud ECS instances.
Syntax
An alicloud_ecs_instances
resource block declares the tests a collection of Alicloud ECS instances.
describe alicloud_ecs_instances
it { should exist }
end
Parameters
This resource does not require any parameters.
Properties
instance_ids
- The unique instance IDs of the returned ECS instances.
instance_names
- The names of the instances.
host_names
- The host names of the instances.
descriptions
- The descriptions of the instances.
memory
- The memory sizes of the instances, in MiB.
cpus
- The numbers of vCPUs the instances have.
cpu_options
- The CPU options of the instances.
gpu_specs
- The categories of GPU for the instance types.
image_ids
- The IDs of the images that the instances are running.
instance_types
- The instance types of the instances, e.g. ’ecs.g5.large'.
instance_type_families
- The instance families of the instances.
io_optimized
- Booleans that specify whether the instances are I/O optimized.
os_names
- The names of the operating systems for the instances.
os_types
- The types of operating systems for the instances: ‘windows’ or ’linux’.
instance_network_types
- The network types of the instances: ‘Classic’ or ‘VPC’.
public_ip_addresses
- The public IP addresses of the instances.
inner_ip_addresses
- The internal IP addresses of the instances.
eip_addresses
- The Elastic IP addresses associated with the instances.
network_interfaces
- The ENIs bound to the instances.
vlan_ids
- The virtual local area network (VLAN) of the instance.
vpc_attributes
- The VPC attributes of the instance.
internet_max_bandwidth_out
- The maximum outbound public bandwidth, in Mbit/s.
internet_max_bandwidth_in
- The maximum outbound inbound bandwidth, in Mbit/s.
instance_charge_types
- The billing method of the instance: ‘Prepaid’ or ‘Postpaid’.
internet_charge_types
- The billing method of the EIP: ‘PayByBandwidth’ or ‘PayByTraffic’.
spot_price_limits
- Maximum hourly prices for the instances, accurate to 3 decimal places.
spot_strategies
- The bidding policies for the preemptible instances: ‘NoSpot’/‘SpotWithPriceLimit’/‘SpotAsPriceGo’.
sale_cycles
- The billing cycles of the instances, e.g. ‘month’.
creation_times
- The time when the instance was created, e.g. ‘2020-12-10T04:04Z’.
start_times
- The times when the instances were started.
expired_times
- The expiration times of the instances.
auto_release_times
- The automatic release times of pay-as-you-go instances.
statuses
- The current state of the instances, for example ‘running’.
stopped_modes
- Indicates whether the instances continue to be billed after they are stopped: ‘KeepCharging’/‘StopCharging’/‘Not-applicable’.
metadata_options
- The metadata options of the instances.
zone_ids
- The zone ID of the instances.
cluster_ids
- The ID of the cluster to which the instance belongs.
security_group_ids
- The security group ids associated with the instance.
deployment_set_ids
- The IDs of the deployment sets of the instances.
serial_numbers
- The serial number of the instances.
dedicated_instance_attributes
- The attributes of the instances on dedicated hosts.
devices_available
- Boolean value indicating whether data disks can be attached to the instances.
deletion_protection
- Boolean value which indicates whether instances can be deleted.
ram_roles
- The RAM roles attached to the instances.
entries
- Provides access to the raw results of the query, which can be treated as an array of hashes.
Examples
Ensure that you have less than 100 ECS instances.
describe alicloud_ecs_instances do
its('instance_ids.count') { should be < 100 }
end
Ensure that no instances have deletion protection turned off.
describe alicloud_ecs_instances.where(deletion_protection: false) do
it { should not exist }
end
Ensure that instances have exactly one RAM role attached.
describe(alicloud_ecs_instances.where { ram_role.count != 1 }) do
it { should not exist }
end
Matchers
For a full list of available matchers, see our Universal Matchers page.exist
The control will pass if the describe returns at least one result.
Use should_not
to test the entity should not exist.
describe alicloud_ecs_instances do
it { should exist }
end
describe alicloud_ecs_instances do
it { should_not exist }
end
Alicloud Permissions
Your Principal will need the ecs:DescribeInstances
and ecs:DescribeInstanceRamRole
actions with Effect set to Allow.
See the Alibaba Cloud Resource Access Management documentation. See the documentation on authentication rules for ECS APIs.