ACS-KMS-BulkyUpdateRotationPolicy.json

{
  "FormatVersion": "OOS-2019-06-01",
  "Description": {
    "en": "Update rotation policy",
    "zh-cn": "更新密钥轮转策略",
    "name-en": "ACS-KMS-BulkyUpdateRotationPolicy",
    "name-zh-cn": "更新密钥轮转策略",
    "categories": [
      "security"
    ]
  },
  "Parameters": {
    "regionId": {
      "Type": "String",
      "Label": {
        "en": "RegionId",
        "zh-cn": "地域ID"
      },
      "AssociationProperty": "RegionId",
      "Default": "{{ ACS::RegionId }}"
    },
    "keyIds": {
      "Label": {
        "en": "KeyIds",
        "zh-cn": "密钥ID列表"
      },
      "Type": "List"
    },
    "rotationInterval": {
      "Label": {
        "en": "RotationInterval",
        "zh-cn": "自动轮转的时间周期"
      },
      "Type": "String"
    },
    "rateControl": {
      "Label": {
        "en": "RateControl",
        "zh-cn": "任务执行的并发比率"
      },
      "Type": "Json",
      "AssociationProperty": "RateControl",
      "Default": {
        "Mode": "Concurrency",
        "MaxErrors": 0,
        "Concurrency": 10
      }
    },
    "OOSAssumeRole": {
      "Label": {
        "en": "OOSAssumeRole",
        "zh-cn": "OOS扮演的RAM角色"
      },
      "Type": "String",
      "Default": ""
    }
  },
  "RamRole": "{{ OOSAssumeRole }}",
  "Tasks": [
    {
      "Name": "updateRotationPolicy",
      "Action": "ACS::ExecuteAPI",
      "Description": {
        "en": "Update rotation policy",
        "zh-cn": "更新密钥轮转策略"
      },
      "Properties": {
        "Service": "KMS",
        "API": "UpdateRotationPolicy",
        "Parameters": {
          "RegionId": "{{ regionId }}",
          "KeyId": "{{ ACS::TaskLoopItem }}",
          "EnableAutomaticRotation": true,
          "RotationInterval": "{{ rotationInterval }}"
        }
      },
      "Loop": {
        "RateControl": "{{ rateControl }}",
        "Items": "{{ keyIds }}"
      }
    }
  ]
}