DDoS protection plan
securityddos-protection
A volumetric attack mitigation plan attached to networks and addresses.
- Category
- Security
- Properties
- 6
- Components
- 11
- Rules
- 0
A node of this kind resolves each property from its own props, then the component's defaults, then the default below.
| property | type | values | required | default |
|---|---|---|---|---|
| adaptiveThresholds | boolean | — | no | — |
| alwaysOn | boolean | — | no | — |
| managed | boolean | — | no | false |
| protectedResourceCount | integer | — | no | — |
| scope | enum | network | application | both | no | — |
| telemetry | boolean | — | no | — |
No rule selects this kind or its category. Governance calls that a recorded gap.
vendor-neutral
alibabacloud
cloudflare
# yaml-language-server: $schema=../schema/kind.schema.json # A policy attachment covering resources rather than a device on a traffic path, so firewall cannot express it. alwaysOn and scope have no default because a plan that never states what it covers is the finding. schemaVersion: "1" type: "kind" id: "ddos-protection" category: "security" properties: scope: type: "enum" values: ["network", "application", "both"] alwaysOn: type: "boolean" adaptiveThresholds: type: "boolean" telemetry: type: "boolean" protectedResourceCount: type: "integer" managed: type: "boolean" default: false