alibabacloud-cfw-internet-firewall-protect
Installation
SKILL.md
Operation Routing
Identify the user's intent, then route to the matching execution path:
| User Intent | Execution Path |
|---|---|
| Query asset protection status, list assets, check which IPs are protected/unprotected | fw-switch.sh query with filters |
| Enable/disable protection for specific IPs | fw-switch.sh enable/disable --ips "ip1,ip2,..." |
| Enable/disable protection for a region | fw-switch.sh enable/disable --regions "cn-hangzhou,..." |
| Enable/disable protection for a resource type (e.g. all ECS public IPs) | fw-switch.sh enable/disable --resource-types "EcsPublicIP,..." |
| Enable/disable protection for all IPv4 or IPv6 assets | fw-switch.sh enable/disable --ip-version 4 or 6 |
| Combined filter (e.g. Beijing region + ECS public IP + IPv4) | fw-switch.sh enable/disable --regions cn-beijing --resource-types EcsPublicIP --ip-version 4 |
| Enable/disable protection for ALL public IPs at once | fw-switch.sh enable-all/disable-all --yes |
| Enable protection for assets matching a condition (name, label, etc.) | Multi-step: query → filter → enable by IP list (see below) |
| Query auto-protection settings for new assets | auto-protect.sh query |
| Modify auto-protection settings | auto-protect.sh modify --enable/--disable <types> --yes |
Parameters can be freely combined. The --ips, --regions, --resource-types, and --ip-version options work together — provide at least one.