Network Resources

Access List

Access Lists are used to protect any ingress/egress traffic to cloud resources (e.g. Security Groups/NACLs).

Access List Flow Logs

Access List Flow Logs (Azure NSG Flow Logs) allow users to log information about IP traffic flowing through a Network Security Group (e.g. Azure NSG). Data that is logged is stored and can be exported.

Access List Rule

Access List Rules are Ingress/Egress traffic rules for Security Groups/NACLs. They contain basic information about a single rule entry in an access list resource.

Application Gateway

An Application Gateway is an application program that runs on a firewall system between two networks, for example an AWS API Gateway or Azure API Management Service.

Application Gateway Domain

An application gateway domain is a domain name typically designated and configured for use with an API Gateway. An example of this type of resource is AWS API Gateway Domain.

Application Key

Application Keys or AWS API Gateway keys are alphanumeric string values that you distribute to application developer customers to grant access to your API.

Application Stage

The Application Stage is a resource (often used in CloudFormation templates) to create a stage for a deployment.

Backend Services

In GCP, a backend service that contains configuration values for Google Cloud Platform load balancing services.

Bastion Host

Bastion Hosts are part of a service that allows seamless and secure connection to your virtual machines.

Content Delivery Network

Content Delivery Networks is a system of servers that delivers content to users based on geographic location. This class inherits from TopLevelResource and has direct access to the resource's database object.

Database Migration Endpoint

A Database Migration Endpoint is used to connect to a data store and migrate data from a source endpoint to a target endpoint.

DDoS Protection

DDoS Protection is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on your CSP.

Direct Connect

Direct Connect is a private connection between environments to reduce network costs, increase bandwidth throughput, and provide a more consistent network experience than internet-based connections. (See AWS Direct Connect, Azure Express Route Circuit)

DNS Zone

DNS Zones are responsible for housing all zone and record information associated for a particular zone. This resource inherits from Resource and has direct access to the resource’s database object.

class DivvyResource.Resources.dnszone.DnsZone(resource_id)
Bases: DivvyResource.Resources.toplevelresource.TopLevelResource

delete(user_resource_id=None)
Delete this resource. If wrapped in a with JobQueue() block, this will queue the deletion job to the wrapped queue, otherwise it calls immediately.

dns_zone

static get_db_class()

get_domain()
Retrieve the domain of the DNS zone.

get_networks()
Retrieve the networks associated with a private zone.

get_private_zone()
Retrieve the value of the private zone boolean.

static get_provider_id_field()

get_resource_name()

static get_resource_name_field()

static get_resource_type()

get_supported_actions()

handle_resource_created(user_resource_id=None, project_resource_id=None)
This should be called when a resource is created/discovered after the basic data is added to the database. This gives an opportunity for post-addition hooks (assignment to groups, alerts, etc).

handle_resource_destroyed(user_resource_id=None)
This should be called when a resource is destroyed before the basic data is removed from the database. This gives an opportunity for pre-destruction hooks (removal from groups, alerts, etc).

handle_resource_modified(resource, *args, **kwargs)
This should be called when a resource is modified after the new data has been updated in the DB session. This gives an opportunity for post-modification hooks.

top_level_resource = True

zone_id

Forwarding Rules

Forwarding rules or in the case of Azure, a Load Balancer rule, is used to define how traffic is distributed to the VMs. (See also GCP's Load Balancer Forwarding Rules).

Global Load Balancer

A global, scalable entry-point that uses a global edge network to create fast, secure, and widely scalable web applications.

Internet Gateway

Network Gateway resources allow communication between instances in your network and the internet. This resource inherits from Resource and has direct access to the resource's database object.

Load Balancer

Load balancers are used in multi-tier apps to distribute load across a variety of compute instances. This class inherits from TopLevelResource and has direct access to the resource’s database object.

class DivvyResource.Resources.loadbalancer.LoadBalancer(resource_id)
Bases: DivvyResource.Resources.toplevelresource.TopLevelResource

LoadBalancer Operations

delete(user_resource_id=None)
Delete this resource. If wrapped in a with JobQueue() block, this will queue the deletion job to the wrapped queue, otherwise it calls immediately.

classmethod filter_query_for_global_search(query, search_string)
Apply the query filters that will restrict a provided query to the provided global search string and return the modified query.
Parameters:
query (sqlalchemy.orm.query) – Original query that includes this resource type
search_string (basestring) – Single string to search for across all important text fields for this resource
Returns: Modified query including filters that match search string
Return type: sqlalchemy.orm.query

get_date_created()
Retrieve the time from the provider that this resource was created (if available).

static get_db_class()

static get_provider_id_field()

static get_resource_type()

get_supported_actions()
Retrieve all the actions which are supported by this resource.

NAT Gateway

Enables instances in a private network to forward traffic to the Internet (e.g. AWS Nat Gateway VPC, GCP Cloud NAT, Azure NAT Gateway).

Network

Logically isolated virtual environment within a Cloud Provider (AWS VPC, Azure Virtual Network, Google VPC, etc.)

Network Address Group

A Network Address Group provides visibility into defined network address prefixes (AWS Managed Prefix List, Azure IP Group).

Network Endpoint

A Network Endpoint endpoint enables you to privately connect your VPC to supported services. In AWS the VPC endpoint services are powered by AWS PrivateLink without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. In Azure, Service endpoints provide the ability to secure Azure service resources to your virtual network by extending VNet identity to the service.

Network Endpoint Service

Network Endpoint Services enable you to privately connect your VPC to supported provider services (AWS VPC Endpoint Services, Azure Private Link Service).

Network Firewall

A managed, cloud-based network-security service that protects network resources. An example of this resource is Azure Network Firewall.

Network Firewall Rule

A network firewall rule is a firewall rule that can include NAT rules, network rules, and applications rules. An example of this type of resource is Azure Firewall Rule.

Network Firewall Rule List

Firewall rule collections processed according to the rule type in priority order. An example of this type of resource is Azure Firewall Rule Collection.

Network Flow Log

Network flow log resources store configuration and delivery information regarding traffic flows between networking components in a cloud network. This resource inherits from Resource and has direct access to the resource's database object.

class DivvyResource.Resources.networkflowlog.NetworkFlowLog(resource_id)
Bases: DivvyResource.Resources.resource.Resource

Network Flow Log Operations

flow_log

flow_log_id

static get_db_class()

get_parent_resource_id()

static get_provider_id_field()

get_resource_name()

static get_resource_name_field()
Network flow logs don’t have a name so we will use the log_group_name as the name.

static get_resource_type()

handle_resource_created(user_resource_id=None, project_resource_id=None)
This should be called when a resource is created/discovered after the basic data is added to the database. This gives an opportunity for post-addition hooks (assignment to projects/groups, alerts, etc).

handle_resource_destroyed(user_resource_id=None, project_resource_id=None)
This should be called when a resource is destroyed before the basic data is removed from the database. This gives an opportunity for pre-destruction hooks (removal from projects/groups, alerts, etc).

handle_resource_modified(resource, *args, **kwargs)
This should be called when a resource is modified after the new data has been updated in the DB session. This gives an opportunity for post-modification hooks.

Network Interface

Network Interface resources store configuration and delivery information regarding traffic flows between networking components in a cloud network. This resource inherits from Resource Class and has direct access to the resource's database object.

Network Peer

Network peer resources interconnect two private networks. This resource inherits from Resource Class and has direct access to the resource’s database object.

class DivvyResource.Resources.networkpeer.NetworkPeer(resource_id)
Bases: DivvyResource.Resources.resource.Resource

Network Peer Operations

static get_db_class()

get_parent_resource_id()

static get_provider_id_field()

static get_resource_type()

handle_resource_created(user_resource_id=None, project_resource_id=None)
This should be called when a resource is created/discovered after the basic data is added to the database. This gives an opportunity for post-addition hooks (assignment to projects/groups, alerts, etc).

handle_resource_destroyed(user_resource_id=None, project_resource_id=None)
This should be called when a resource is destroyed before the basic data is removed from the database. This gives an opportunity for pre-destruction hooks (removal from projects/groups, alerts, etc).

handle_resource_modified(resource, *args, **kwargs)
This should be called when a resource is modified after the new data has been updated in the DB session. This gives an opportunity for post-modification hooks.

network_peer

peer_id

Private Subnet

Private logical subdivision of a network.

Public IP

Public IP addresses are used to communicate over the Internet. Examples of these include AWS Elastic IPs. This class inherits from TopLevelResource and has direct access to the resource’s database object.

class DivvyResource.Resources.publicip.PublicIp(resource_id)
Bases: DivvyResource.Resources.toplevelresource.TopLevelResource

IP Address Operations (Elastic/Floating/Public IPs)

allocation_id

delete(user_resource_id=None)
Delete this resource. If wrapped in a with JobQueue() block, this will queue the deletion job to the wrapped queue, otherwise it calls immediately.

get_attached_instance()
Retrieve the attached instance (Resource object).

get_attached_network_interface()
Retrieve the network interface (Resource object) this IP is attached to, or None if not attached.

static get_db_class()

get_domain()
Retrieve the domain of the resource (e.g., vpc)

static get_provider_id_field()

get_resource_name()
Public IPs are not named by the user. We return the ip address itself.

static get_resource_name_field()

static get_resource_type()

get_supported_actions()

handle_resource_created(user_resource_id=None, project_resource_id=None)
This should be called when a resource is created/discovered after the basic data is added to the database. This gives an opportunity for post-addition hooks (assignment to projects/groups, alerts, etc).

handle_resource_destroyed(user_resource_id=None)
This should be called when a resource is destroyed before the basic data is removed from the database. This gives an opportunity for pre-destruction hooks (removal from projects/groups, alerts, etc).

handle_resource_modified(resource, *args, **kwargs)
This should be called when a resource is modified after the new data has been updated in the DB session. This gives an opportunity for post-modification hooks.

ip_address

is_ephemeral

public_ip

top_level_resource = True

Query Log Config

Query Log Config enables DNS query resolution across entire hybrid clouds (e.g., AWS Route53Resolver Configuration).

Route

The Route resource is used to determine where network traffic from your subnet or gateway is directed (e.g., AWS Route, Azure Route).

Route Table

Network route tables contain a set of rules, called routes, that are used to determine where network traffic is directed. Each subnet in your VPC must be associated with a route table; the table controls the routing for the subnet. A subnet can only be associated with one route table at a time, but you can associate multiple subnets with the same route table. This class inherits from Resource and has direct access to the resource’s database object.

class DivvyResource.Resources.routetable.RouteTable(resource_id)
Bases: DivvyResource.Resources.resource.Resource

Route Table Operations

delete(user_resource_id=None)
Delete this resource. If wrapped in a with JobQueue() block, this will queue the deletion job to the wrapped queue, otherwise it calls immediately.

static get_db_class()

get_network_id()
Retrieve the network ID that the route table belongs to.

static get_provider_id_field()

static get_resource_type()

get_supported_actions()

get_vpc_association_id()
Retrieve the VPC association ID of the route.

handle_resource_created(user_resource_id=None, project_resource_id=None)
This should be called when a resource is created/discovered after the basic data is added to the database. This gives an opportunity for post-addition hooks (assignment to groups, alerts, etc).

handle_resource_destroyed(user_resource_id=None)
This should be called when a resource is destroyed before the basic data is removed from the database. This gives an opportunity for pre-destruction hooks (removal from groups, alerts, etc).

handle_resource_modified(resource, *args, **kwargs)
This should be called when a resource is modified after the new data has been updated in the DB session. This gives an opportunity for post-modification hooks.

route_table

route_table_id

Site-to-Site VPN

A Site-to-Site VPN connection offers two VPN tunnels between a virtual private gateway or a transit gateway on the cloud provider side and a customer gateway on the remote (on-premises) side.

Target Proxies

In GCP target proxies are referenced by one or more forwarding rules. In the case of HTTP(S) load balancing, proxies route incoming requests to a URL map.

Traffic Manager

A Traffic Manager is a DNS-based network traffic load balancer, distributing network traffic evenly across your environment.

Traffic Mirror Target

A Traffic Mirror is an Amazon VPC feature that you can use to copy network traffic from an elastic network interface of Amazon EC2 instances. You can then send the traffic to out-of-band security and monitoring appliances for: content inspection, threat monitoring, and troubleshooting (e.g. AWS VPC Traffic Mirror Target)

Transit Gateway

A Transit Gateway enables customers to connect private clouds (e.g. Amazon Virtual Private Clouds (VPCs) and their on-premises networks to a single gateway.

URL Maps

A URL Map is a set of rules for routing incoming HTTP(S) requests to specific services.

Virtual Private Gateway

A private gateway is a logical, fully redundant distributed edge routing function at the edge of a virtual computing resource, for example, an AWS VPC.

Web Application Firewall

A Web Application Firewall is a resource that helps protect your web applications or APIs against common web exploits that may affect availability, compromise security, or consume excessive resources, for example the AWS WAF or Google Cloud Armor.

Web Application Firewall Rule

A Web Application Firewall Rule governs how incoming HTTP(S) requests are inspected and handled.

Web Application Firewall Rule Group

A Web Application Firewall Rule Group is a set of rules that can be added to an access control list.