Skip to main content

Illumio Segmentation for the Cloud User Guide

How Label Matching Works

This section provides a detailed example of the Labeling Rules label matching logic and presents a brief list of terms used throughout this document.

A match occurs if all statements in a rule's condition match a cloud resource's attributes.

Labeling Rule terminology
  • Rule: Rules consist of a condition and one or more labels.

  • Condition: Conditions are the user-defined criteria that cloud resources must match to be eligible for label assignment. A condition consists of one or more statements connected by AND, ensuring that cloud resources must satisfy all statements of the condition to match the rule.

  • Statement: Statements define the specific cloud resource attributes, operators, and values that are evaluated. Multiple values within a statement are considered using OR, allowing you to specify match criteria flexibly.

  • Precedence: Rules are numbered, with Rule 1 having the highest precedence. A cloud resource is evaluated against the rules in order, ensuring that rules with the labeling criteria most important to you are considered first.

Labeling Rule matching logic

Example: Cloud resource and Rule Evaluation

_000_cloud-rbl-resource-eval-forrester.png