Skip to main content

Illumio Segmentation for the Cloud User Guide

How Label Matching Works

This section provides a detailed example of the Labeling Rules label matching logic and presents a brief list of terms used throughout this document.

A match occurs if all statements in a rule's condition match a cloud resource's attributes.

Labeling Rule terminology

Term

Description

Rule

Consists of a condition and one or more labels.

Condition

Defines the criteria a cloud resource must match to be eligible for label assignment. Multiple statements within a condition are combined using AND to ensure that cloud resources satisfy all of the statements of the condition in order to match the rule.

Statement

Defines the cloud resource attribute, operator, and value to evaluate. If you enter multiple values within a statement to give a rule flexibility, they are evaluated using OR.,

Precedence

Determines the order in which rules are evaluated. Rule 1 has the highest precedence.

Labeling Rule matching logic

Example: Cloud resource and Rule Evaluation

000_cloud-rbl-resource-eval-Oct-2026.png