1.204.0

interface CfnFirewallProps

LanguageType name
.NETAmazon.CDK.AWS.NetworkFirewall.CfnFirewallProps
Javasoftware.amazon.awscdk.services.networkfirewall.CfnFirewallProps
Pythonaws_cdk.aws_networkfirewall.CfnFirewallProps
TypeScript @aws-cdk/aws-networkfirewall » CfnFirewallProps

Properties for defining a CfnFirewall.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as networkfirewall from '@aws-cdk/aws-networkfirewall';
const cfnFirewallProps: networkfirewall.CfnFirewallProps = {
  firewallName: 'firewallName',
  firewallPolicyArn: 'firewallPolicyArn',
  subnetMappings: [{
    subnetId: 'subnetId',

    // the properties below are optional
    ipAddressType: 'ipAddressType',
  }],
  vpcId: 'vpcId',

  // the properties below are optional
  deleteProtection: false,
  description: 'description',
  firewallPolicyChangeProtection: false,
  subnetChangeProtection: false,
  tags: [{
    key: 'key',
    value: 'value',
  }],
};

Properties

NameTypeDescription
firewallNamestringThe descriptive name of the firewall.
firewallPolicyArnstringThe Amazon Resource Name (ARN) of the firewall policy.
subnetMappingsIResolvable | SubnetMappingProperty | IResolvable[]The public subnets that Network Firewall is using for the firewall.
vpcIdstringThe unique identifier of the VPC where the firewall is in use.
deleteProtection?boolean | IResolvableA flag indicating whether it is possible to delete the firewall.
description?stringA description of the firewall.
firewallPolicyChangeProtection?boolean | IResolvableA setting indicating whether the firewall is protected against a change to the firewall policy association.
subnetChangeProtection?boolean | IResolvableA setting indicating whether the firewall is protected against changes to the subnet associations.
tags?CfnTag[]An array of key-value pairs to apply to this resource.

firewallName

Type: string

The descriptive name of the firewall.

You can't change the name of a firewall after you create it.

firewallPolicyArn

Type: string

The Amazon Resource Name (ARN) of the firewall policy.

The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.

subnetMappings

Type: IResolvable | SubnetMappingProperty | IResolvable[]

The public subnets that Network Firewall is using for the firewall.

Each subnet must belong to a different Availability Zone.

vpcId

Type: string

The unique identifier of the VPC where the firewall is in use.

You can't change the VPC of a firewall after you create the firewall.

deleteProtection?

Type: boolean | IResolvable (optional)

A flag indicating whether it is possible to delete the firewall.

A setting of TRUE indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to TRUE .

description?

Type: string (optional)

A description of the firewall.

firewallPolicyChangeProtection?

Type: boolean | IResolvable (optional)

A setting indicating whether the firewall is protected against a change to the firewall policy association.

Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to TRUE .

subnetChangeProtection?

Type: boolean | IResolvable (optional)

A setting indicating whether the firewall is protected against changes to the subnet associations.

Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to TRUE .

tags?

Type: CfnTag[] (optional)

An array of key-value pairs to apply to this resource.

For more information, see Tag .

← PreviousNext →