Package software.amazon.awscdk.services.networkfirewall

Interface CfnFirewallPolicy.StatefulRuleGroupReferenceProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnFirewallPolicy.StatefulRuleGroupReferenceProperty.Jsii$Proxy

Enclosing class:

CfnFirewallPolicy

@Stability(Stable)
public static interface CfnFirewallPolicy.StatefulRuleGroupReferenceProperty
extends software.amazon.jsii.JsiiSerializable

Identifier for a single stateful rule group, used in a firewall policy to refer to a rule group.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.networkfirewall.*;
 StatefulRuleGroupReferenceProperty statefulRuleGroupReferenceProperty = StatefulRuleGroupReferenceProperty.builder()
         .resourceArn("resourceArn")
         // the properties below are optional
         .override(StatefulRuleGroupOverrideProperty.builder()
                 .action("action")
                 .build())
         .priority(123)
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnFirewallPolicy.StatefulRuleGroupReferenceProperty.Builder	A builder for CfnFirewallPolicy.StatefulRuleGroupReferenceProperty
static final class	CfnFirewallPolicy.StatefulRuleGroupReferenceProperty.Jsii$Proxy	An implementation for CfnFirewallPolicy.StatefulRuleGroupReferenceProperty

Method Summary

Modifier and Type	Method	Description
static CfnFirewallPolicy.StatefulRuleGroupReferenceProperty.Builder	builder()
default Object	getOverride()	The action that allows the policy owner to override the behavior of the rule group within a policy.
default Number	getPriority()	An integer setting that indicates the order in which to run the stateful rule groups in a single FirewallPolicy .
String	getResourceArn()	The Amazon Resource Name (ARN) of the stateful rule group.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getResourceArn

@Stability(Stable)
@NotNull
String getResourceArn()

The Amazon Resource Name (ARN) of the stateful rule group.

getOverride

@Stability(Stable)
@Nullable
default Object getOverride()

The action that allows the policy owner to override the behavior of the rule group within a policy.

getPriority

@Stability(Stable)
@Nullable
default Number getPriority()

An integer setting that indicates the order in which to run the stateful rule groups in a single FirewallPolicy .

This setting only applies to firewall policies that specify the STRICT_ORDER rule order in the stateful engine options settings.

Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.

You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on.

builder

@Stability(Stable)
static CfnFirewallPolicy.StatefulRuleGroupReferenceProperty.Builder builder()

Returns:

a CfnFirewallPolicy.StatefulRuleGroupReferenceProperty.Builder of CfnFirewallPolicy.StatefulRuleGroupReferenceProperty