Package software.amazon.awscdk.services.shield

Class CfnDRTAccessProps.Jsii$Proxy

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.shield.CfnDRTAccessProps.Jsii$Proxy

All Implemented Interfaces:

CfnDRTAccessProps, software.amazon.jsii.JsiiSerializable

Enclosing interface:

CfnDRTAccessProps

@Stability(Stable)
@Internal
public static final class CfnDRTAccessProps.Jsii$Proxy
extends software.amazon.jsii.JsiiObject
implements CfnDRTAccessProps

An implementation for CfnDRTAccessProps

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.shield.CfnDRTAccessProps

CfnDRTAccessProps.Builder, CfnDRTAccessProps.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	Jsii$Proxy(CfnDRTAccessProps.Builder builder)	Constructor that initializes the object based on literal property values passed by the CfnDRTAccessProps.Builder.
protected	Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)	Constructor that initializes the object based on values retrieved from the JsiiObject.

Method Summary

Modifier and Type	Method	Description
com.fasterxml.jackson.databind.JsonNode	$jsii$toJson()
final boolean	equals(Object o)
final List<String>	getLogBucketList()	Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources.
final String	getRoleArn()	Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks.
final int	hashCode()

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Jsii$Proxy

protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)

Constructor that initializes the object based on values retrieved from the JsiiObject.

Parameters:

objRef - Reference to the JSII managed object.

Jsii$Proxy

protected Jsii$Proxy(CfnDRTAccessProps.Builder builder)

Constructor that initializes the object based on literal property values passed by the CfnDRTAccessProps.Builder.

Method Details

getRoleArn

public final String getRoleArn()

Description copied from interface: CfnDRTAccessProps

Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks.

This enables the SRT to inspect your AWS WAF configuration and logs and to create or update AWS WAF rules and web ACLs.

You can associate only one RoleArn with your subscription. If you submit this update for an account that already has an associated role, the new RoleArn will replace the existing RoleArn .

This change requires the following:

• You must be subscribed to the Business Support plan or the Enterprise Support plan .
• You must have the iam:PassRole permission. For more information, see Granting a user permissions to pass a role to an AWS service .
• The AWSShieldDRTAccessPolicy managed policy must be attached to the role that you specify in the request. You can access this policy in the IAM console at AWSShieldDRTAccessPolicy . For information, see Adding and removing IAM identity permissions .
• The role must trust the service principal drt.shield.amazonaws.com . For information, see IAM JSON policy elements: Principal .

The SRT will have access only to your AWS WAF and Shield resources. By submitting this request, you provide permissions to the SRT to inspect your AWS WAF and Shield configuration and logs, and to create and update AWS WAF rules and web ACLs on your behalf. The SRT takes these actions only if explicitly authorized by you.

Specified by:

getRoleArn in interface CfnDRTAccessProps

getLogBucketList

public final List<String> getLogBucketList()

Description copied from interface: CfnDRTAccessProps

Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources.

You can associate up to 10 Amazon S3 buckets with your subscription.

Use this to share information with the SRT that's not available in AWS WAF logs.

To use the services of the SRT, you must be subscribed to the Business Support plan or the Enterprise Support plan .

Specified by:

getLogBucketList in interface CfnDRTAccessProps

$jsii$toJson

@Internal
public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()

Specified by:

$jsii$toJson in interface software.amazon.jsii.JsiiSerializable

equals

public final boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public final int hashCode()

Overrides:

hashCode in class Object