Package software.amazon.awscdk.services.fms

Interface CfnPolicy.NetworkAclEntryProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnPolicy.NetworkAclEntryProperty.Jsii$Proxy

Enclosing class:

CfnPolicy

@Stability(Stable)
public static interface CfnPolicy.NetworkAclEntryProperty
extends software.amazon.jsii.JsiiSerializable

Describes a rule in a network ACL.

Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, AWS processes the entries in the network ACL according to the rule numbers, in ascending order.

When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.fms.*;
 NetworkAclEntryProperty networkAclEntryProperty = NetworkAclEntryProperty.builder()
         .egress(false)
         .protocol("protocol")
         .ruleAction("ruleAction")
         // the properties below are optional
         .cidrBlock("cidrBlock")
         .icmpTypeCode(IcmpTypeCodeProperty.builder()
                 .code(123)
                 .type(123)
                 .build())
         .ipv6CidrBlock("ipv6CidrBlock")
         .portRange(PortRangeProperty.builder()
                 .from(123)
                 .to(123)
                 .build())
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnPolicy.NetworkAclEntryProperty.Builder	A builder for CfnPolicy.NetworkAclEntryProperty
static final class	CfnPolicy.NetworkAclEntryProperty.Jsii$Proxy	An implementation for CfnPolicy.NetworkAclEntryProperty

Method Summary

Modifier and Type	Method	Description
static CfnPolicy.NetworkAclEntryProperty.Builder	builder()
default String	getCidrBlock()	The IPv4 network range to allow or deny, in CIDR notation.
Object	getEgress()	Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet).
default Object	getIcmpTypeCode()	ICMP protocol: The ICMP type and code.
default String	getIpv6CidrBlock()	The IPv6 network range to allow or deny, in CIDR notation.
default Object	getPortRange()	TCP or UDP protocols: The range of ports the rule applies to.
String	getProtocol()	The protocol number.
String	getRuleAction()	Indicates whether to allow or deny the traffic that matches the rule.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getEgress

@Stability(Stable)
@NotNull
Object getEgress()

Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet).

If it's not an egress rule, then it's an ingress, or inbound, rule.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-egress

getProtocol

@Stability(Stable)
@NotNull
String getProtocol()

The protocol number.

A value of "-1" means all protocols.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-protocol

getRuleAction

@Stability(Stable)
@NotNull
String getRuleAction()

Indicates whether to allow or deny the traffic that matches the rule.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-ruleaction

getCidrBlock

@Stability(Stable)
@Nullable
default String getCidrBlock()

The IPv4 network range to allow or deny, in CIDR notation.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-cidrblock

getIcmpTypeCode

@Stability(Stable)
@Nullable
default Object getIcmpTypeCode()

ICMP protocol: The ICMP type and code.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-icmptypecode

getIpv6CidrBlock

@Stability(Stable)
@Nullable
default String getIpv6CidrBlock()

The IPv6 network range to allow or deny, in CIDR notation.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-ipv6cidrblock

getPortRange

@Stability(Stable)
@Nullable
default Object getPortRange()

TCP or UDP protocols: The range of ports the rule applies to.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-portrange

builder

@Stability(Stable)
static CfnPolicy.NetworkAclEntryProperty.Builder builder()

Returns:

a CfnPolicy.NetworkAclEntryProperty.Builder of CfnPolicy.NetworkAclEntryProperty