Create an attachment policy in an AWS Cloud WAN core network policy version

To create an attachment policy

1. Access the Network Manager console at https://console.aws.amazon.com/networkmanager/home/.

2. Under Connectivity choose Cloud WAN.

3. On the Global networks page, choose the global network ID that for the core network you want to create a policy version for, and then choose Core network.

4. In the navigation pane, choose Policy versions.

5. Choose Create policy version.

6. Choose Attachment policies.

7. Choose Create.

8. For the Rule number, enter the rule number to apply to this attachment. Rule numbers determine the order in which rules are run.

9. Enter an optional Description to identify the attachment policy.

10. In the Action section, choose how you want to associate the attachment to the segment. Choose one of the following:

    • Segment name — associates the attachment by the segment name. After choosing this option, the segment to attach to from the Attach to segment dropdown list.

    • Attachment tag value — associates the attachment by the tag's value in a key-value pair. Enter the tag value in the Attachment tag value field.

    • Network function group — creates an attachment policy rule for service insertion. Choose a network functions group for the service insertion policy. This option requires that you use the and Condition logic and the

11. Choose one of the following:

    • Inherit segments acceptance value if the attachment inherits the acceptance setting from a segment when a segment was created. This can't be changed.

    • Requires attachment acceptance if you require approval for attachments to be mapped to this segment.

    • If no acceptance option is chosen, attachments are automatically mapped to the segment.

    Note

    If require-attachment-acceptance is false for a segment, it's still possible for attachments to be added to or removed from a segment automatically when their tags change. If this behavior is not desired, set require-attachment-acceptance to true.

12. (Optional) For Condition logic, further refine how the attachment is associated with the segment.

    Important

    Condition logic is required using AND for a network functions group attachment policy rule. The AND condition must use a Tag name or Tag value associated with the attachment.

    • Choose OR — if you want to associate the attachment with the segment by either the Segment name/Attachment tag value, or by the chosen conditions.

    • Choose AND — if you want to associate the attachment with the segment by either the Segment name/Attachment tag value and by the chosen conditions.

    If no acceptance option is chosen, attachments are automatically mapped to the segment.

13. In Conditions, set the condition logic by doing the following:

    1. From the Type dropdown list, choose one of the following condition types:

       • Resource Id — Set an OR or AND condition that uses a Resource ID.

       • Attachment type — Set an OR or AND condition that matches a specific attachment type.

       • Account — Set an OR or AND condition that matches an account.

       • Tag name — Set an OR or AND condition that matches a specific tag name.

       • Tag value — Set an OR or AND condition that matches a specific tag value.

       Important

       Tag name and Tag value are the only supported and available Conditions for a Network function group attachment policy.

    2. From the Operator dropdown list, choose one of the following operators. The operator determines the relationship of the Type.

       Note

       Operators are not supported when for a network function group attachment policy when the Type is Tag name. The full tag name must be used.

       • Equals — Filters results that match the passed Condition value.

       • Not equals — Filters results that do not match the passed Condition value. This option is not used for Attachment type.

       • Begins with — Filters results that start with the passed Condition value. This option is not used for Attachment type.

       • Contains — Filters results that match a substring within a string. This option is not used for Attachment type.

       • Any — Filters results that match any field. This option is not used for Attachment type.

    3. In the Condition values field, enter the value that corresponds to the Type and Operator. This option is not used for Attachment type. If you're creating a network function group attachment policy, the full tag name or value are required. Partial C

    4. Choose Add to include additional conditions or choose Remove to delete any conditions.

14. Choose Create attachment policy.

15. Choose Create policy.