NetworkConfig / VpcConfig | VpcTemplatesConfig / SecurityGroupConfig / SecurityGroupRuleConfig / SubnetSourceConfig

VPC subnet security group source configuration. Use this configuration to dynamically reference subnet CIDRs in a security group rule.

- account: Network
vpc: Network-Inspection
subnets: []
interface ISubnetSourceConfig {
    account: string;
    ipv6?: boolean;
    subnets: string[];
    vpc: string;
}

Properties

account: string

The friendly name of the account in which the VPC subnet resides.

This is the account property of the VPC as defined in network-config.yaml. If referencing a VPC template, use the logical name property of an account the template targets in its deploymentTargets property.

VpcConfig | VpcTemplatesConfig

ipv6?: boolean

(OPTIONAL) Indicates whether to target the IPv6 CIDR associated with a subnet.

Leave this property undefined or set to false to target a subnet's IPv4 CIDR.

subnets: string[]

An array of the friendly names of subnets to reference.

This is the logical name property of the subnet as defined in network-config.yaml.

Each subnet must exist in the source VPC targeted in the vpc property. A security group rule will be created for each referenced subnet in this array.

SubnetConfig

vpc: string

The friendly name of the VPC in which the subnet resides.

This is the logical name property of the VPC or VPC template as defined in network-config.yaml.

VpcConfig | VpcTemplatesConfig