Options
All
  • Public
  • Public/Protected
  • All
Menu

Class NfwFirewallPolicyPolicyConfig

NetworkConfig / CentralNetworkServicesConfig / NfwConfig / NfwFirewallPolicyConfig / NfwFirewallPolicyPolicyConfig

Network Firewall policy policy configuration. Used to define the configuration of a Network Firewall policy.

see

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-firewallpolicy.html

example:
statelessDefaultActions: ['aws:forward_to_sfe']
statelessFragmentDefaultActions: ['aws:forward_to_sfe']
statefulRuleGroups:
  - name: accelerator-stateful-group
statelessRuleGroups:
  - name: accelerator-stateless-group
    priority: 100

Hierarchy

  • NfwFirewallPolicyPolicyConfig

Implements

Index

Constructors

Properties

Constructors

constructor

Properties

Readonly statefulDefaultActions

statefulDefaultActions: undefined | string[] = undefined

An array of default actions to take on packets evaluated by the stateful engine.

Readonly statefulEngineOptions

statefulEngineOptions: undefined | "DEFAULT_ACTION_ORDER" | "STRICT_ORDER" = undefined

Define how the stateful engine will evaluate packets.

see

NetworkConfigTypes.nfwStatefulRuleOptionsType

Readonly statefulRuleGroups

statefulRuleGroups: undefined | NfwStatefulRuleGroupReferenceConfig[] = undefined

An array of Network Firewall stateful rule group reference configurations.

see

NfwStatefulRuleGroupReferenceConfig

Readonly statelessCustomActions

statelessCustomActions: undefined | NfwRuleSourceCustomActionConfig[] = undefined

An array of Network Firewall custom action configurations.

see

NfwRuleSourceCustomActionConfig

Readonly statelessDefaultActions

statelessDefaultActions: string[] = []

An array of default actions to take on packets evaluated by the stateless engine.

Readonly statelessFragmentDefaultActions

statelessFragmentDefaultActions: string[] = []

An array of default actions to take on fragmented packets.

Readonly statelessRuleGroups

statelessRuleGroups: undefined | NfwStatelessRuleGroupReferenceConfig[] = undefined

An array of Network Firewall stateless rule group reference configurations.

see

NfwStatelessRuleGroupReferenceConfig

Generated using TypeDoc