Class NfwFirewallPolicyPolicyConfig

NetworkConfig / CentralNetworkServicesConfig / NfwConfig / NfwFirewallPolicyConfig / NfwFirewallPolicyPolicyConfig

Network Firewall policy policy configuration. Used to define the configuration of a Network Firewall policy.

See

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-firewallpolicy.html

@example:

statelessDefaultActions: ['aws:forward_to_sfe']
statelessFragmentDefaultActions: ['aws:forward_to_sfe']
statefulRuleGroups:
  - name: accelerator-stateful-group
statelessRuleGroups:
  - name: accelerator-stateless-group
    priority: 100

Hierarchy

  • NfwFirewallPolicyPolicyConfig

Implements

Constructors

constructor

Properties

statefulDefaultActions statefulEngineOptions statefulRuleGroups statelessCustomActions statelessDefaultActions statelessFragmentDefaultActions statelessRuleGroups

Constructors

constructor

Properties

Readonly statefulDefaultActions

statefulDefaultActions: undefined | ("aws:drop_strict" | "aws:drop_established" | "aws:alert_strict" | "aws:alert_established")[] = undefined

An array of default actions to take on packets evaluated by the stateful engine.

Readonly statefulEngineOptions

statefulEngineOptions: undefined | "STRICT_ORDER" | "DEFAULT_ACTION_ORDER" = undefined

Define how the stateful engine will evaluate packets.

See

nfwStatefulRuleOptionsType

Readonly statefulRuleGroups

statefulRuleGroups: undefined | NfwStatefulRuleGroupReferenceConfig[] = undefined

An array of Network Firewall stateful rule group reference configurations.

See

NfwStatefulRuleGroupReferenceConfig

Readonly statelessCustomActions

statelessCustomActions: undefined | NfwRuleSourceCustomActionConfig[] = undefined

An array of Network Firewall custom action configurations.

See

NfwRuleSourceCustomActionConfig

Readonly statelessDefaultActions

statelessDefaultActions: string[] = []

An array of default actions to take on packets evaluated by the stateless engine.

Readonly statelessFragmentDefaultActions

statelessFragmentDefaultActions: string[] = []

An array of default actions to take on fragmented packets.

Readonly statelessRuleGroups

statelessRuleGroups: undefined | NfwStatelessRuleGroupReferenceConfig[] = undefined

An array of Network Firewall stateless rule group reference configurations.

See

NfwStatelessRuleGroupReferenceConfig

Settings

Member Visibility

Theme

Generated using TypeDoc