2.233.0

class CfnProtectionLogsMixin

LanguageType name
.NETAmazon.CDK.Mixins.Preview.AWS.Shield.Mixins.CfnProtectionLogsMixin
Gogithub.com/aws/aws-cdk-go/awscdkmixinspreview/v2/awsshield/mixins#CfnProtectionLogsMixin
Javasoftware.amazon.awscdk.mixins.preview.services.shield.mixins.CfnProtectionLogsMixin
Pythonaws_cdk.mixins_preview.aws_shield.mixins.CfnProtectionLogsMixin
TypeScript @aws-cdk/mixins-preview » aws_shield » mixins » CfnProtectionLogsMixin

Implements IMixin

Extends Mixin

Enables AWS Shield Advanced for a specific AWS resource.

The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.

Configure a single AWS::Shield::Protection

Use this protection to protect a single resource at a time.

To configure this Shield Advanced protection through CloudFormation , you must be subscribed to Shield Advanced . You can subscribe through the Shield Advanced console and through the APIs. For more information, see Subscribe to AWS Shield Advanced .

See example templates for Shield Advanced in CloudFormation at aws-samples/aws-shield-advanced-examples .

Configure Shield Advanced using AWS CloudFormation and AWS Firewall Manager

You might be able to use Firewall Manager with AWS CloudFormation to configure Shield Advanced across multiple accounts and protected resources. To do this, your accounts must be part of an organization in AWS Organizations . You can use Firewall Manager to configure Shield Advanced protections for any resource types except for Amazon Route 53 or AWS Global Accelerator .

For an example of this, see the one-click configuration guidance published by the AWS technical community at One-click deployment of Shield Advanced .

Configure multiple protections through the Shield Advanced console

You can add protection to multiple resources at once through the Shield Advanced console . For more information see Getting Started with AWS Shield Advanced and Managing resource protections in AWS Shield Advanced .

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-protection.html

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_logs as logs } from '@aws-cdk/mixins-preview';
import { mixins as shield_mixins } from '@aws-cdk/mixins-preview/aws-shield';

declare const logsDelivery: logs.ILogsDelivery;
const cfnProtectionLogsMixin = new shield_mixins.CfnProtectionLogsMixin('logType', logsDelivery);

Initializer

new CfnProtectionLogsMixin(logType: string, logDelivery: ILogsDelivery)

Parameters

  • logType string — Type of logs that are getting vended.
  • logDelivery ILogsDelivery — Object in charge of setting up the delivery source, delivery destination, and delivery connection.

Create a mixin to enable vended logs for AWS::Shield::Protection.

Properties

NameTypeDescription
logDeliveryILogsDelivery
logTypestring
static FLOW_LOGSCfnProtectionFlowLogs

logDelivery

Type: ILogsDelivery

logType

Type: string

static FLOW_LOGS

Type: CfnProtectionFlowLogs

Methods

NameDescription
applyTo(resource)Apply vended logs configuration to the construct.
supports(construct)Check if this mixin supports the given construct (has vendedLogs property).

applyTo(resource)

public applyTo(resource: IConstruct): IConstruct

Parameters

Returns

Apply vended logs configuration to the construct.

supports(construct)

public supports(construct: IConstruct): boolean

Parameters

Returns

  • boolean

Check if this mixin supports the given construct (has vendedLogs property).

← PreviousNext →