aws-cdk-lib.aws_networkfirewall.CfnFirewallPolicy.PolicyVariablesProperty

PolicyVariablesProperty Struct

Contains variables that you can use to override default Suricata settings in your firewall policy.

Source

Generated code

Type last changed

v2.93.0 · 23 Aug 2023

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_networkfirewall as networkfirewall } from 'aws-cdk-lib';
const policyVariablesProperty: networkfirewall.CfnFirewallPolicy.PolicyVariablesProperty = {
  ruleVariables: {
    ruleVariablesKey: {
      definition: ['definition'],
    },
  },
};

Properties

ruleVariablesIResolvable | { [key: string]: IResolvable | CfnFirewallPolicy.IPSetProperty }rule_variablestyping.Union[IResolvable, typing.Mapping[str, typing.Union[IResolvable, IPSetProperty]]]ruleVariablesIResolvableRuleVariablesIResolvableRuleVariablesinterface{}#

The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata `HOME_NET` variable.

notes

If your firewall uses an inspection VPC, you might want to override the HOME_NET variable with the CIDRs of your home networks. If you don't override HOME_NET with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.