# PolicyVariablesProperty

Contains variables that you can use to override default Suricata settings in your firewall policy.

- Source: Generated code
- Type last changed: v2.93.0 · 23 Aug 2023

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_networkfirewall as networkfirewall } from 'aws-cdk-lib';
const policyVariablesProperty: networkfirewall.CfnFirewallPolicy.PolicyVariablesProperty = {
  ruleVariables: {
    ruleVariablesKey: {
      definition: ['definition'],
    },
  },
};
```

## Properties

- `ruleVariables`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | { [key: string]: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnFirewallPolicy.IPSetProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_networkfirewall.CfnFirewallPolicy.IPSetProperty.html) } — The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata `HOME_NET` variable.

  If your firewall uses an inspection VPC, you might want to override the `HOME_NET` variable with the CIDRs of your home networks. If you don't override `HOME_NET` with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.