Package software.amazon.awscdk.cfnpropertymixins.services.fms

Interface CfnPolicyPropsMixin.NetworkAclEntrySetProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnPolicyPropsMixin.NetworkAclEntrySetProperty.Jsii$Proxy

Enclosing class:

CfnPolicyPropsMixin

@Stability(Stable)
public static interface CfnPolicyPropsMixin.NetworkAclEntrySetProperty
extends software.amazon.jsii.JsiiSerializable

The configuration of the first and last rules for the network ACL policy, and the remediation settings for each.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.cfnpropertymixins.services.fms.*;
 NetworkAclEntrySetProperty networkAclEntrySetProperty = NetworkAclEntrySetProperty.builder()
         .firstEntries(List.of(NetworkAclEntryProperty.builder()
                 .cidrBlock("cidrBlock")
                 .egress(false)
                 .icmpTypeCode(IcmpTypeCodeProperty.builder()
                         .code(123)
                         .type(123)
                         .build())
                 .ipv6CidrBlock("ipv6CidrBlock")
                 .portRange(PortRangeProperty.builder()
                         .from(123)
                         .to(123)
                         .build())
                 .protocol("protocol")
                 .ruleAction("ruleAction")
                 .build()))
         .forceRemediateForFirstEntries(false)
         .forceRemediateForLastEntries(false)
         .lastEntries(List.of(NetworkAclEntryProperty.builder()
                 .cidrBlock("cidrBlock")
                 .egress(false)
                 .icmpTypeCode(IcmpTypeCodeProperty.builder()
                         .code(123)
                         .type(123)
                         .build())
                 .ipv6CidrBlock("ipv6CidrBlock")
                 .portRange(PortRangeProperty.builder()
                         .from(123)
                         .to(123)
                         .build())
                 .protocol("protocol")
                 .ruleAction("ruleAction")
                 .build()))
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentryset.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnPolicyPropsMixin.NetworkAclEntrySetProperty.Builder	A builder for CfnPolicyPropsMixin.NetworkAclEntrySetProperty
static final class	CfnPolicyPropsMixin.NetworkAclEntrySetProperty.Jsii$Proxy	An implementation for CfnPolicyPropsMixin.NetworkAclEntrySetProperty

Method Summary

Modifier and Type	Method	Description
static CfnPolicyPropsMixin.NetworkAclEntrySetProperty.Builder	builder()
default Object	getFirstEntries()	The rules that you want to run first in the Firewall Manager managed network ACLs.
default Object	getForceRemediateForFirstEntries()	Applies only when remediation is enabled for the policy as a whole.
default Object	getForceRemediateForLastEntries()	Applies only when remediation is enabled for the policy as a whole.
default Object	getLastEntries()	The rules that you want to run last in the Firewall Manager managed network ACLs.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getFirstEntries

@Stability(Stable)
@Nullable
default Object getFirstEntries()

The rules that you want to run first in the Firewall Manager managed network ACLs.

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.

Returns union: either IResolvable or Listinvalid input: '<'either IResolvable or CfnPolicyPropsMixin.NetworkAclEntryProperty>

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentryset.html#cfn-fms-policy-networkaclentryset-firstentries

getForceRemediateForFirstEntries

@Stability(Stable)
@Nullable
default Object getForceRemediateForFirstEntries()

Applies only when remediation is enabled for the policy as a whole.

Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see Remediation for managed network ACLs in the AWS Firewall Manager Developer Guide .

Returns union: either Boolean or IResolvable

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentryset.html#cfn-fms-policy-networkaclentryset-forceremediateforfirstentries

getForceRemediateForLastEntries

@Stability(Stable)
@Nullable
default Object getForceRemediateForLastEntries()

Applies only when remediation is enabled for the policy as a whole.

Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see Remediation for managed network ACLs in the AWS Firewall Manager Developer Guide .

Returns union: either Boolean or IResolvable

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentryset.html#cfn-fms-policy-networkaclentryset-forceremediateforlastentries

getLastEntries

@Stability(Stable)
@Nullable
default Object getLastEntries()

The rules that you want to run last in the Firewall Manager managed network ACLs.

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.

Returns union: either IResolvable or Listinvalid input: '<'either IResolvable or CfnPolicyPropsMixin.NetworkAclEntryProperty>

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentryset.html#cfn-fms-policy-networkaclentryset-lastentries

builder

@Stability(Stable)
static CfnPolicyPropsMixin.NetworkAclEntrySetProperty.Builder builder()

Returns:

a CfnPolicyPropsMixin.NetworkAclEntrySetProperty.Builder of CfnPolicyPropsMixin.NetworkAclEntrySetProperty