Package software.amazon.awscdk.cfnpropertymixins.services.fms

Class CfnPolicyPropsMixin

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.Mixin

software.amazon.awscdk.cfnpropertymixins.services.fms.CfnPolicyPropsMixin

All Implemented Interfaces:

software.amazon.jsii.JsiiSerializable, software.constructs.IMixin

@Generated(value="jsii-pacmak/1.127.0 (build 2117ad5)",
           date="2026-03-11T13:19:59.459Z")
@Stability(Stable)
public class CfnPolicyPropsMixin
extends Mixin
implements software.constructs.IMixin

An AWS Firewall Manager policy.

A Firewall Manager policy is specific to the individual policy type. If you want to enforce multiple policy types across accounts, you can create multiple policies. You can create more than one policy for each type.

If you add a new account to an organization that you created with AWS Organizations , Firewall Manager automatically applies the policy to the resources in that account that are within scope of the policy.

Policies require some setup to use. For more information, see the sections on prerequisites and getting started under Firewall Manager prerequisites .

Firewall Manager provides the following types of policies:

• AWS WAF policy - This policy applies AWS WAF web ACL protections to specified accounts and resources.
• Shield Advanced policy - This policy applies Shield Advanced protection to specified accounts and resources.
• Security Groups policy - This type of policy gives you control over security groups that are in use throughout your organization in AWS Organizations and lets you enforce a baseline set of rules across your organization.
• Network ACL policy - This type of policy gives you control over the network ACLs that are in use throughout your organization in AWS Organizations and lets you enforce a baseline set of first and last network ACL rules across your organization.
• Network Firewall policy - This policy applies Network Firewall protection to your organization's VPCs.
• DNS Firewall policy - This policy applies Amazon Route 53 Resolver DNS Firewall protections to your organization's VPCs.
• Third-party firewall policy - This policy applies third-party firewall protections. Third-party firewalls are available by subscription through the AWS Marketplace console at AWS Marketplace .
• Palo Alto Networks Cloud NGFW policy - This policy applies Palo Alto Networks Cloud Next Generation Firewall (NGFW) protections and Palo Alto Networks Cloud NGFW rulestacks to your organization's VPCs.
• Fortigate CNF policy - This policy applies Fortigate Cloud Native Firewall (CNF) protections. Fortigate CNF is a cloud-centered solution that blocks Zero-Day threats and secures cloud infrastructures with industry-leading advanced threat prevention, smart web application firewalls (WAF), and API protection.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.cfnpropertymixins.services.fms.*;
 import software.amazon.awscdk.*;
 IMergeStrategy mergeStrategy;
 CfnPolicyPropsMixin cfnPolicyPropsMixin = CfnPolicyPropsMixin.Builder.create(CfnPolicyMixinProps.builder()
         .deleteAllPolicyResources(false)
         .excludeMap(Map.of(
                 "account", List.of("account"),
                 "orgunit", List.of("orgunit")))
         .excludeResourceTags(false)
         .includeMap(Map.of(
                 "account", List.of("account"),
                 "orgunit", List.of("orgunit")))
         .policyDescription("policyDescription")
         .policyName("policyName")
         .remediationEnabled(false)
         .resourcesCleanUp(false)
         .resourceSetIds(List.of("resourceSetIds"))
         .resourceTagLogicalOperator("resourceTagLogicalOperator")
         .resourceTags(List.of(ResourceTagProperty.builder()
                 .key("key")
                 .value("value")
                 .build()))
         .resourceType("resourceType")
         .resourceTypeList(List.of("resourceTypeList"))
         .securityServicePolicyData(SecurityServicePolicyDataProperty.builder()
                 .managedServiceData("managedServiceData")
                 .policyOption(PolicyOptionProperty.builder()
                         .networkAclCommonPolicy(NetworkAclCommonPolicyProperty.builder()
                                 .networkAclEntrySet(NetworkAclEntrySetProperty.builder()
                                         .firstEntries(List.of(NetworkAclEntryProperty.builder()
                                                 .cidrBlock("cidrBlock")
                                                 .egress(false)
                                                 .icmpTypeCode(IcmpTypeCodeProperty.builder()
                                                         .code(123)
                                                         .type(123)
                                                         .build())
                                                 .ipv6CidrBlock("ipv6CidrBlock")
                                                 .portRange(PortRangeProperty.builder()
                                                         .from(123)
                                                         .to(123)
                                                         .build())
                                                 .protocol("protocol")
                                                 .ruleAction("ruleAction")
                                                 .build()))
                                         .forceRemediateForFirstEntries(false)
                                         .forceRemediateForLastEntries(false)
                                         .lastEntries(List.of(NetworkAclEntryProperty.builder()
                                                 .cidrBlock("cidrBlock")
                                                 .egress(false)
                                                 .icmpTypeCode(IcmpTypeCodeProperty.builder()
                                                         .code(123)
                                                         .type(123)
                                                         .build())
                                                 .ipv6CidrBlock("ipv6CidrBlock")
                                                 .portRange(PortRangeProperty.builder()
                                                         .from(123)
                                                         .to(123)
                                                         .build())
                                                 .protocol("protocol")
                                                 .ruleAction("ruleAction")
                                                 .build()))
                                         .build())
                                 .build())
                         .networkFirewallPolicy(NetworkFirewallPolicyProperty.builder()
                                 .firewallDeploymentModel("firewallDeploymentModel")
                                 .build())
                         .thirdPartyFirewallPolicy(ThirdPartyFirewallPolicyProperty.builder()
                                 .firewallDeploymentModel("firewallDeploymentModel")
                                 .build())
                         .build())
                 .type("type")
                 .build())
         .tags(List.of(PolicyTagProperty.builder()
                 .key("key")
                 .value("value")
                 .build()))
         .build())
 .strategy(mergeStrategy)
 .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	CfnPolicyPropsMixin.Builder	A fluent builder for CfnPolicyPropsMixin.
static interface	CfnPolicyPropsMixin.IcmpTypeCodeProperty	ICMP protocol: The ICMP type and code.
static interface	CfnPolicyPropsMixin.IEMapProperty	Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to include in or exclude from the policy.
static interface	CfnPolicyPropsMixin.NetworkAclCommonPolicyProperty	Defines a Firewall Manager network ACL policy.
static interface	CfnPolicyPropsMixin.NetworkAclEntryProperty	Describes a rule in a network ACL.
static interface	CfnPolicyPropsMixin.NetworkAclEntrySetProperty	The configuration of the first and last rules for the network ACL policy, and the remediation settings for each.
static interface	CfnPolicyPropsMixin.NetworkFirewallPolicyProperty	Configures the firewall policy deployment model of AWS Network Firewall .
static interface	CfnPolicyPropsMixin.PolicyOptionProperty	Contains the settings to configure a network ACL policy, a AWS Network Firewall firewall policy deployment model, or a third-party firewall policy.
static interface	CfnPolicyPropsMixin.PolicyTagProperty	A collection of key:value pairs associated with an AWS resource.
static interface	CfnPolicyPropsMixin.PortRangeProperty	TCP or UDP protocols: The range of ports the rule applies to.
static interface	CfnPolicyPropsMixin.ResourceTagProperty	The resource tags that AWS Firewall Manager uses to determine if a particular resource should be included or excluded from the AWS Firewall Manager policy.
static interface	CfnPolicyPropsMixin.SecurityServicePolicyDataProperty	Details about the security service that is being used to protect the resources.
static interface	CfnPolicyPropsMixin.ThirdPartyFirewallPolicyProperty	Configures the deployment model for the third-party firewall.

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.constructs.IMixin

software.constructs.IMixin.Jsii$Default, software.constructs.IMixin.Jsii$Proxy

Field Summary

Fields

Modifier and Type	Field	Description
protected static final List<String>	CFN_PROPERTY_KEYS

Constructor Summary

Constructors

Modifier	Constructor	Description
	CfnPolicyPropsMixin(CfnPolicyMixinProps props)	Create a mixin to apply properties to AWS::FMS::Policy.
	CfnPolicyPropsMixin(CfnPolicyMixinProps props, CfnPropertyMixinOptions options)	Create a mixin to apply properties to AWS::FMS::Policy.
protected	CfnPolicyPropsMixin(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	CfnPolicyPropsMixin(software.amazon.jsii.JsiiObjectRef objRef)

Method Summary

Modifier and Type	Method	Description
void	applyTo(software.constructs.IConstruct construct)	Apply the mixin properties to the construct.
protected CfnPolicyMixinProps	getProps()
protected IMergeStrategy	getStrategy()
Boolean	supports(software.constructs.IConstruct construct)	Check if this mixin supports the given construct.

Methods inherited from class software.amazon.awscdk.Mixin

isMixin

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Field Details

CFN_PROPERTY_KEYS

@Stability(Stable)
protected static final List<String> CFN_PROPERTY_KEYS

Constructor Details

CfnPolicyPropsMixin

protected CfnPolicyPropsMixin(software.amazon.jsii.JsiiObjectRef objRef)

CfnPolicyPropsMixin

protected CfnPolicyPropsMixin(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

CfnPolicyPropsMixin

@Stability(Stable)
public CfnPolicyPropsMixin(@NotNull
 CfnPolicyMixinProps props,
 @Nullable
 CfnPropertyMixinOptions options)

Create a mixin to apply properties to AWS::FMS::Policy.

Parameters:

props - L1 properties to apply. This parameter is required.

options - Mixin options.

CfnPolicyPropsMixin

@Stability(Stable)
public CfnPolicyPropsMixin(@NotNull
 CfnPolicyMixinProps props)

Create a mixin to apply properties to AWS::FMS::Policy.

Parameters:

props - L1 properties to apply. This parameter is required.

Method Details

applyTo

@Stability(Stable)
public void applyTo(@NotNull
 software.constructs.IConstruct construct)

Apply the mixin properties to the construct.

Specified by:

applyTo in interface software.constructs.IMixin

Specified by:

applyTo in class Mixin

Parameters:

construct - This parameter is required.

supports

@Stability(Stable)
@NotNull
public Boolean supports(@NotNull
 software.constructs.IConstruct construct)

Check if this mixin supports the given construct.

Specified by:

supports in interface software.constructs.IMixin

Overrides:

supports in class Mixin

Parameters:

construct - This parameter is required.

getProps

@Stability(Stable)
@NotNull
protected CfnPolicyMixinProps getProps()

getStrategy

@Stability(Stable)
@NotNull
protected IMergeStrategy getStrategy()