Package software.amazon.awscdk.cfnpropertymixins.services.networkfirewall

Class CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder

java.lang.Object

software.amazon.awscdk.cfnpropertymixins.services.networkfirewall.CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder

All Implemented Interfaces:

software.amazon.jsii.Builder<CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty>

Enclosing interface:

CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty

@Stability(Stable)
public static final class CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder
extends Object
implements software.amazon.jsii.Builder<CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty>

A builder for CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty

Constructor Summary

Constructors

Constructor	Description
Builder()

Method Summary

Modifier and Type	Method	Description
CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty	build()	Builds the configured instance.
CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder	flowTimeouts(CfnFirewallPolicyPropsMixin.FlowTimeoutsProperty flowTimeouts)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getFlowTimeouts()
CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder	flowTimeouts(IResolvable flowTimeouts)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getFlowTimeouts()
CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder	ruleOrder(String ruleOrder)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getRuleOrder()
CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder	streamExceptionPolicy(String streamExceptionPolicy)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getStreamExceptionPolicy()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Builder

public Builder()

Method Details

flowTimeouts

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder flowTimeouts(IResolvable flowTimeouts)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getFlowTimeouts()

Parameters:

flowTimeouts - Configures the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle.

Returns:

this

flowTimeouts

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder flowTimeouts(CfnFirewallPolicyPropsMixin.FlowTimeoutsProperty flowTimeouts)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getFlowTimeouts()

Parameters:

flowTimeouts - Configures the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle.

Returns:

this

ruleOrder

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder ruleOrder(String ruleOrder)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getRuleOrder()

Parameters:

ruleOrder - Indicates how to manage the order of stateful rule evaluation for the policy. DEFAULT_ACTION_ORDER is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the AWS Network Firewall Developer Guide .

Returns:

this

streamExceptionPolicy

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.Builder streamExceptionPolicy(String streamExceptionPolicy)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty.getStreamExceptionPolicy()

Parameters:

streamExceptionPolicy - Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.

• DROP - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior.
• CONTINUE - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to drop http traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a flow:stateless rule would still match, as would the aws:drop_strict default action.
• REJECT - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.

Returns:

this

build

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty build()

Builds the configured instance.

Specified by:

build in interface software.amazon.jsii.Builder<CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty>

Returns:

a new instance of CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty

Throws:

NullPointerException - if any required attribute was not provided