Package software.amazon.awscdk.cfnpropertymixins.services.networkfirewall

Class CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder

java.lang.Object

software.amazon.awscdk.cfnpropertymixins.services.networkfirewall.CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder

All Implemented Interfaces:

software.amazon.jsii.Builder<CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty>

Enclosing interface:

CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty

@Stability(Stable)
public static final class CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder
extends Object
implements software.amazon.jsii.Builder<CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty>

A builder for CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty

Constructor Summary

Constructors

Constructor	Description
Builder()

Method Summary

Modifier and Type	Method	Description
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty	build()	Builds the configured instance.
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder	deepThreatInspection(Boolean deepThreatInspection)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getDeepThreatInspection()
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder	deepThreatInspection(IResolvable deepThreatInspection)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getDeepThreatInspection()
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder	override(CfnFirewallPolicyPropsMixin.StatefulRuleGroupOverrideProperty override)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getOverride()
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder	override(IResolvable override)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getOverride()
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder	priority(Number priority)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getPriority()
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder	resourceArn(String resourceArn)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getResourceArn()
CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder	resourceArn(IRuleGroupRef resourceArn)	Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getResourceArn()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Builder

public Builder()

Method Details

deepThreatInspection

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder deepThreatInspection(Boolean deepThreatInspection)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getDeepThreatInspection()

Parameters:

deepThreatInspection - AWS Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability. When this capability is released, AWS will analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers. AWS will use these threat indicators to improve the active threat defense managed rule groups and protect the security of AWS customers and services.

Customers can opt-out of deep threat inspection at any time through the AWS Network Firewall console or API. When customers opt out, AWS Network Firewall will not use the network traffic processed by those customers' active threat defense rule groups for rule group improvement.

Returns:

this

deepThreatInspection

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder deepThreatInspection(IResolvable deepThreatInspection)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getDeepThreatInspection()

Parameters:

deepThreatInspection - AWS Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability. When this capability is released, AWS will analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers. AWS will use these threat indicators to improve the active threat defense managed rule groups and protect the security of AWS customers and services.

Customers can opt-out of deep threat inspection at any time through the AWS Network Firewall console or API. When customers opt out, AWS Network Firewall will not use the network traffic processed by those customers' active threat defense rule groups for rule group improvement.

Returns:

this

override

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder override(IResolvable override)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getOverride()

Parameters:

override - The action that allows the policy owner to override the behavior of the rule group within a policy.

Returns:

this

override

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder override(CfnFirewallPolicyPropsMixin.StatefulRuleGroupOverrideProperty override)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getOverride()

Parameters:

override - The action that allows the policy owner to override the behavior of the rule group within a policy.

Returns:

this

priority

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder priority(Number priority)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getPriority()

Parameters:

priority - An integer setting that indicates the order in which to run the stateful rule groups in a single firewall policy. This setting only applies to firewall policies that specify the STRICT_ORDER rule order in the stateful engine options settings.

Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.

You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on.

Returns:

this

resourceArn

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder resourceArn(String resourceArn)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getResourceArn()

Parameters:

resourceArn - The Amazon Resource Name (ARN) of the stateful rule group.

Returns:

this

resourceArn

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.Builder resourceArn(IRuleGroupRef resourceArn)

Sets the value of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty.getResourceArn()

Parameters:

resourceArn - The Amazon Resource Name (ARN) of the stateful rule group.

Returns:

this

build

@Stability(Stable)
public CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty build()

Builds the configured instance.

Specified by:

build in interface software.amazon.jsii.Builder<CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty>

Returns:

a new instance of CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty

Throws:

NullPointerException - if any required attribute was not provided