Package software.amazon.awscdk.cfnpropertymixins.services.networkfirewall

Class CfnFirewallPolicyPropsMixin

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.Mixin

software.amazon.awscdk.cfnpropertymixins.services.networkfirewall.CfnFirewallPolicyPropsMixin

All Implemented Interfaces:

software.amazon.jsii.JsiiSerializable, software.constructs.IMixin

@Generated(value="jsii-pacmak/1.127.0 (build 2117ad5)",
           date="2026-03-11T13:20:01.787Z")
@Stability(Stable)
public class CfnFirewallPolicyPropsMixin
extends Mixin
implements software.constructs.IMixin

Use the firewall policy to define the stateless and stateful network traffic filtering behavior for your firewall.

You can use one firewall policy for multiple firewalls.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.cfnpropertymixins.services.networkfirewall.*;
 import software.amazon.awscdk.*;
 IMergeStrategy mergeStrategy;
 CfnFirewallPolicyPropsMixin cfnFirewallPolicyPropsMixin = CfnFirewallPolicyPropsMixin.Builder.create(CfnFirewallPolicyMixinProps.builder()
         .description("description")
         .firewallPolicy(FirewallPolicyProperty.builder()
                 .enableTlsSessionHolding(false)
                 .policyVariables(PolicyVariablesProperty.builder()
                         .ruleVariables(Map.of(
                                 "ruleVariablesKey", Map.of(
                                         "definition", List.of("definition"))))
                         .build())
                 .statefulDefaultActions(List.of("statefulDefaultActions"))
                 .statefulEngineOptions(StatefulEngineOptionsProperty.builder()
                         .flowTimeouts(FlowTimeoutsProperty.builder()
                                 .tcpIdleTimeoutSeconds(123)
                                 .build())
                         .ruleOrder("ruleOrder")
                         .streamExceptionPolicy("streamExceptionPolicy")
                         .build())
                 .statefulRuleGroupReferences(List.of(StatefulRuleGroupReferenceProperty.builder()
                         .deepThreatInspection(false)
                         .override(StatefulRuleGroupOverrideProperty.builder()
                                 .action("action")
                                 .build())
                         .priority(123)
                         .resourceArn("resourceArn")
                         .build()))
                 .statelessCustomActions(List.of(CustomActionProperty.builder()
                         .actionDefinition(ActionDefinitionProperty.builder()
                                 .publishMetricAction(PublishMetricActionProperty.builder()
                                         .dimensions(List.of(DimensionProperty.builder()
                                                 .value("value")
                                                 .build()))
                                         .build())
                                 .build())
                         .actionName("actionName")
                         .build()))
                 .statelessDefaultActions(List.of("statelessDefaultActions"))
                 .statelessFragmentDefaultActions(List.of("statelessFragmentDefaultActions"))
                 .statelessRuleGroupReferences(List.of(StatelessRuleGroupReferenceProperty.builder()
                         .priority(123)
                         .resourceArn("resourceArn")
                         .build()))
                 .tlsInspectionConfigurationArn("tlsInspectionConfigurationArn")
                 .build())
         .firewallPolicyName("firewallPolicyName")
         .tags(List.of(CfnTag.builder()
                 .key("key")
                 .value("value")
                 .build()))
         .build())
 .strategy(mergeStrategy)
 .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewallpolicy.html

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static interface	CfnFirewallPolicyPropsMixin.ActionDefinitionProperty	A custom action to use in stateless rule actions settings.
static final class	CfnFirewallPolicyPropsMixin.Builder	A fluent builder for CfnFirewallPolicyPropsMixin.
static interface	CfnFirewallPolicyPropsMixin.CustomActionProperty	An optional, non-standard action to use for stateless packet handling.
static interface	CfnFirewallPolicyPropsMixin.DimensionProperty	The value to use in an Amazon CloudWatch custom metric dimension.
static interface	CfnFirewallPolicyPropsMixin.FirewallPolicyProperty	The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.
static interface	CfnFirewallPolicyPropsMixin.FlowTimeoutsProperty	Describes the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle and Network Firewall removes the flow entry from its flow table.
static interface	CfnFirewallPolicyPropsMixin.IPSetProperty	A list of IP addresses and address ranges, in CIDR notation.
static interface	CfnFirewallPolicyPropsMixin.PolicyVariablesProperty	Contains variables that you can use to override default Suricata settings in your firewall policy.
static interface	CfnFirewallPolicyPropsMixin.PublishMetricActionProperty	Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet.
static interface	CfnFirewallPolicyPropsMixin.StatefulEngineOptionsProperty	Configuration settings for the handling of the stateful rule groups in a firewall policy.
static interface	CfnFirewallPolicyPropsMixin.StatefulRuleGroupOverrideProperty	The setting that allows the policy owner to change the behavior of the rule group within a policy.
static interface	CfnFirewallPolicyPropsMixin.StatefulRuleGroupReferenceProperty	Identifier for a single stateful rule group, used in a firewall policy to refer to a rule group.
static interface	CfnFirewallPolicyPropsMixin.StatelessRuleGroupReferenceProperty	Identifier for a single stateless rule group, used in a firewall policy to refer to the rule group.

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.constructs.IMixin

software.constructs.IMixin.Jsii$Default, software.constructs.IMixin.Jsii$Proxy

Field Summary

Fields

Modifier and Type	Field	Description
protected static final List<String>	CFN_PROPERTY_KEYS

Constructor Summary

Constructors

Modifier	Constructor	Description
	CfnFirewallPolicyPropsMixin(CfnFirewallPolicyMixinProps props)	Create a mixin to apply properties to AWS::NetworkFirewall::FirewallPolicy.
	CfnFirewallPolicyPropsMixin(CfnFirewallPolicyMixinProps props, CfnPropertyMixinOptions options)	Create a mixin to apply properties to AWS::NetworkFirewall::FirewallPolicy.
protected	CfnFirewallPolicyPropsMixin(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	CfnFirewallPolicyPropsMixin(software.amazon.jsii.JsiiObjectRef objRef)

Method Summary

Modifier and Type	Method	Description
void	applyTo(software.constructs.IConstruct construct)	Apply the mixin properties to the construct.
protected CfnFirewallPolicyMixinProps	getProps()
protected IMergeStrategy	getStrategy()
Boolean	supports(software.constructs.IConstruct construct)	Check if this mixin supports the given construct.

Methods inherited from class software.amazon.awscdk.Mixin

isMixin

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Field Details

CFN_PROPERTY_KEYS

@Stability(Stable)
protected static final List<String> CFN_PROPERTY_KEYS

Constructor Details

CfnFirewallPolicyPropsMixin

protected CfnFirewallPolicyPropsMixin(software.amazon.jsii.JsiiObjectRef objRef)

CfnFirewallPolicyPropsMixin

protected CfnFirewallPolicyPropsMixin(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

CfnFirewallPolicyPropsMixin

@Stability(Stable)
public CfnFirewallPolicyPropsMixin(@NotNull
 CfnFirewallPolicyMixinProps props,
 @Nullable
 CfnPropertyMixinOptions options)

Create a mixin to apply properties to AWS::NetworkFirewall::FirewallPolicy.

Parameters:

props - L1 properties to apply. This parameter is required.

options - Mixin options.

CfnFirewallPolicyPropsMixin

@Stability(Stable)
public CfnFirewallPolicyPropsMixin(@NotNull
 CfnFirewallPolicyMixinProps props)

Create a mixin to apply properties to AWS::NetworkFirewall::FirewallPolicy.

Parameters:

props - L1 properties to apply. This parameter is required.

Method Details

applyTo

@Stability(Stable)
public void applyTo(@NotNull
 software.constructs.IConstruct construct)

Apply the mixin properties to the construct.

Specified by:

applyTo in interface software.constructs.IMixin

Specified by:

applyTo in class Mixin

Parameters:

construct - This parameter is required.

supports

@Stability(Stable)
@NotNull
public Boolean supports(@NotNull
 software.constructs.IConstruct construct)

Check if this mixin supports the given construct.

Specified by:

supports in interface software.constructs.IMixin

Overrides:

supports in class Mixin

Parameters:

construct - This parameter is required.

getProps

@Stability(Stable)
@NotNull
protected CfnFirewallPolicyMixinProps getProps()

getStrategy

@Stability(Stable)
@NotNull
protected IMergeStrategy getStrategy()