Class CfnTLSInspectionConfigurationPropsMixin
- All Implemented Interfaces:
software.amazon.jsii.JsiiSerializable,software.constructs.IMixin
AWS Network Firewall uses a TLS inspection configuration to decrypt traffic. Network Firewall re-encrypts the traffic before sending it to its destination.
To use a TLS inspection configuration, you add it to a new Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect the traffic traveling through your firewalls. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see Inspecting SSL/TLS traffic with TLS inspection configurations in the AWS Network Firewall Developer Guide .
Example:
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.cfnpropertymixins.services.networkfirewall.*;
import software.amazon.awscdk.*;
IMergeStrategy mergeStrategy;
CfnTLSInspectionConfigurationPropsMixin cfnTLSInspectionConfigurationPropsMixin = CfnTLSInspectionConfigurationPropsMixin.Builder.create(CfnTLSInspectionConfigurationMixinProps.builder()
.description("description")
.tags(List.of(CfnTag.builder()
.key("key")
.value("value")
.build()))
.tlsInspectionConfiguration(TLSInspectionConfigurationProperty.builder()
.serverCertificateConfigurations(List.of(ServerCertificateConfigurationProperty.builder()
.certificateAuthorityArn("certificateAuthorityArn")
.checkCertificateRevocationStatus(CheckCertificateRevocationStatusProperty.builder()
.revokedStatusAction("revokedStatusAction")
.unknownStatusAction("unknownStatusAction")
.build())
.scopes(List.of(ServerCertificateScopeProperty.builder()
.destinationPorts(List.of(PortRangeProperty.builder()
.fromPort(123)
.toPort(123)
.build()))
.destinations(List.of(AddressProperty.builder()
.addressDefinition("addressDefinition")
.build()))
.protocols(List.of(123))
.sourcePorts(List.of(PortRangeProperty.builder()
.fromPort(123)
.toPort(123)
.build()))
.sources(List.of(AddressProperty.builder()
.addressDefinition("addressDefinition")
.build()))
.build()))
.serverCertificates(List.of(ServerCertificateProperty.builder()
.resourceArn("resourceArn")
.build()))
.build()))
.build())
.tlsInspectionConfigurationName("tlsInspectionConfigurationName")
.build())
.strategy(mergeStrategy)
.build();
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic interfaceA single IP address specification.static final classA fluent builder forCfnTLSInspectionConfigurationPropsMixin.static interfaceWhen enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status.static interfaceA single port range specification.static interfaceConfigures the Certificate Manager certificates and scope that Network Firewall uses to decrypt and re-encrypt traffic using a TLSInspectionConfiguration .static interfaceAny Certificate Manager (ACM) Secure Sockets Layer/Transport Layer Security (SSL/TLS) server certificate that's associated with a ServerCertificateConfiguration .static interfaceSettings that define the Secure Sockets Layer/Transport Layer Security (SSL/TLS) traffic that Network Firewall should decrypt for inspection by the stateful rule engine.static interfaceThe object that defines a TLS inspection configuration.Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationModeNested classes/interfaces inherited from interface software.constructs.IMixin
software.constructs.IMixin.Jsii$Default, software.constructs.IMixin.Jsii$Proxy -
Field Summary
Fields -
Constructor Summary
ConstructorsModifierConstructorDescriptionCreate a mixin to apply properties toAWS::NetworkFirewall::TLSInspectionConfiguration.CfnTLSInspectionConfigurationPropsMixin(CfnTLSInspectionConfigurationMixinProps props, CfnPropertyMixinOptions options) Create a mixin to apply properties toAWS::NetworkFirewall::TLSInspectionConfiguration.protectedCfnTLSInspectionConfigurationPropsMixin(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) protectedCfnTLSInspectionConfigurationPropsMixin(software.amazon.jsii.JsiiObjectRef objRef) -
Method Summary
Modifier and TypeMethodDescriptionvoidapplyTo(software.constructs.IConstruct construct) Apply the mixin properties to the construct.protected CfnTLSInspectionConfigurationMixinPropsgetProps()protected IMergeStrategysupports(software.constructs.IConstruct construct) Check if this mixin supports the given construct.Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSetMethods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Field Details
-
CFN_PROPERTY_KEYS
-
-
Constructor Details
-
CfnTLSInspectionConfigurationPropsMixin
protected CfnTLSInspectionConfigurationPropsMixin(software.amazon.jsii.JsiiObjectRef objRef) -
CfnTLSInspectionConfigurationPropsMixin
protected CfnTLSInspectionConfigurationPropsMixin(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) -
CfnTLSInspectionConfigurationPropsMixin
@Stability(Stable) public CfnTLSInspectionConfigurationPropsMixin(@NotNull CfnTLSInspectionConfigurationMixinProps props, @Nullable CfnPropertyMixinOptions options) Create a mixin to apply properties toAWS::NetworkFirewall::TLSInspectionConfiguration.- Parameters:
props- L1 properties to apply. This parameter is required.options- Mixin options.
-
CfnTLSInspectionConfigurationPropsMixin
@Stability(Stable) public CfnTLSInspectionConfigurationPropsMixin(@NotNull CfnTLSInspectionConfigurationMixinProps props) Create a mixin to apply properties toAWS::NetworkFirewall::TLSInspectionConfiguration.- Parameters:
props- L1 properties to apply. This parameter is required.
-
-
Method Details
-
applyTo
@Stability(Stable) public void applyTo(@NotNull software.constructs.IConstruct construct) Apply the mixin properties to the construct. -
supports
@Stability(Stable) @NotNull public Boolean supports(@NotNull software.constructs.IConstruct construct) Check if this mixin supports the given construct. -
getProps
-
getStrategy
-