Package software.amazon.awscdk.cfnpropertymixins.services.shield

Class CfnDRTAccessPropsMixin.Builder

java.lang.Object

software.amazon.awscdk.cfnpropertymixins.services.shield.CfnDRTAccessPropsMixin.Builder

All Implemented Interfaces:

software.amazon.jsii.Builder<CfnDRTAccessPropsMixin>

Enclosing class:

CfnDRTAccessPropsMixin

@Stability(Stable)
public static final class CfnDRTAccessPropsMixin.Builder
extends Object
implements software.amazon.jsii.Builder<CfnDRTAccessPropsMixin>

A fluent builder for CfnDRTAccessPropsMixin.

Method Summary

Modifier and Type	Method	Description
CfnDRTAccessPropsMixin	build()
static CfnDRTAccessPropsMixin.Builder	create()
static CfnDRTAccessPropsMixin.Builder	create(CfnPropertyMixinOptions options)
CfnDRTAccessPropsMixin.Builder	logBucketList(List<String> logBucketList)	Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources.
CfnDRTAccessPropsMixin.Builder	roleArn(String roleArn)	Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

create

@Stability(Stable)
public static CfnDRTAccessPropsMixin.Builder create(CfnPropertyMixinOptions options)

Parameters:

options - Mixin options.

Returns:

a new instance of CfnDRTAccessPropsMixin.Builder.

create

@Stability(Stable)
public static CfnDRTAccessPropsMixin.Builder create()

Returns:

a new instance of CfnDRTAccessPropsMixin.Builder.

logBucketList

@Stability(Stable)
public CfnDRTAccessPropsMixin.Builder logBucketList(List<String> logBucketList)

Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources.

You can associate up to 10 Amazon S3 buckets with your subscription.

Use this to share information with the SRT that's not available in AWS WAF logs.

To use the services of the SRT, you must be subscribed to the Business Support plan or the Enterprise Support plan .

Parameters:

logBucketList - Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources. This parameter is required.

Returns:

this

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-drtaccess.html#cfn-shield-drtaccess-logbucketlist

roleArn

@Stability(Stable)
public CfnDRTAccessPropsMixin.Builder roleArn(String roleArn)

Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks.

This enables the SRT to inspect your AWS WAF configuration and logs and to create or update AWS WAF rules and web ACLs.

You can associate only one RoleArn with your subscription. If you submit this update for an account that already has an associated role, the new RoleArn will replace the existing RoleArn .

This change requires the following:

• You must be subscribed to the Business Support plan or the Enterprise Support plan .
• The AWSShieldDRTAccessPolicy managed policy must be attached to the role that you specify in the request. You can access this policy in the IAM console at AWSShieldDRTAccessPolicy . For information, see Adding and removing IAM identity permissions .
• The role must trust the service principal drt.shield.amazonaws.com . For information, see IAM JSON policy elements: Principal .

The SRT will have access only to your AWS WAF and Shield resources. By submitting this request, you provide permissions to the SRT to inspect your AWS WAF and Shield configuration and logs, and to create and update AWS WAF rules and web ACLs on your behalf. The SRT takes these actions only if explicitly authorized by you.

Parameters:

roleArn - Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This parameter is required.

Returns:

this

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-drtaccess.html#cfn-shield-drtaccess-rolearn

build

@Stability(Stable)
public CfnDRTAccessPropsMixin build()

Specified by:

build in interface software.amazon.jsii.Builder<CfnDRTAccessPropsMixin>

Returns:

a newly built instance of CfnDRTAccessPropsMixin.