Class CfnGuardHook.Builder
- All Implemented Interfaces:
- software.amazon.jsii.Builder<CfnGuardHook>
- Enclosing class:
- CfnGuardHook
CfnGuardHook.- 
Method SummaryModifier and TypeMethodDescriptionThe type name alias for the Hook.build()static CfnGuardHook.BuilderexecutionRole(String executionRole) The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.failureMode(String failureMode) Specifies how the Hook responds when rules fail their evaluation.hookStatus(String hookStatus) Specifies if the Hook isENABLEDorDISABLED.Specifies the name of an S3 bucket to store the Guard output report.options(IResolvable options) Specifies the S3 location of your input parameters.options(CfnGuardHook.OptionsProperty options) Specifies the S3 location of your input parameters.ruleLocation(IResolvable ruleLocation) Specifies the S3 location of your Guard rules.ruleLocation(CfnGuardHook.S3LocationProperty ruleLocation) Specifies the S3 location of your Guard rules.stackFilters(IResolvable stackFilters) Specifies the stack level filters for the Hook.stackFilters(CfnGuardHook.StackFiltersProperty stackFilters) Specifies the stack level filters for the Hook.targetFilters(IResolvable targetFilters) Specifies the target filters for the Hook.targetFilters(CfnGuardHook.TargetFiltersProperty targetFilters) Specifies the target filters for the Hook.targetOperations(List<String> targetOperations) Specifies the list of operations the Hook is run against.
- 
Method Details- 
create@Stability(Stable) public static CfnGuardHook.Builder create(software.constructs.Construct scope, String id) - Parameters:
- scope- Scope in which this resource is defined. This parameter is required.
- id- Construct identifier for this resource (unique in its scope). This parameter is required.
- Returns:
- a new instance of CfnGuardHook.Builder.
 
- 
aliasThe type name alias for the Hook. This alias must be unique per account and Region.The alias must be in the form Name1::Name2::Name3and must not begin withAWS. For example,Private::Guard::MyTestHook.- Parameters:
- alias- The type name alias for the Hook. This alias must be unique per account and Region. This parameter is required.
- Returns:
- this
- See Also:
 
- 
executionRoleThe IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.- Parameters:
- executionRole- The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back. This parameter is required.
- Returns:
- this
- See Also:
 
- 
failureModeSpecifies how the Hook responds when rules fail their evaluation.- FAIL: Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies.
- WARN: Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.
 Default: - "WARN" - Parameters:
- failureMode- Specifies how the Hook responds when rules fail their evaluation. This parameter is required.
- Returns:
- this
- See Also:
 
- 
hookStatusSpecifies if the Hook isENABLEDorDISABLED.Default: - "DISABLED" - Parameters:
- hookStatus- Specifies if the Hook is- ENABLEDor- DISABLED. This parameter is required.
- Returns:
- this
- See Also:
 
- 
ruleLocationSpecifies the S3 location of your Guard rules.- Parameters:
- ruleLocation- Specifies the S3 location of your Guard rules. This parameter is required.
- Returns:
- this
- See Also:
 
- 
ruleLocation@Stability(Stable) public CfnGuardHook.Builder ruleLocation(CfnGuardHook.S3LocationProperty ruleLocation) Specifies the S3 location of your Guard rules.- Parameters:
- ruleLocation- Specifies the S3 location of your Guard rules. This parameter is required.
- Returns:
- this
- See Also:
 
- 
targetOperationsSpecifies the list of operations the Hook is run against.For more information, see Hook targets in the AWS CloudFormation Hooks User Guide . Valid values: STACK|RESOURCE|CHANGE_SET|CLOUD_CONTROL- Parameters:
- targetOperations- Specifies the list of operations the Hook is run against. This parameter is required.
- Returns:
- this
- See Also:
 
- 
logBucketSpecifies the name of an S3 bucket to store the Guard output report.This report contains the results of your Guard rule validations. - Parameters:
- logBucket- Specifies the name of an S3 bucket to store the Guard output report. This parameter is required.
- Returns:
- this
- See Also:
 
- 
optionsSpecifies the S3 location of your input parameters.- Parameters:
- options- Specifies the S3 location of your input parameters. This parameter is required.
- Returns:
- this
- See Also:
 
- 
optionsSpecifies the S3 location of your input parameters.- Parameters:
- options- Specifies the S3 location of your input parameters. This parameter is required.
- Returns:
- this
- See Also:
 
- 
stackFiltersSpecifies the stack level filters for the Hook.Example stack level filter in JSON: "StackFilters": {"FilteringCriteria": "ALL", "StackNames": {"Exclude": [ "stack-1", "stack-2"]}}Example stack level filter in YAML: StackFilters: FilteringCriteria: ALL StackNames: Exclude: - stack-1 - stack-2- Parameters:
- stackFilters- Specifies the stack level filters for the Hook. This parameter is required.
- Returns:
- this
- See Also:
 
- 
stackFilters@Stability(Stable) public CfnGuardHook.Builder stackFilters(CfnGuardHook.StackFiltersProperty stackFilters) Specifies the stack level filters for the Hook.Example stack level filter in JSON: "StackFilters": {"FilteringCriteria": "ALL", "StackNames": {"Exclude": [ "stack-1", "stack-2"]}}Example stack level filter in YAML: StackFilters: FilteringCriteria: ALL StackNames: Exclude: - stack-1 - stack-2- Parameters:
- stackFilters- Specifies the stack level filters for the Hook. This parameter is required.
- Returns:
- this
- See Also:
 
- 
targetFiltersSpecifies the target filters for the Hook.Example target filter in JSON: "TargetFilters": {"Actions": [ "CREATE", "UPDATE", "DELETE" ]}Example target filter in YAML: TargetFilters: Actions: - CREATE - UPDATE - DELETE- Parameters:
- targetFilters- Specifies the target filters for the Hook. This parameter is required.
- Returns:
- this
- See Also:
 
- 
targetFilters@Stability(Stable) public CfnGuardHook.Builder targetFilters(CfnGuardHook.TargetFiltersProperty targetFilters) Specifies the target filters for the Hook.Example target filter in JSON: "TargetFilters": {"Actions": [ "CREATE", "UPDATE", "DELETE" ]}Example target filter in YAML: TargetFilters: Actions: - CREATE - UPDATE - DELETE- Parameters:
- targetFilters- Specifies the target filters for the Hook. This parameter is required.
- Returns:
- this
- See Also:
 
- 
build- Specified by:
- buildin interface- software.amazon.jsii.Builder<CfnGuardHook>
- Returns:
- a newly built instance of CfnGuardHook.
 
 
-