Package software.amazon.awscdk.services.cloudformation

Interface CfnGuardHookProps

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnGuardHookProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.116.0 (build 0eddcff)",
           date="2025-10-24T13:34:32.799Z")
@Stability(Stable)
public interface CfnGuardHookProps
extends software.amazon.jsii.JsiiSerializable

Properties for defining a CfnGuardHook.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.cloudformation.*;
 CfnGuardHookProps cfnGuardHookProps = CfnGuardHookProps.builder()
         .alias("alias")
         .executionRole("executionRole")
         .failureMode("failureMode")
         .hookStatus("hookStatus")
         .ruleLocation(S3LocationProperty.builder()
                 .uri("uri")
                 // the properties below are optional
                 .versionId("versionId")
                 .build())
         .targetOperations(List.of("targetOperations"))
         // the properties below are optional
         .logBucket("logBucket")
         .options(OptionsProperty.builder()
                 .inputParams(S3LocationProperty.builder()
                         .uri("uri")
                         // the properties below are optional
                         .versionId("versionId")
                         .build())
                 .build())
         .stackFilters(StackFiltersProperty.builder()
                 .filteringCriteria("filteringCriteria")
                 // the properties below are optional
                 .stackNames(StackNamesProperty.builder()
                         .exclude(List.of("exclude"))
                         .include(List.of("include"))
                         .build())
                 .stackRoles(StackRolesProperty.builder()
                         .exclude(List.of("exclude"))
                         .include(List.of("include"))
                         .build())
                 .build())
         .targetFilters(TargetFiltersProperty.builder()
                 .targets(List.of(HookTargetProperty.builder()
                         .action("action")
                         .invocationPoint("invocationPoint")
                         .targetName("targetName")
                         .build()))
                 // the properties below are optional
                 .actions(List.of("actions"))
                 .invocationPoints(List.of("invocationPoints"))
                 .targetNames(List.of("targetNames"))
                 .build())
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnGuardHookProps.Builder	A builder for CfnGuardHookProps
static final class	CfnGuardHookProps.Jsii$Proxy	An implementation for CfnGuardHookProps

Method Summary

Modifier and Type	Method	Description
static CfnGuardHookProps.Builder	builder()
String	getAlias()	The type name alias for the Hook.
String	getExecutionRole()	The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.
String	getFailureMode()	Specifies how the Hook responds when rules fail their evaluation.
String	getHookStatus()	Specifies if the Hook is ENABLED or DISABLED .
default String	getLogBucket()	Specifies the name of an S3 bucket to store the Guard output report.
default Object	getOptions()	Specifies the S3 location of your input parameters.
Object	getRuleLocation()	Specifies the S3 location of your Guard rules.
default Object	getStackFilters()	Specifies the stack level filters for the Hook.
default Object	getTargetFilters()	Specifies the target filters for the Hook.
List<String>	getTargetOperations()	Specifies the list of operations the Hook is run against.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getAlias

@Stability(Stable)
@NotNull
String getAlias()

The type name alias for the Hook. This alias must be unique per account and Region.

The alias must be in the form Name1::Name2::Name3 and must not begin with AWS . For example, Private::Guard::MyTestHook .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-alias

getExecutionRole

@Stability(Stable)
@NotNull
String getExecutionRole()

The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-executionrole

getFailureMode

@Stability(Stable)
@NotNull
String getFailureMode()

Specifies how the Hook responds when rules fail their evaluation.

• FAIL : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies.
• WARN : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.

Default: - "WARN"

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-failuremode

getHookStatus

@Stability(Stable)
@NotNull
String getHookStatus()

Specifies if the Hook is ENABLED or DISABLED .

Default: - "DISABLED"

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-hookstatus

getRuleLocation

@Stability(Stable)
@NotNull
Object getRuleLocation()

Specifies the S3 location of your Guard rules.

Returns union: either IResolvable or CfnGuardHook.S3LocationProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-rulelocation

getTargetOperations

@Stability(Stable)
@NotNull
List<String> getTargetOperations()

Specifies the list of operations the Hook is run against.

For more information, see Hook targets in the AWS CloudFormation Hooks User Guide .

Valid values: STACK | RESOURCE | CHANGE_SET | CLOUD_CONTROL

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-targetoperations

getLogBucket

@Stability(Stable)
@Nullable
default String getLogBucket()

Specifies the name of an S3 bucket to store the Guard output report.

This report contains the results of your Guard rule validations.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-logbucket

getOptions

@Stability(Stable)
@Nullable
default Object getOptions()

Specifies the S3 location of your input parameters.

Returns union: either IResolvable or CfnGuardHook.OptionsProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-options

getStackFilters

@Stability(Stable)
@Nullable
default Object getStackFilters()

Specifies the stack level filters for the Hook.

Example stack level filter in JSON:

"StackFilters": {"FilteringCriteria": "ALL", "StackNames": {"Exclude": [ "stack-1", "stack-2"]}}

Example stack level filter in YAML:

StackFilters: FilteringCriteria: ALL StackNames: Exclude: - stack-1 - stack-2

Returns union: either IResolvable or CfnGuardHook.StackFiltersProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-stackfilters

getTargetFilters

@Stability(Stable)
@Nullable
default Object getTargetFilters()

Specifies the target filters for the Hook.

Example target filter in JSON:

"TargetFilters": {"Actions": [ "CREATE", "UPDATE", "DELETE" ]}

Example target filter in YAML:

TargetFilters: Actions: - CREATE - UPDATE - DELETE

Returns union: either IResolvable or CfnGuardHook.TargetFiltersProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-targetfilters

builder

@Stability(Stable)
static CfnGuardHookProps.Builder builder()

Returns:

a CfnGuardHookProps.Builder of CfnGuardHookProps