Package software.amazon.awscdk.services.fms

Interface CfnPolicy.NetworkAclCommonPolicyProperty

All Superinterfaces:
software.amazon.jsii.JsiiSerializable
All Known Implementing Classes:
CfnPolicy.NetworkAclCommonPolicyProperty.Jsii$Proxy
Enclosing class:
CfnPolicy
@Stability(Stable) public static interface CfnPolicy.NetworkAclCommonPolicyProperty extends software.amazon.jsii.JsiiSerializable
Defines a Firewall Manager network ACL policy.

This is used in the PolicyOption of a SecurityServicePolicyData for a Policy , when the SecurityServicePolicyData type is set to NETWORK_ACL_COMMON .

For information about network ACLs, see Control traffic to subnets using network ACLs in the Amazon Virtual Private Cloud User Guide .

Example: 

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.fms.*;
 NetworkAclCommonPolicyProperty networkAclCommonPolicyProperty = NetworkAclCommonPolicyProperty.builder()
         .networkAclEntrySet(NetworkAclEntrySetProperty.builder()
                 .forceRemediateForFirstEntries(false)
                 .forceRemediateForLastEntries(false)
                 // the properties below are optional
                 .firstEntries(List.of(NetworkAclEntryProperty.builder()
                         .egress(false)
                         .protocol("protocol")
                         .ruleAction("ruleAction")
                         // the properties below are optional
                         .cidrBlock("cidrBlock")
                         .icmpTypeCode(IcmpTypeCodeProperty.builder()
                                 .code(123)
                                 .type(123)
                                 .build())
                         .ipv6CidrBlock("ipv6CidrBlock")
                         .portRange(PortRangeProperty.builder()
                                 .from(123)
                                 .to(123)
                                 .build())
                         .build()))
                 .lastEntries(List.of(NetworkAclEntryProperty.builder()
                         .egress(false)
                         .protocol("protocol")
                         .ruleAction("ruleAction")
                         // the properties below are optional
                         .cidrBlock("cidrBlock")
                         .icmpTypeCode(IcmpTypeCodeProperty.builder()
                                 .code(123)
                                 .type(123)
                                 .build())
                         .ipv6CidrBlock("ipv6CidrBlock")
                         .portRange(PortRangeProperty.builder()
                                 .from(123)
                                 .to(123)
                                 .build())
                         .build()))
                 .build())
         .build();

See Also: