Interface CfnFirewallPolicy.StatefulRuleGroupReferenceProperty
- All Superinterfaces:
software.amazon.jsii.JsiiSerializable
- All Known Implementing Classes:
CfnFirewallPolicy.StatefulRuleGroupReferenceProperty.Jsii$Proxy
- Enclosing class:
CfnFirewallPolicy
Example:
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.networkfirewall.*;
StatefulRuleGroupReferenceProperty statefulRuleGroupReferenceProperty = StatefulRuleGroupReferenceProperty.builder()
.resourceArn("resourceArn")
// the properties below are optional
.deepThreatInspection(false)
.override(StatefulRuleGroupOverrideProperty.builder()
.action("action")
.build())
.priority(123)
.build();
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeInterfaceDescriptionstatic final classA builder forCfnFirewallPolicy.StatefulRuleGroupReferencePropertystatic final classAn implementation forCfnFirewallPolicy.StatefulRuleGroupReferenceProperty -
Method Summary
Modifier and TypeMethodDescriptionbuilder()default ObjectAWS Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability.default ObjectThe action that allows the policy owner to override the behavior of the rule group within a policy.default NumberAn integer setting that indicates the order in which to run the stateful rule groups in a single firewall policy.The Amazon Resource Name (ARN) of the stateful rule group.Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Method Details
-
getResourceArn
The Amazon Resource Name (ARN) of the stateful rule group.- See Also:
-
getDeepThreatInspection
AWS Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability.When this capability is released, AWS will analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers. AWS will use these threat indicators to improve the active threat defense managed rule groups and protect the security of AWS customers and services.
Customers can opt-out of deep threat inspection at any time through the AWS Network Firewall console or API. When customers opt out, AWS Network Firewall will not use the network traffic processed by those customers' active threat defense rule groups for rule group improvement.
- See Also:
-
getOverride
The action that allows the policy owner to override the behavior of the rule group within a policy.- See Also:
-
getPriority
An integer setting that indicates the order in which to run the stateful rule groups in a single firewall policy.This setting only applies to firewall policies that specify the
STRICT_ORDERrule order in the stateful engine options settings.Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on.
- See Also:
-
builder
-