Package software.amazon.awscdk.services.networkfirewall

Class CfnRuleGroup.RuleDefinitionProperty.Jsii$Proxy

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.networkfirewall.CfnRuleGroup.RuleDefinitionProperty.Jsii$Proxy

All Implemented Interfaces:

CfnRuleGroup.RuleDefinitionProperty, software.amazon.jsii.JsiiSerializable

Enclosing interface:

CfnRuleGroup.RuleDefinitionProperty

@Stability(Stable)
@Internal
public static final class CfnRuleGroup.RuleDefinitionProperty.Jsii$Proxy
extends software.amazon.jsii.JsiiObject
implements CfnRuleGroup.RuleDefinitionProperty

An implementation for CfnRuleGroup.RuleDefinitionProperty

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.networkfirewall.CfnRuleGroup.RuleDefinitionProperty

CfnRuleGroup.RuleDefinitionProperty.Builder, CfnRuleGroup.RuleDefinitionProperty.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	Jsii$Proxy(CfnRuleGroup.RuleDefinitionProperty.Builder builder)	Constructor that initializes the object based on literal property values passed by the CfnRuleGroup.RuleDefinitionProperty.Builder.
protected	Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)	Constructor that initializes the object based on values retrieved from the JsiiObject.

Method Summary

Modifier and Type	Method	Description
com.fasterxml.jackson.databind.JsonNode	$jsii$toJson()
final boolean	equals(Object o)
final List<String>	getActions()	The actions to take on a packet that matches one of the stateless rule definition's match attributes.
final Object	getMatchAttributes()	Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection.
final int	hashCode()

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Jsii$Proxy

protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)

Constructor that initializes the object based on values retrieved from the JsiiObject.

Parameters:

objRef - Reference to the JSII managed object.

Jsii$Proxy

protected Jsii$Proxy(CfnRuleGroup.RuleDefinitionProperty.Builder builder)

Constructor that initializes the object based on literal property values passed by the CfnRuleGroup.RuleDefinitionProperty.Builder.

Method Details

getActions

public final List<String> getActions()

Description copied from interface: CfnRuleGroup.RuleDefinitionProperty

The actions to take on a packet that matches one of the stateless rule definition's match attributes.

You must specify a standard action and you can add custom actions.

Network Firewall only forwards a packet for stateful rule inspection if you specify aws:forward_to_sfe for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify aws:forward_to_sfe for the StatelessDefaultActions setting for the firewall policy.

For every rule, you must specify exactly one of the following standard actions.

• aws:pass - Discontinues all inspection of the packet and permits it to go to its intended destination.
• aws:drop - Discontinues all inspection of the packet and blocks it from going to its intended destination.
• aws:forward_to_sfe - Discontinues stateless inspection of the packet and forwards it to the stateful rule engine for inspection.

Additionally, you can specify a custom action. To do this, you define a custom action by name and type, then provide the name you've assigned to the action in this Actions setting.

To provide more than one action in this setting, separate the settings with a comma. For example, if you have a publish metrics custom action that you've named MyMetricsAction , then you could specify the standard action aws:pass combined with the custom action using [“aws:pass”, “MyMetricsAction”] .

Specified by:

getActions in interface CfnRuleGroup.RuleDefinitionProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ruledefinition.html#cfn-networkfirewall-rulegroup-ruledefinition-actions

getMatchAttributes

public final Object getMatchAttributes()

Description copied from interface: CfnRuleGroup.RuleDefinitionProperty

Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection.

Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.

Returns union: either IResolvable or CfnRuleGroup.MatchAttributesProperty

Specified by:

getMatchAttributes in interface CfnRuleGroup.RuleDefinitionProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ruledefinition.html#cfn-networkfirewall-rulegroup-ruledefinition-matchattributes

$jsii$toJson

@Internal
public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()

Specified by:

$jsii$toJson in interface software.amazon.jsii.JsiiSerializable

equals

public final boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public final int hashCode()

Overrides:

hashCode in class Object