Package software.amazon.awscdk.services.networkfirewall

Class CfnTLSInspectionConfiguration

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.CfnElement
software.amazon.awscdk.CfnRefElement
software.amazon.awscdk.CfnResource
software.amazon.awscdk.services.networkfirewall.CfnTLSInspectionConfiguration
All Implemented Interfaces:
IInspectable, IEnvironmentAware, ITLSInspectionConfigurationRef, ITaggableV2, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable
@Generated(value="jsii-pacmak/1.121.0 (build d7af9b9)", date="2025-12-18T18:20:13.923Z") @Stability(Stable) public class CfnTLSInspectionConfiguration extends CfnResource implements IInspectable, ITLSInspectionConfigurationRef, ITaggableV2
The object that defines a TLS inspection configuration.

AWS Network Firewall uses a TLS inspection configuration to decrypt traffic. Network Firewall re-encrypts the traffic before sending it to its destination.

To use a TLS inspection configuration, you add it to a new Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect the traffic traveling through your firewalls. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see Inspecting SSL/TLS traffic with TLS inspection configurations in the AWS Network Firewall Developer Guide .

Example: 

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.networkfirewall.*;
 CfnTLSInspectionConfiguration cfnTLSInspectionConfiguration = CfnTLSInspectionConfiguration.Builder.create(this, "MyCfnTLSInspectionConfiguration")
         .tlsInspectionConfiguration(TLSInspectionConfigurationProperty.builder()
                 .serverCertificateConfigurations(List.of(ServerCertificateConfigurationProperty.builder()
                         .certificateAuthorityArn("certificateAuthorityArn")
                         .checkCertificateRevocationStatus(CheckCertificateRevocationStatusProperty.builder()
                                 .revokedStatusAction("revokedStatusAction")
                                 .unknownStatusAction("unknownStatusAction")
                                 .build())
                         .scopes(List.of(ServerCertificateScopeProperty.builder()
                                 .destinationPorts(List.of(PortRangeProperty.builder()
                                         .fromPort(123)
                                         .toPort(123)
                                         .build()))
                                 .destinations(List.of(AddressProperty.builder()
                                         .addressDefinition("addressDefinition")
                                         .build()))
                                 .protocols(List.of(123))
                                 .sourcePorts(List.of(PortRangeProperty.builder()
                                         .fromPort(123)
                                         .toPort(123)
                                         .build()))
                                 .sources(List.of(AddressProperty.builder()
                                         .addressDefinition("addressDefinition")
                                         .build()))
                                 .build()))
                         .serverCertificates(List.of(ServerCertificateProperty.builder()
                                 .resourceArn("resourceArn")
                                 .build()))
                         .build()))
                 .build())
         .tlsInspectionConfigurationName("tlsInspectionConfigurationName")
         // the properties below are optional
         .description("description")
         .tags(List.of(CfnTag.builder()
                 .key("key")
                 .value("value")
                 .build()))
         .build();

See Also:

  • Field Details

    • CFN_RESOURCE_TYPE_NAME

      @Stability(Stable) public static final String CFN_RESOURCE_TYPE_NAME
      The CloudFormation resource type name for this resource class.

  • Constructor Details

    • CfnTLSInspectionConfiguration

      protected CfnTLSInspectionConfiguration(software.amazon.jsii.JsiiObjectRef objRef)

    • CfnTLSInspectionConfiguration

      protected CfnTLSInspectionConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

    • CfnTLSInspectionConfiguration

      @Stability(Stable) public CfnTLSInspectionConfiguration(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull CfnTLSInspectionConfigurationProps props)
      Create a new AWS::NetworkFirewall::TLSInspectionConfiguration.

      Parameters:
      scope - Scope in which this resource is defined. This parameter is required.
      id - Construct identifier for this resource (unique in its scope). This parameter is required.
      props - Resource properties. This parameter is required.

  • Method Details

    • arnForTLSInspectionConfiguration

      @Stability(Stable) @NotNull public static String arnForTLSInspectionConfiguration(@NotNull ITLSInspectionConfigurationRef resource)
      Parameters:
      resource - This parameter is required.

    • isCfnTLSInspectionConfiguration

      @Stability(Stable) @NotNull public static Boolean isCfnTLSInspectionConfiguration(@NotNull Object x)
      Checks whether the given object is a CfnTLSInspectionConfiguration.

      Parameters:
      x - This parameter is required.

    • inspect

      @Stability(Stable) public void inspect(@NotNull TreeInspector inspector)
      Examines the CloudFormation resource and discloses attributes.

      Specified by:
      inspect in interface IInspectable
      Parameters:
      inspector - tree inspector to collect and process attributes. This parameter is required.

    • renderProperties

      @Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String,Object> props)
      Overrides:
      renderProperties in class CfnResource
      Parameters:
      props - This parameter is required.

    • getAttrTlsInspectionConfigurationArn

      @Stability(Stable) @NotNull public String getAttrTlsInspectionConfigurationArn()
      The Amazon Resource Name (ARN) of the TLS inspection configuration.

    • getAttrTlsInspectionConfigurationId

      @Stability(Stable) @NotNull public String getAttrTlsInspectionConfigurationId()
      A unique identifier for the TLS inspection configuration.

      This ID is returned in the responses to create and list commands. You provide it to operations such as update and delete.

    • getCdkTagManager

      @Stability(Stable) @NotNull public TagManager getCdkTagManager()
      Tag Manager which manages the tags for this resource.
      Specified by:
      getCdkTagManager in interface ITaggableV2

    • getCfnProperties

      @Stability(Stable) @NotNull protected Map<String,Object> getCfnProperties()
      Overrides:
      getCfnProperties in class CfnResource

    • getTlsInspectionConfigurationRef

      @Stability(Stable) @NotNull public TLSInspectionConfigurationReference getTlsInspectionConfigurationRef()
      A reference to a TLSInspectionConfiguration resource.
      Specified by:
      getTlsInspectionConfigurationRef in interface ITLSInspectionConfigurationRef

    • getTlsInspectionConfiguration

      @Stability(Stable) @NotNull public Object getTlsInspectionConfiguration()
      The object that defines a TLS inspection configuration.

      Returns union: either IResolvable or CfnTLSInspectionConfiguration.TLSInspectionConfigurationProperty

    • setTlsInspectionConfiguration

      @Stability(Stable) public void setTlsInspectionConfiguration(@NotNull IResolvable value)
      The object that defines a TLS inspection configuration.

    • setTlsInspectionConfiguration

      @Stability(Stable) public void setTlsInspectionConfiguration(@NotNull CfnTLSInspectionConfiguration.TLSInspectionConfigurationProperty value)
      The object that defines a TLS inspection configuration.

    • getTlsInspectionConfigurationName

      @Stability(Stable) @NotNull public String getTlsInspectionConfigurationName()
      The descriptive name of the TLS inspection configuration.

    • setTlsInspectionConfigurationName

      @Stability(Stable) public void setTlsInspectionConfigurationName(@NotNull String value)
      The descriptive name of the TLS inspection configuration.

    • getDescription

      @Stability(Stable) @Nullable public String getDescription()
      A description of the TLS inspection configuration.

    • setDescription

      @Stability(Stable) public void setDescription(@Nullable String value)
      A description of the TLS inspection configuration.

    • getTags

      @Stability(Stable) @Nullable public List<CfnTag> getTags()
      The key:value pairs to associate with the resource.

    • setTags

      @Stability(Stable) public void setTags(@Nullable List<CfnTag> value)
      The key:value pairs to associate with the resource.