Skip to content

/AWS1/IF_NWF=>CREATECONTAINERASSOCIATION()

About CreateContainerAssociation

Creates a container association for Network Firewall. A container association links container clusters (ECS or EKS) to Network Firewall, enabling dynamic IP resolution for firewall rules based on container attributes.

To manage a container association's tags, use the standard Amazon Web Services resource tagging operations, ListTagsForResource, TagResource, and UntagResource.

To retrieve information about container associations, use ListContainerAssociations and DescribeContainerAssociation.

Method Signature

METHODS /AWS1/IF_NWF~CREATECONTAINERASSOCIATION
  IMPORTING
    !IV_CONTAINERASSOCIATIONNAME TYPE /AWS1/NWFRESOURCENAME OPTIONAL
    !IV_DESCRIPTION TYPE /AWS1/NWFDESCRIPTION OPTIONAL
    !IV_TYPE TYPE /AWS1/NWFCONTAINERMONTYPE OPTIONAL
    !IT_CONTAINERMONITORINGCONFS TYPE /AWS1/CL_NWFCONTAINERMONCONF=>TT_CONTAINERMONITORINGCONFS OPTIONAL
    !IT_TAGS TYPE /AWS1/CL_NWFTAG=>TT_TAGLIST OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_nwfcrecontnrassocrsp
  RAISING
    /AWS1/CX_NWFINSUFFICIENTCAPEX
    /AWS1/CX_NWFINTERNALSERVERERR
    /AWS1/CX_NWFINVALIDREQUESTEX
    /AWS1/CX_NWFLIMITEXCEEDEDEX
    /AWS1/CX_NWFTHROTTLINGEX
    /AWS1/CX_NWFCLIENTEXC
    /AWS1/CX_NWFSERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING

Required arguments:

iv_containerassociationname TYPE /AWS1/NWFRESOURCENAME /AWS1/NWFRESOURCENAME

The descriptive name of the container association. You can't change the name of a container association after you create it.

iv_type TYPE /AWS1/NWFCONTAINERMONTYPE /AWS1/NWFCONTAINERMONTYPE

The type of container orchestration platform for the clusters in this association. Valid values are ECS and EKS. You can't change the type after creation.

it_containermonitoringconfs TYPE /AWS1/CL_NWFCONTAINERMONCONF=>TT_CONTAINERMONITORINGCONFS TT_CONTAINERMONITORINGCONFS

The list of container monitoring configurations that define which clusters and container attributes to monitor.

Optional arguments:

iv_description TYPE /AWS1/NWFDESCRIPTION /AWS1/NWFDESCRIPTION

A description of the container association.

it_tags TYPE /AWS1/CL_NWFTAG=>TT_TAGLIST TT_TAGLIST

The key:value pairs to associate with the resource.

RETURNING

oo_output TYPE REF TO /aws1/cl_nwfcrecontnrassocrsp /AWS1/CL_NWFCRECONTNRASSOCRSP

Examples

Syntax Example

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->createcontainerassociation(
  it_containermonitoringconfs = VALUE /aws1/cl_nwfcontainermonconf=>tt_containermonitoringconfs(
    (
      new /aws1/cl_nwfcontainermonconf(
        it_attributefilters = VALUE /aws1/cl_nwfcontainerattribute=>tt_containerattributes(
          (
            new /aws1/cl_nwfcontainerattribute(
              iv_key = |string|
              iv_value = |string|
            )
          )
        )
        iv_clusterarn = |string|
      )
    )
  )
  it_tags = VALUE /aws1/cl_nwftag=>tt_taglist(
    (
      new /aws1/cl_nwftag(
        iv_key = |string|
        iv_value = |string|
      )
    )
  )
  iv_containerassociationname = |string|
  iv_description = |string|
  iv_type = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lv_resourcename = lo_result->get_containerassociationname( ).
  lv_resourcearn = lo_result->get_containerassociationarn( ).
  lv_description = lo_result->get_description( ).
  lv_containermonitoringtype = lo_result->get_type( ).
  LOOP AT lo_result->get_containermonitoringconfs( ) into lo_row.
    lo_row_1 = lo_row.
    IF lo_row_1 IS NOT INITIAL.
      lv_resourcearn = lo_row_1->get_clusterarn( ).
      LOOP AT lo_row_1->get_attributefilters( ) into lo_row_2.
        lo_row_3 = lo_row_2.
        IF lo_row_3 IS NOT INITIAL.
          lv_containerattributekey = lo_row_3->get_key( ).
          lv_containerattributevalue = lo_row_3->get_value( ).
        ENDIF.
      ENDLOOP.
    ENDIF.
  ENDLOOP.
  lv_containerassociationsta = lo_result->get_status( ).
  LOOP AT lo_result->get_tags( ) into lo_row_4.
    lo_row_5 = lo_row_4.
    IF lo_row_5 IS NOT INITIAL.
      lv_tagkey = lo_row_5->get_key( ).
      lv_tagvalue = lo_row_5->get_value( ).
    ENDIF.
  ENDLOOP.
  lv_updatetoken = lo_result->get_updatetoken( ).
ENDIF.