Class: Aws::FMS::Types::NetworkFirewallPolicyDescription

Inherits:

Struct

• Object
• Struct
• Aws::FMS::Types::NetworkFirewallPolicyDescription

Includes:

Structure

Defined in:

lib/aws-sdk-fms/types.rb

Overview

The definition of the Network Firewall firewall policy.

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #stateful_default_actions ⇒ Array<String>

  The default actions to take on a packet that doesn’t match any stateful rules.

• #stateful_engine_options ⇒ Types::StatefulEngineOptions

  Additional options governing how Network Firewall handles stateful rules.

• #stateful_rule_groups ⇒ Array<Types::StatefulRuleGroup>

  The stateful rule groups that are used in the Network Firewall firewall policy.

• #stateless_custom_actions ⇒ Array<String>

  Names of custom actions that are available for use in the stateless default actions settings.

• #stateless_default_actions ⇒ Array<String>

  The actions to take on packets that don’t match any of the stateless rule groups.

• #stateless_fragment_default_actions ⇒ Array<String>

  The actions to take on packet fragments that don’t match any of the stateless rule groups.

• #stateless_rule_groups ⇒ Array<Types::StatelessRuleGroup>

  The stateless rule groups that are used in the Network Firewall firewall policy.

Instance Attribute Details

#stateful_default_actions ⇒ Array<String>

The default actions to take on a packet that doesn’t match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.

Valid values of the stateful default action:

• aws:drop_strict

• aws:drop_established

• aws:alert_strict

• aws:alert_established

Returns:

• (Array<String>)

# File 'lib/aws-sdk-fms/types.rb', line 3179

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateful_engine_options ⇒ Types::StatefulEngineOptions

Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.

Returns:

• (Types::StatefulEngineOptions)

# File 'lib/aws-sdk-fms/types.rb', line 3179

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateful_rule_groups ⇒ Array<Types::StatefulRuleGroup>

The stateful rule groups that are used in the Network Firewall firewall policy.

Returns:

• (Array<Types::StatefulRuleGroup>)

# File 'lib/aws-sdk-fms/types.rb', line 3179

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_custom_actions ⇒ Array<String>

Names of custom actions that are available for use in the stateless default actions settings.

Returns:

• (Array<String>)

# File 'lib/aws-sdk-fms/types.rb', line 3179

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_default_actions ⇒ Array<String>

The actions to take on packets that don’t match any of the stateless rule groups.

Returns:

• (Array<String>)

# File 'lib/aws-sdk-fms/types.rb', line 3179

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_fragment_default_actions ⇒ Array<String>

The actions to take on packet fragments that don’t match any of the stateless rule groups.

Returns:

• (Array<String>)

# File 'lib/aws-sdk-fms/types.rb', line 3179

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_rule_groups ⇒ Array<Types::StatelessRuleGroup>

The stateless rule groups that are used in the Network Firewall firewall policy.

Returns:

• (Array<Types::StatelessRuleGroup>)

# File 'lib/aws-sdk-fms/types.rb', line 3179

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end