Class: Aws::FMS::Types::NetworkAclEntrySet

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-fms/types.rb

Overview

The configuration of the first and last rules for the network ACL policy, and the remediation settings for each.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#first_entries ⇒ Array<Types::NetworkAclEntry>

The rules that you want to run first in the Firewall Manager managed network ACLs.

<note markdown=“1”> Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

</note>

You must specify at least one first entry or one last entry in any network ACL policy.

Returns:



2726
2727
2728
2729
2730
2731
2732
2733
 
# File 'lib/aws-sdk-fms/types.rb', line 2726

class NetworkAclEntrySet < Struct.new(
  :first_entries,
  :force_remediate_for_first_entries,
  :last_entries,
  :force_remediate_for_last_entries)
  SENSITIVE = []
  include Aws::Structure
end

#force_remediate_for_first_entries ⇒ Boolean

Applies only when remediation is enabled for the policy as a whole. Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see [Remediation for managed network ACLs] in the *Firewall Manager Developer Guide*.

[1]: docs.aws.amazon.com/waf/latest/developerguide/network-acl-policies.html#network-acls-remediation

Returns:

  • (Boolean) 


2726
2727
2728
2729
2730
2731
2732
2733
 
# File 'lib/aws-sdk-fms/types.rb', line 2726

class NetworkAclEntrySet < Struct.new(
  :first_entries,
  :force_remediate_for_first_entries,
  :last_entries,
  :force_remediate_for_last_entries)
  SENSITIVE = []
  include Aws::Structure
end

#force_remediate_for_last_entries ⇒ Boolean

Applies only when remediation is enabled for the policy as a whole. Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see [Remediation for managed network ACLs] in the *Firewall Manager Developer Guide*.

[1]: docs.aws.amazon.com/waf/latest/developerguide/network-acl-policies.html#network-acls-remediation

Returns:

  • (Boolean) 


2726
2727
2728
2729
2730
2731
2732
2733
 
# File 'lib/aws-sdk-fms/types.rb', line 2726

class NetworkAclEntrySet < Struct.new(
  :first_entries,
  :force_remediate_for_first_entries,
  :last_entries,
  :force_remediate_for_last_entries)
  SENSITIVE = []
  include Aws::Structure
end

#last_entries ⇒ Array<Types::NetworkAclEntry>

The rules that you want to run last in the Firewall Manager managed network ACLs.

<note markdown=“1”> Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

</note>

You must specify at least one first entry or one last entry in any network ACL policy.

Returns:



2726
2727
2728
2729
2730
2731
2732
2733
 
# File 'lib/aws-sdk-fms/types.rb', line 2726

class NetworkAclEntrySet < Struct.new(
  :first_entries,
  :force_remediate_for_first_entries,
  :last_entries,
  :force_remediate_for_last_entries)
  SENSITIVE = []
  include Aws::Structure
end