Class: Aws::FMS::Types::NetworkFirewallPolicyDescription

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-fms/types.rb

Overview

The definition of the Network Firewall firewall policy.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#stateful_default_actions ⇒ Array<String>

The default actions to take on a packet that doesn’t match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.

Valid values of the stateful default action:

  • aws:drop_strict

  • aws:drop_established

  • aws:alert_strict

  • aws:alert_established

Returns:

  • (Array<String>) 


3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
 
# File 'lib/aws-sdk-fms/types.rb', line 3181

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateful_engine_options ⇒ Types::StatefulEngineOptions

Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.

Returns:



3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
 
# File 'lib/aws-sdk-fms/types.rb', line 3181

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateful_rule_groups ⇒ Array<Types::StatefulRuleGroup>

The stateful rule groups that are used in the Network Firewall firewall policy.

Returns:



3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
 
# File 'lib/aws-sdk-fms/types.rb', line 3181

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_custom_actions ⇒ Array<String>

Names of custom actions that are available for use in the stateless default actions settings.

Returns:

  • (Array<String>) 


3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
 
# File 'lib/aws-sdk-fms/types.rb', line 3181

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_default_actions ⇒ Array<String>

The actions to take on packets that don’t match any of the stateless rule groups.

Returns:

  • (Array<String>) 


3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
 
# File 'lib/aws-sdk-fms/types.rb', line 3181

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_fragment_default_actions ⇒ Array<String>

The actions to take on packet fragments that don’t match any of the stateless rule groups.

Returns:

  • (Array<String>) 


3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
 
# File 'lib/aws-sdk-fms/types.rb', line 3181

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end

#stateless_rule_groups ⇒ Array<Types::StatelessRuleGroup>

The stateless rule groups that are used in the Network Firewall firewall policy.

Returns:



3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
 
# File 'lib/aws-sdk-fms/types.rb', line 3181

class NetworkFirewallPolicyDescription < Struct.new(
  :stateless_rule_groups,
  :stateless_default_actions,
  :stateless_fragment_default_actions,
  :stateless_custom_actions,
  :stateful_rule_groups,
  :stateful_default_actions,
  :stateful_engine_options)
  SENSITIVE = []
  include Aws::Structure
end