Class: AWSCDK::FMS::CfnPolicy::NetworkAclEntrySetProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
fms/cfn_policy.rb

Overview

The configuration of the first and last rules for the network ACL policy, and the remediation settings for each.

See Also:

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(force_remediate_for_first_entries:, force_remediate_for_last_entries:, first_entries: nil, last_entries: nil) ⇒ NetworkAclEntrySetProperty

Returns a new instance of NetworkAclEntrySetProperty.

Parameters:



968
969
970
971
972
973
974
975
976
977
 
# File 'fms/cfn_policy.rb', line 968

def initialize(force_remediate_for_first_entries:, force_remediate_for_last_entries:, first_entries: nil, last_entries: nil)
  @force_remediate_for_first_entries = force_remediate_for_first_entries
  Jsii::Type.check_type(@force_remediate_for_first_entries, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3sicHJpbWl0aXZlIjoiYm9vbGVhbiJ9LHsiZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifV19fQ==")), "forceRemediateForFirstEntries")
  @force_remediate_for_last_entries = force_remediate_for_last_entries
  Jsii::Type.check_type(@force_remediate_for_last_entries, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3sicHJpbWl0aXZlIjoiYm9vbGVhbiJ9LHsiZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifV19fQ==")), "forceRemediateForLastEntries")
  @first_entries = first_entries
  Jsii::Type.check_type(@first_entries, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfZm1zLkNmblBvbGljeS5OZXR3b3JrQWNsRW50cnlQcm9wZXJ0eSJ9XX19LCJraW5kIjoiYXJyYXkifX1dfX0=")), "firstEntries") unless @first_entries.nil?
  @last_entries = last_entries
  Jsii::Type.check_type(@last_entries, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfZm1zLkNmblBvbGljeS5OZXR3b3JrQWNsRW50cnlQcm9wZXJ0eSJ9XX19LCJraW5kIjoiYXJyYXkifX1dfX0=")), "lastEntries") unless @last_entries.nil?
end

Instance Attribute Details

#first_entries ⇒ AWSCDK::IResolvable, ... (readonly)

The rules that you want to run first in the Firewall Manager managed network ACLs.

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.

Returns:

See Also:



1005
1006
1007
 
# File 'fms/cfn_policy.rb', line 1005

def first_entries
  @first_entries
end

#force_remediate_for_first_entries ⇒ Boolean, AWSCDK::IResolvable (readonly)

Applies only when remediation is enabled for the policy as a whole.

Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see Remediation for managed network ACLs in the AWS Firewall Manager Developer Guide .

Returns:

See Also:



987
988
989
 
# File 'fms/cfn_policy.rb', line 987

def force_remediate_for_first_entries
  @force_remediate_for_first_entries
end

#force_remediate_for_last_entries ⇒ Boolean, AWSCDK::IResolvable (readonly)

Applies only when remediation is enabled for the policy as a whole.

Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see Remediation for managed network ACLs in the AWS Firewall Manager Developer Guide .

Returns:

See Also:



996
997
998
 
# File 'fms/cfn_policy.rb', line 996

def force_remediate_for_last_entries
  @force_remediate_for_last_entries
end

#last_entries ⇒ AWSCDK::IResolvable, ... (readonly)

The rules that you want to run last in the Firewall Manager managed network ACLs.

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.

Returns:

See Also:



1014
1015
1016
 
# File 'fms/cfn_policy.rb', line 1014

def last_entries
  @last_entries
end

Class Method Details

.jsii_properties ⇒ Object 



1016
1017
1018
1019
1020
1021
1022
1023
 
# File 'fms/cfn_policy.rb', line 1016

def self.jsii_properties
  {
    :force_remediate_for_first_entries => "forceRemediateForFirstEntries",
    :force_remediate_for_last_entries => "forceRemediateForLastEntries",
    :first_entries => "firstEntries",
    :last_entries => "lastEntries",
  }
end

Instance Method Details

#to_jsii ⇒ Object 



1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
 
# File 'fms/cfn_policy.rb', line 1025

def to_jsii
  result = {}
  result.merge!({
    "forceRemediateForFirstEntries" => @force_remediate_for_first_entries,
    "forceRemediateForLastEntries" => @force_remediate_for_last_entries,
    "firstEntries" => @first_entries,
    "lastEntries" => @last_entries,
  })
  result.compact
end