Class: AWSCDK::NetworkFirewall::CfnFirewallPolicy::PolicyVariablesProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
network_firewall/cfn_firewall_policy.rb

Overview

Contains variables that you can use to override default Suricata settings in your firewall policy.

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(rule_variables: nil) ⇒ PolicyVariablesProperty

Returns a new instance of PolicyVariablesProperty.

Parameters:



927
928
929
930
# File 'network_firewall/cfn_firewall_policy.rb', line 927

def initialize(rule_variables: nil)
  @rule_variables = rule_variables
  Jsii::Type.check_type(@rule_variables, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfbmV0d29ya2ZpcmV3YWxsLkNmbkZpcmV3YWxsUG9saWN5LklQU2V0UHJvcGVydHkifV19fSwia2luZCI6Im1hcCJ9fV19fQ==")), "ruleVariables") unless @rule_variables.nil?
end

Instance Attribute Details

#rule_variablesAWSCDK::IResolvable, ... (readonly)

The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata HOME_NET variable.

If your firewall uses an inspection VPC, you might want to override the HOME_NET variable with the CIDRs of your home networks. If you don't override HOME_NET with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.



938
939
940
# File 'network_firewall/cfn_firewall_policy.rb', line 938

def rule_variables
  @rule_variables
end

Class Method Details

.jsii_propertiesObject



940
941
942
943
944
# File 'network_firewall/cfn_firewall_policy.rb', line 940

def self.jsii_properties
  {
    :rule_variables => "ruleVariables",
  }
end

Instance Method Details

#to_jsiiObject



946
947
948
949
950
951
952
# File 'network_firewall/cfn_firewall_policy.rb', line 946

def to_jsii
  result = {}
  result.merge!({
    "ruleVariables" => @rule_variables,
  })
  result.compact
end