Class: AWSCDK::NetworkFirewall::CfnRuleGroup::StatefulRuleOptionsProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
network_firewall/cfn_rule_group.rb

Overview

Additional options governing how Network Firewall handles the rule group.

You can only use these for stateful rule groups.

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(rule_order: nil) ⇒ StatefulRuleOptionsProperty

Returns a new instance of StatefulRuleOptionsProperty.

Parameters:

  • rule_order (String, nil) (defaults to: nil)

    Indicates how to manage the order of the rule evaluation for the rule group.



1584
1585
1586
1587
# File 'network_firewall/cfn_rule_group.rb', line 1584

def initialize(rule_order: nil)
  @rule_order = rule_order
  Jsii::Type.check_type(@rule_order, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "ruleOrder") unless @rule_order.nil?
end

Instance Attribute Details

#rule_orderString? (readonly)

Indicates how to manage the order of the rule evaluation for the rule group.

DEFAULT_ACTION_ORDER is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the AWS Network Firewall Developer Guide .



1595
1596
1597
# File 'network_firewall/cfn_rule_group.rb', line 1595

def rule_order
  @rule_order
end

Class Method Details

.jsii_propertiesObject



1597
1598
1599
1600
1601
# File 'network_firewall/cfn_rule_group.rb', line 1597

def self.jsii_properties
  {
    :rule_order => "ruleOrder",
  }
end

Instance Method Details

#to_jsiiObject



1603
1604
1605
1606
1607
1608
1609
# File 'network_firewall/cfn_rule_group.rb', line 1603

def to_jsii
  result = {}
  result.merge!({
    "ruleOrder" => @rule_order,
  })
  result.compact
end