Class: AWSCDK::NetworkFirewall::CfnTLSInspectionConfiguration::ServerCertificateScopeProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
network_firewall/cfn_tls_inspection_configuration.rb

Overview

Settings that define the Secure Sockets Layer/Transport Layer Security (SSL/TLS) traffic that Network Firewall should decrypt for inspection by the stateful rule engine.

See Also:

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(destination_ports: nil, destinations: nil, protocols: nil, source_ports: nil, sources: nil) ⇒ ServerCertificateScopeProperty

Returns a new instance of ServerCertificateScopeProperty.

Parameters:



832
833
834
835
836
837
838
839
840
841
842
843
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 832

def initialize(destination_ports: nil, destinations: nil, protocols: nil, source_ports: nil, sources: nil)
  @destination_ports = destination_ports
  Jsii::Type.check_type(@destination_ports, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfbmV0d29ya2ZpcmV3YWxsLkNmblRMU0luc3BlY3Rpb25Db25maWd1cmF0aW9uLlBvcnRSYW5nZVByb3BlcnR5In1dfX0sImtpbmQiOiJhcnJheSJ9fV19fQ==")), "destinationPorts") unless @destination_ports.nil?
  @destinations = destinations
  Jsii::Type.check_type(@destinations, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfbmV0d29ya2ZpcmV3YWxsLkNmblRMU0luc3BlY3Rpb25Db25maWd1cmF0aW9uLkFkZHJlc3NQcm9wZXJ0eSJ9XX19LCJraW5kIjoiYXJyYXkifX1dfX0=")), "destinations") unless @destinations.nil?
  @protocols = protocols
  Jsii::Type.check_type(@protocols, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siY29sbGVjdGlvbiI6eyJlbGVtZW50dHlwZSI6eyJwcmltaXRpdmUiOiJudW1iZXIifSwia2luZCI6ImFycmF5In19LHsiZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifV19fQ==")), "protocols") unless @protocols.nil?
  @source_ports = source_ports
  Jsii::Type.check_type(@source_ports, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfbmV0d29ya2ZpcmV3YWxsLkNmblRMU0luc3BlY3Rpb25Db25maWd1cmF0aW9uLlBvcnRSYW5nZVByb3BlcnR5In1dfX0sImtpbmQiOiJhcnJheSJ9fV19fQ==")), "sourcePorts") unless @source_ports.nil?
  @sources = sources
  Jsii::Type.check_type(@sources, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfbmV0d29ya2ZpcmV3YWxsLkNmblRMU0luc3BlY3Rpb25Db25maWd1cmF0aW9uLkFkZHJlc3NQcm9wZXJ0eSJ9XX19LCJraW5kIjoiYXJyYXkifX1dfX0=")), "sources") unless @sources.nil?
end

Instance Attribute Details

#destination_ports ⇒ AWSCDK::IResolvable, ... (readonly)

The destination ports to decrypt for inspection, in Transmission Control Protocol (TCP) format.

If not specified, this matches with any destination port.

You can specify individual ports, for example 1994 , and you can specify port ranges, such as 1990:1994 .

Returns:

See Also:



853
854
855
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 853

def destination_ports
  @destination_ports
end

#destinations ⇒ AWSCDK::IResolvable, ... (readonly)

The destination IP addresses and address ranges to decrypt for inspection, in CIDR notation.

If not specified, this matches with any destination address.

Returns:

See Also:



861
862
863
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 861

def destinations
  @destinations
end

#protocols ⇒ Array<Numeric>, ... (readonly)

The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol.

If not specified, this matches with any protocol.

Network Firewall currently supports only TCP.

Returns:

See Also:



870
871
872
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 870

def protocols
  @protocols
end

#source_ports ⇒ AWSCDK::IResolvable, ... (readonly)

The source ports to decrypt for inspection, in Transmission Control Protocol (TCP) format.

If not specified, this matches with any source port.

You can specify individual ports, for example 1994 , and you can specify port ranges, such as 1990:1994 .

Returns:

See Also:



879
880
881
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 879

def source_ports
  @source_ports
end

#sources ⇒ AWSCDK::IResolvable, ... (readonly)

The source IP addresses and address ranges to decrypt for inspection, in CIDR notation.

If not specified, this matches with any source address.

Returns:

See Also:



887
888
889
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 887

def sources
  @sources
end

Class Method Details

.jsii_properties ⇒ Object 



889
890
891
892
893
894
895
896
897
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 889

def self.jsii_properties
  {
    :destination_ports => "destinationPorts",
    :destinations => "destinations",
    :protocols => "protocols",
    :source_ports => "sourcePorts",
    :sources => "sources",
  }
end

Instance Method Details

#to_jsii ⇒ Object 



899
900
901
902
903
904
905
906
907
908
909
 
# File 'network_firewall/cfn_tls_inspection_configuration.rb', line 899

def to_jsii
  result = {}
  result.merge!({
    "destinationPorts" => @destination_ports,
    "destinations" => @destinations,
    "protocols" => @protocols,
    "sourcePorts" => @source_ports,
    "sources" => @sources,
  })
  result.compact
end