Class: AWSCDK::NetworkFirewall::CfnTLSInspectionConfigurationProps

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
network_firewall/cfn_tls_inspection_configuration_props.rb

Overview

Properties for defining a CfnTLSInspectionConfiguration.

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(tls_inspection_configuration:, tls_inspection_configuration_name:, description: nil, tags: nil) ⇒ CfnTLSInspectionConfigurationProps

Returns a new instance of CfnTLSInspectionConfigurationProps.

Parameters:



13
14
15
16
17
18
19
20
21
22
# File 'network_firewall/cfn_tls_inspection_configuration_props.rb', line 13

def initialize(tls_inspection_configuration:, tls_inspection_configuration_name:, description: nil, tags: nil)
  @tls_inspection_configuration = tls_inspection_configuration.is_a?(Hash) ? ::AWSCDK::NetworkFirewall::CfnTLSInspectionConfiguration::TLSInspectionConfigurationProperty.new(**tls_inspection_configuration.transform_keys(&:to_sym)) : tls_inspection_configuration
  Jsii::Type.check_type(@tls_inspection_configuration, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImZxbiI6ImF3cy1jZGstbGliLmF3c19uZXR3b3JrZmlyZXdhbGwuQ2ZuVExTSW5zcGVjdGlvbkNvbmZpZ3VyYXRpb24uVExTSW5zcGVjdGlvbkNvbmZpZ3VyYXRpb25Qcm9wZXJ0eSJ9XX19")), "tlsInspectionConfiguration")
  @tls_inspection_configuration_name = tls_inspection_configuration_name
  Jsii::Type.check_type(@tls_inspection_configuration_name, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "tlsInspectionConfigurationName")
  @description = description
  Jsii::Type.check_type(@description, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "description") unless @description.nil?
  @tags = tags.is_a?(Array) ? tags.map { |jsii_v0| jsii_v0.is_a?(Hash) ? ::AWSCDK::CfnTag.new(**jsii_v0.transform_keys(&:to_sym)) : jsii_v0 } : tags
  Jsii::Type.check_type(@tags, JSON.parse(Base64.strict_decode64("eyJjb2xsZWN0aW9uIjp7ImVsZW1lbnR0eXBlIjp7ImZxbiI6ImF3cy1jZGstbGliLkNmblRhZyJ9LCJraW5kIjoiYXJyYXkifX0=")), "tags") unless @tags.nil?
end

Instance Attribute Details

#descriptionString? (readonly)

A description of the TLS inspection configuration.



42
43
44
# File 'network_firewall/cfn_tls_inspection_configuration_props.rb', line 42

def description
  @description
end

#tagsArray<AWSCDK::CfnTag>? (readonly)

The key:value pairs to associate with the resource.



47
48
49
# File 'network_firewall/cfn_tls_inspection_configuration_props.rb', line 47

def tags
  @tags
end

#tls_inspection_configurationAWSCDK::IResolvable, AWSCDK::NetworkFirewall::CfnTLSInspectionConfiguration::TLSInspectionConfigurationProperty (readonly)

The object that defines a TLS inspection configuration.

AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see Inspecting SSL/TLS traffic with TLS inspection configurations in the AWS Network Firewall Developer Guide .



30
31
32
# File 'network_firewall/cfn_tls_inspection_configuration_props.rb', line 30

def tls_inspection_configuration
  @tls_inspection_configuration
end

#tls_inspection_configuration_nameString (readonly)

The descriptive name of the TLS inspection configuration.

You can't change the name of a TLS inspection configuration after you create it.



37
38
39
# File 'network_firewall/cfn_tls_inspection_configuration_props.rb', line 37

def tls_inspection_configuration_name
  @tls_inspection_configuration_name
end

Class Method Details

.jsii_propertiesObject



49
50
51
52
53
54
55
56
# File 'network_firewall/cfn_tls_inspection_configuration_props.rb', line 49

def self.jsii_properties
  {
    :tls_inspection_configuration => "tlsInspectionConfiguration",
    :tls_inspection_configuration_name => "tlsInspectionConfigurationName",
    :description => "description",
    :tags => "tags",
  }
end

Instance Method Details

#to_jsiiObject



58
59
60
61
62
63
64
65
66
67
# File 'network_firewall/cfn_tls_inspection_configuration_props.rb', line 58

def to_jsii
  result = {}
  result.merge!({
    "tlsInspectionConfiguration" => @tls_inspection_configuration,
    "tlsInspectionConfigurationName" => @tls_inspection_configuration_name,
    "description" => @description,
    "tags" => @tags,
  })
  result.compact
end