Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance. Project price only 1 $
You can buy this project and download/modify it how often you want.
@file:Suppress("NAME_SHADOWING", "DEPRECATION")
package com.pulumi.aws.networkfirewall.kotlin.inputs
import com.pulumi.aws.networkfirewall.inputs.FirewallPolicyFirewallPolicyArgs.builder
import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiNullFieldException
import com.pulumi.kotlin.PulumiTagMarker
import com.pulumi.kotlin.applySuspend
import kotlin.String
import kotlin.Suppress
import kotlin.Unit
import kotlin.collections.List
import kotlin.jvm.JvmName
/**
*
* @property policyVariables . Contains variables that you can use to override default Suricata settings in your firewall policy. See Rule Variables for details.
* @property statefulDefaultActions Set of actions to take on a packet if it does not match any stateful rules in the policy. This can only be specified if the policy has a `stateful_engine_options` block with a `rule_order` value of `STRICT_ORDER`. You can specify one of either or neither values of `aws:drop_strict` or `aws:drop_established`, as well as any combination of `aws:alert_strict` and `aws:alert_established`.
* @property statefulEngineOptions A configuration block that defines options on how the policy handles stateful rules. See Stateful Engine Options below for details.
* @property statefulRuleGroupReferences Set of configuration blocks containing references to the stateful rule groups that are used in the policy. See Stateful Rule Group Reference below for details.
* @property statelessCustomActions Set of configuration blocks describing the custom action definitions that are available for use in the firewall policy's `stateless_default_actions`. See Stateless Custom Action below for details.
* @property statelessDefaultActions Set of actions to take on a packet if it does not match any of the stateless rules in the policy. You must specify one of the standard actions including: `aws:drop`, `aws:pass`, or `aws:forward_to_sfe`.
* In addition, you can specify custom actions that are compatible with your standard action choice. If you want non-matching packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe`.
* @property statelessFragmentDefaultActions Set of actions to take on a fragmented packet if it does not match any of the stateless rules in the policy. You must specify one of the standard actions including: `aws:drop`, `aws:pass`, or `aws:forward_to_sfe`.
* In addition, you can specify custom actions that are compatible with your standard action choice. If you want non-matching packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe`.
* @property statelessRuleGroupReferences Set of configuration blocks containing references to the stateless rule groups that are used in the policy. See Stateless Rule Group Reference below for details.
* @property tlsInspectionConfigurationArn The (ARN) of the TLS Inspection policy to attach to the FW Policy. This must be added at creation of the resource per AWS documentation. "You can only add a TLS inspection configuration to a new policy, not to an existing policy." This cannot be removed from a FW Policy.
*/
public data class FirewallPolicyFirewallPolicyArgs(
public val policyVariables: Output? = null,
public val statefulDefaultActions: Output>? = null,
public val statefulEngineOptions: Output? =
null,
public val statefulRuleGroupReferences: Output>? = null,
public val statelessCustomActions: Output>? = null,
public val statelessDefaultActions: Output>,
public val statelessFragmentDefaultActions: Output>,
public val statelessRuleGroupReferences: Output>? = null,
public val tlsInspectionConfigurationArn: Output? = null,
) : ConvertibleToJava {
override fun toJava(): com.pulumi.aws.networkfirewall.inputs.FirewallPolicyFirewallPolicyArgs =
com.pulumi.aws.networkfirewall.inputs.FirewallPolicyFirewallPolicyArgs.builder()
.policyVariables(policyVariables?.applyValue({ args0 -> args0.let({ args0 -> args0.toJava() }) }))
.statefulDefaultActions(
statefulDefaultActions?.applyValue({ args0 ->
args0.map({ args0 ->
args0
})
}),
)
.statefulEngineOptions(
statefulEngineOptions?.applyValue({ args0 ->
args0.let({ args0 ->
args0.toJava()
})
}),
)
.statefulRuleGroupReferences(
statefulRuleGroupReferences?.applyValue({ args0 ->
args0.map({ args0 ->
args0.let({ args0 -> args0.toJava() })
})
}),
)
.statelessCustomActions(
statelessCustomActions?.applyValue({ args0 ->
args0.map({ args0 ->
args0.let({ args0 -> args0.toJava() })
})
}),
)
.statelessDefaultActions(
statelessDefaultActions.applyValue({ args0 ->
args0.map({ args0 ->
args0
})
}),
)
.statelessFragmentDefaultActions(
statelessFragmentDefaultActions.applyValue({ args0 ->
args0.map({ args0 -> args0 })
}),
)
.statelessRuleGroupReferences(
statelessRuleGroupReferences?.applyValue({ args0 ->
args0.map({ args0 -> args0.let({ args0 -> args0.toJava() }) })
}),
)
.tlsInspectionConfigurationArn(
tlsInspectionConfigurationArn?.applyValue({ args0 ->
args0
}),
).build()
}
/**
* Builder for [FirewallPolicyFirewallPolicyArgs].
*/
@PulumiTagMarker
public class FirewallPolicyFirewallPolicyArgsBuilder internal constructor() {
private var policyVariables: Output? = null
private var statefulDefaultActions: Output>? = null
private var statefulEngineOptions: Output? =
null
private var statefulRuleGroupReferences:
Output>? = null
private var statelessCustomActions:
Output>? = null
private var statelessDefaultActions: Output>? = null
private var statelessFragmentDefaultActions: Output>? = null
private var statelessRuleGroupReferences:
Output>? = null
private var tlsInspectionConfigurationArn: Output? = null
/**
* @param value . Contains variables that you can use to override default Suricata settings in your firewall policy. See Rule Variables for details.
*/
@JvmName("frypifskpitlyyom")
public suspend fun policyVariables(`value`: Output) {
this.policyVariables = value
}
/**
* @param value Set of actions to take on a packet if it does not match any stateful rules in the policy. This can only be specified if the policy has a `stateful_engine_options` block with a `rule_order` value of `STRICT_ORDER`. You can specify one of either or neither values of `aws:drop_strict` or `aws:drop_established`, as well as any combination of `aws:alert_strict` and `aws:alert_established`.
*/
@JvmName("eengaugxtoeuwysg")
public suspend fun statefulDefaultActions(`value`: Output>) {
this.statefulDefaultActions = value
}
@JvmName("uwfhgsjughoqdsyf")
public suspend fun statefulDefaultActions(vararg values: Output) {
this.statefulDefaultActions = Output.all(values.asList())
}
/**
* @param values Set of actions to take on a packet if it does not match any stateful rules in the policy. This can only be specified if the policy has a `stateful_engine_options` block with a `rule_order` value of `STRICT_ORDER`. You can specify one of either or neither values of `aws:drop_strict` or `aws:drop_established`, as well as any combination of `aws:alert_strict` and `aws:alert_established`.
*/
@JvmName("ellrcapwycenlvtw")
public suspend fun statefulDefaultActions(values: List