@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class RulesSourceList extends Object implements Serializable, Cloneable, StructuredPojo
Stateful inspection criteria for a domain list rule group.
For HTTPS traffic, domain filtering is SNI-based. It uses the server name indicator extension of the TLS handshake.
By default, Network Firewall domain list inspection only includes traffic coming from the VPC where you deploy the
firewall. To inspect traffic from IP addresses outside of the deployment VPC, you set the HOME_NET
rule
variable to include the CIDR range of the deployment VPC plus the other CIDR ranges. For more information, see
RuleVariables in this guide and Stateful domain list rule groups in Network Firewall in the Network Firewall Developer Guide.
Constructor and Description |
---|
RulesSourceList() |
Modifier and Type | Method and Description |
---|---|
RulesSourceList |
clone() |
boolean |
equals(Object obj) |
String |
getGeneratedRulesType()
Whether you want to allow or deny access to the domains in your target list.
|
List<String> |
getTargets()
The domains that you want to inspect for in your traffic flows.
|
List<String> |
getTargetTypes()
The protocols you want to inspect.
|
int |
hashCode() |
void |
marshall(ProtocolMarshaller protocolMarshaller)
Marshalls this structured data using the given
ProtocolMarshaller . |
void |
setGeneratedRulesType(String generatedRulesType)
Whether you want to allow or deny access to the domains in your target list.
|
void |
setTargets(Collection<String> targets)
The domains that you want to inspect for in your traffic flows.
|
void |
setTargetTypes(Collection<String> targetTypes)
The protocols you want to inspect.
|
String |
toString()
Returns a string representation of this object.
|
RulesSourceList |
withGeneratedRulesType(GeneratedRulesType generatedRulesType)
Whether you want to allow or deny access to the domains in your target list.
|
RulesSourceList |
withGeneratedRulesType(String generatedRulesType)
Whether you want to allow or deny access to the domains in your target list.
|
RulesSourceList |
withTargets(Collection<String> targets)
The domains that you want to inspect for in your traffic flows.
|
RulesSourceList |
withTargets(String... targets)
The domains that you want to inspect for in your traffic flows.
|
RulesSourceList |
withTargetTypes(Collection<String> targetTypes)
The protocols you want to inspect.
|
RulesSourceList |
withTargetTypes(String... targetTypes)
The protocols you want to inspect.
|
RulesSourceList |
withTargetTypes(TargetType... targetTypes)
The protocols you want to inspect.
|
public List<String> getTargets()
The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:
Explicit names. For example, abc.example.com
matches only the domain abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of example.com
, such as abc.example.com
and www.example.com
.
Explicit names. For example, abc.example.com
matches only the domain
abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of
example.com
, such as abc.example.com
and www.example.com
.
public void setTargets(Collection<String> targets)
The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:
Explicit names. For example, abc.example.com
matches only the domain abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of example.com
, such as abc.example.com
and www.example.com
.
targets
- The domains that you want to inspect for in your traffic flows. Valid domain specifications are the
following:
Explicit names. For example, abc.example.com
matches only the domain
abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of
example.com
, such as abc.example.com
and www.example.com
.
public RulesSourceList withTargets(String... targets)
The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:
Explicit names. For example, abc.example.com
matches only the domain abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of example.com
, such as abc.example.com
and www.example.com
.
NOTE: This method appends the values to the existing list (if any). Use
setTargets(java.util.Collection)
or withTargets(java.util.Collection)
if you want to override
the existing values.
targets
- The domains that you want to inspect for in your traffic flows. Valid domain specifications are the
following:
Explicit names. For example, abc.example.com
matches only the domain
abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of
example.com
, such as abc.example.com
and www.example.com
.
public RulesSourceList withTargets(Collection<String> targets)
The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:
Explicit names. For example, abc.example.com
matches only the domain abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of example.com
, such as abc.example.com
and www.example.com
.
targets
- The domains that you want to inspect for in your traffic flows. Valid domain specifications are the
following:
Explicit names. For example, abc.example.com
matches only the domain
abc.example.com
.
Names that use a domain wildcard, which you indicate with an initial '.
'. For example,
.example.com
matches example.com
and matches all subdomains of
example.com
, such as abc.example.com
and www.example.com
.
public List<String> getTargetTypes()
The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.
TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.TargetType
public void setTargetTypes(Collection<String> targetTypes)
The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.
targetTypes
- The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.TargetType
public RulesSourceList withTargetTypes(String... targetTypes)
The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.
NOTE: This method appends the values to the existing list (if any). Use
setTargetTypes(java.util.Collection)
or withTargetTypes(java.util.Collection)
if you want to
override the existing values.
targetTypes
- The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.TargetType
public RulesSourceList withTargetTypes(Collection<String> targetTypes)
The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.
targetTypes
- The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.TargetType
public RulesSourceList withTargetTypes(TargetType... targetTypes)
The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.
targetTypes
- The protocols you want to inspect. Specify TLS_SNI
for HTTPS
. Specify
HTTP_HOST
for HTTP
. You can specify either or both.TargetType
public void setGeneratedRulesType(String generatedRulesType)
Whether you want to allow or deny access to the domains in your target list.
generatedRulesType
- Whether you want to allow or deny access to the domains in your target list.GeneratedRulesType
public String getGeneratedRulesType()
Whether you want to allow or deny access to the domains in your target list.
GeneratedRulesType
public RulesSourceList withGeneratedRulesType(String generatedRulesType)
Whether you want to allow or deny access to the domains in your target list.
generatedRulesType
- Whether you want to allow or deny access to the domains in your target list.GeneratedRulesType
public RulesSourceList withGeneratedRulesType(GeneratedRulesType generatedRulesType)
Whether you want to allow or deny access to the domains in your target list.
generatedRulesType
- Whether you want to allow or deny access to the domains in your target list.GeneratedRulesType
public String toString()
toString
in class Object
Object.toString()
public RulesSourceList clone()
public void marshall(ProtocolMarshaller protocolMarshaller)
StructuredPojo
ProtocolMarshaller
.marshall
in interface StructuredPojo
protocolMarshaller
- Implementation of ProtocolMarshaller
used to marshall this object's data.