interface StatefulRuleOptionsProperty
| Language | Type name |
|---|---|
 .NET | Amazon.CDK.AWS.NetworkFirewall.CfnRuleGroup.StatefulRuleOptionsProperty |
 Java | software.amazon.awscdk.services.networkfirewall.CfnRuleGroup.StatefulRuleOptionsProperty |
 Python | aws_cdk.aws_networkfirewall.CfnRuleGroup.StatefulRuleOptionsProperty |
 TypeScript | @aws-cdk/aws-networkfirewall » CfnRuleGroup » StatefulRuleOptionsProperty |
Additional options governing how Network Firewall handles the rule group.
You can only use these for stateful rule groups.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as networkfirewall from '@aws-cdk/aws-networkfirewall';
const statefulRuleOptionsProperty: networkfirewall.CfnRuleGroup.StatefulRuleOptionsProperty = {
ruleOrder: 'ruleOrder',
};
Properties
| Name | Type | Description |
|---|---|---|
| rule | string | Indicates how to manage the order of the rule evaluation for the rule group. |
ruleOrder?
Type:
string
(optional)
Indicates how to manage the order of the rule evaluation for the rule group.
DEFAULT_ACTION_ORDER is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the AWS Network Firewall Developer Guide .