Interface CfnRuleGroup.IStatefulRuleOptionsProperty
Additional options governing how Network Firewall handles the rule group.
Namespace: Amazon.CDK.AWS.NetworkFirewall
Assembly: Amazon.CDK.AWS.NetworkFirewall.dll
Syntax (csharp)
public interface IStatefulRuleOptionsProperty
Syntax (vb)
Public Interface IStatefulRuleOptionsProperty
Remarks
You can only use these for stateful rule groups.
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.NetworkFirewall;
var statefulRuleOptionsProperty = new StatefulRuleOptionsProperty {
RuleOrder = "ruleOrder"
};
Synopsis
Properties
RuleOrder | Indicates how to manage the order of the rule evaluation for the rule group. |
Properties
RuleOrder
Indicates how to manage the order of the rule evaluation for the rule group.
virtual string RuleOrder { get; }
Property Value
System.String
Remarks
DEFAULT_ACTION_ORDER
is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the AWS Network Firewall Developer Guide .