interface NetworkAclEntrySetProperty

Language	Type name
.NET	`Amazon.CDK.AWS.FMS.CfnPolicy.NetworkAclEntrySetProperty`
Go	`github.com/aws/aws-cdk-go/awscdk/v2/awsfms#CfnPolicy_NetworkAclEntrySetProperty`
Java	`software.amazon.awscdk.services.fms.CfnPolicy.NetworkAclEntrySetProperty`
Python	`aws_cdk.aws_fms.CfnPolicy.NetworkAclEntrySetProperty`
TypeScript	`aws-cdk-lib` » `aws_fms` » `CfnPolicy` » `NetworkAclEntrySetProperty`

The configuration of the first and last rules for the network ACL policy, and the remediation settings for each.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_fms as fms } from 'aws-cdk-lib';
const networkAclEntrySetProperty: fms.CfnPolicy.NetworkAclEntrySetProperty = {
  forceRemediateForFirstEntries: false,
  forceRemediateForLastEntries: false,

  // the properties below are optional
  firstEntries: [{
    egress: false,
    protocol: 'protocol',
    ruleAction: 'ruleAction',

    // the properties below are optional
    cidrBlock: 'cidrBlock',
    icmpTypeCode: {
      code: 123,
      type: 123,
    },
    ipv6CidrBlock: 'ipv6CidrBlock',
    portRange: {
      from: 123,
      to: 123,
    },
  }],
  lastEntries: [{
    egress: false,
    protocol: 'protocol',
    ruleAction: 'ruleAction',

    // the properties below are optional
    cidrBlock: 'cidrBlock',
    icmpTypeCode: {
      code: 123,
      type: 123,
    },
    ipv6CidrBlock: 'ipv6CidrBlock',
    portRange: {
      from: 123,
      to: 123,
    },
  }],
};

Properties

Name	Type	Description
forceRemediateForFirstEntries	`boolean \|` `IResolvable`	Applies only when remediation is enabled for the policy as a whole.
forceRemediateForLastEntries	`boolean \|` `IResolvable`	Applies only when remediation is enabled for the policy as a whole.
firstEntries?	`IResolvable` `\|` `IResolvable` `\|` `NetworkAclEntryProperty[]`	The rules that you want to run first in the Firewall Manager managed network ACLs.
lastEntries?	`IResolvable` `\|` `IResolvable` `\|` `NetworkAclEntryProperty[]`	The rules that you want to run last in the Firewall Manager managed network ACLs.

forceRemediateForFirstEntries

Type: boolean | IResolvable

Applies only when remediation is enabled for the policy as a whole.

Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see Remediation for managed network ACLs in the AWS Firewall Manager Developer Guide .

forceRemediateForLastEntries

Type: boolean | IResolvable

Applies only when remediation is enabled for the policy as a whole.

Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

firstEntries?

Type: IResolvable | IResolvable | NetworkAclEntryProperty[] (optional)

The rules that you want to run first in the Firewall Manager managed network ACLs.

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.

lastEntries?

Type: IResolvable | IResolvable | NetworkAclEntryProperty[] (optional)

The rules that you want to run last in the Firewall Manager managed network ACLs.

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.