# CfnFirewallPolicyProps

Properties for defining a `CfnFirewallPolicy`.

Extends: CfnFirewallPolicyProps
Used as props by: CfnFirewallPolicy

- Source: Generated code

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_networkfirewall as networkfirewall } from 'aws-cdk-lib';
const cfnFirewallPolicyProps: networkfirewall.CfnFirewallPolicyProps = {
  firewallPolicy: {
    statelessDefaultActions: ['statelessDefaultActions'],
    statelessFragmentDefaultActions: ['statelessFragmentDefaultActions'],

    // the properties below are optional
    enableTlsSessionHolding: false,
    policyVariables: {
      ruleVariables: {
        ruleVariablesKey: {
          definition: ['definition'],
        },
      },
    },
    statefulDefaultActions: ['statefulDefaultActions'],
    statefulEngineOptions: {
      flowTimeouts: {
        tcpIdleTimeoutSeconds: 123,
      },
      ruleOrder: 'ruleOrder',
      streamExceptionPolicy: 'streamExceptionPolicy',
    },
    statefulRuleGroupReferences: [{
      resourceArn: 'resourceArn',

      // the properties below are optional
      deepThreatInspection: false,
      override: {
        action: 'action',
      },
      priority: 123,
    }],
    statelessCustomActions: [{
      actionDefinition: {
        publishMetricAction: {
          dimensions: [{
            value: 'value',
          }],
        },
      },
      actionName: 'actionName',
    }],
    statelessRuleGroupReferences: [{
      priority: 123,
      resourceArn: 'resourceArn',
    }],
    tlsInspectionConfigurationArn: 'tlsInspectionConfigurationArn',
  },
  firewallPolicyName: 'firewallPolicyName',

  // the properties below are optional
  description: 'description',
  tags: [{
    key: 'key',
    value: 'value',
  }],
};
```

## Properties

- `description`: string — A description of the firewall policy.

- `firewallPolicy`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnFirewallPolicy.FirewallPolicyProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_networkfirewall.CfnFirewallPolicy.FirewallPolicyProperty.html) (required) — The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.

- `firewallPolicyName`: string (required) — The descriptive name of the firewall policy.

  You can't change the name of a firewall policy after you create it.

- `tags`: [CfnTag](/cdk/api/v2/docs/aws-cdk-lib.CfnTag.html)[] — An array of key-value pairs to apply to this resource.

  For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .