# CfnPolicyProps

Properties for defining a `CfnPolicy`.

Extends: CfnPolicyProps
Used as props by: CfnPolicy

- Source: Generated code
- Type last changed: v2.274.0 · 20 Oct 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_networksecuritymanager as networksecuritymanager } from 'aws-cdk-lib';
const cfnPolicyProps: networksecuritymanager.CfnPolicyProps = {
  firewallType: 'firewallType',
  policyConfiguration: {
    remediationEnabled: false,
    resourcesCleanUp: false,
    wafConfig: {
      conflictResolution: 'conflictResolution',
      existingCustomerWebAclResolution: 'existingCustomerWebAclResolution',
    },
  },
  policyName: 'policyName',
  priority: 123,

  // the properties below are optional
  associatedTemplateAndRuleList: [{
    ruleArn: 'ruleArn',
    templateArn: 'templateArn',
  }],
  policyDescription: 'policyDescription',
  tags: [{
    key: 'key',
    value: 'value',
  }],
};
```

## Properties

- `associatedTemplateAndRuleList`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnPolicy.AssociatedTemplateAndRuleProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_networksecuritymanager.CfnPolicy.AssociatedTemplateAndRuleProperty.html)[] — List of templates and rules associated with this policy.

- `firewallType`: string (required) — The type of firewall.

- `policyConfiguration`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnPolicy.PolicyConfigurationProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_networksecuritymanager.CfnPolicy.PolicyConfigurationProperty.html) (required) — Configuration settings for policy behavior.

- `policyDescription`: string — A description of the policy.

- `policyName`: string (required) — The name of the policy.

- `priority`: number (required) — The priority of the policy.

- `tags`: [CfnTag](/cdk/api/v2/docs/aws-cdk-lib.CfnTag.html)[] — The tags associated with the policy.