Class CfnFirewall

Use the Firewall to provide stateful, managed, network firewall and intrusion detection and prevention filtering for your VPCs in Amazon VPC .

Inheritance
System.Object
CfnElement
CfnRefElement
CfnResource
CfnFirewall
Implements
Inherited Members
Namespace: Amazon.CDK.AWS.NetworkFirewall
Assembly: Amazon.CDK.Lib.dll
Syntax (csharp)
public class CfnFirewall : CfnResource, IInspectable, ITaggable
Syntax (vb)
Public Class CfnFirewall
    Inherits CfnResource
    Implements IInspectable, ITaggable
Remarks

The firewall defines the configuration settings for an AWS Network Firewall firewall. The settings include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall AWS resource.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html

CloudformationResource: AWS::NetworkFirewall::Firewall

ExampleMetadata: fixture=_generated

Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.NetworkFirewall;

var cfnFirewall = new CfnFirewall(this, "MyCfnFirewall", new CfnFirewallProps {
    FirewallName = "firewallName",
    FirewallPolicyArn = "firewallPolicyArn",
    SubnetMappings = new [] { new SubnetMappingProperty {
        SubnetId = "subnetId",

        // the properties below are optional
        IpAddressType = "ipAddressType"
    } },
    VpcId = "vpcId",

    // the properties below are optional
    DeleteProtection = false,
    Description = "description",
    FirewallPolicyChangeProtection = false,
    SubnetChangeProtection = false,
    Tags = new [] { new CfnTag {
        Key = "key",
        Value = "value"
    } }
});

Synopsis

Constructors

CfnFirewall(ByRefValue)

Used by jsii to construct an instance of this class from a Javascript-owned object reference
CfnFirewall(DeputyBase.DeputyProps)

Used by jsii to construct an instance of this class from DeputyProps
CfnFirewall(Construct, String, ICfnFirewallProps)

Properties

AttrEndpointIds

The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall.
AttrFirewallArn

The Amazon Resource Name (ARN) of the Firewall .
AttrFirewallId

The name of the Firewall resource.
CFN_RESOURCE_TYPE_NAME

The CloudFormation resource type name for this resource class.
CfnProperties
DeleteProtection

A flag indicating whether it is possible to delete the firewall.
Description

A description of the firewall.
FirewallName

The descriptive name of the firewall.
FirewallPolicyArn

The Amazon Resource Name (ARN) of the firewall policy.
FirewallPolicyChangeProtection

A setting indicating whether the firewall is protected against a change to the firewall policy association.
SubnetChangeProtection

A setting indicating whether the firewall is protected against changes to the subnet associations.
SubnetMappings

The public subnets that Network Firewall is using for the firewall.
Tags

Tag Manager which manages the tags for this resource.
TagsRaw

An array of key-value pairs to apply to this resource.
VpcId

The unique identifier of the VPC where the firewall is in use.

Methods

Inspect(TreeInspector)

Examines the CloudFormation resource and discloses attributes.
RenderProperties(IDictionary<String, Object>)

Constructors

CfnFirewall(ByRefValue)

Used by jsii to construct an instance of this class from a Javascript-owned object reference

protected CfnFirewall(ByRefValue reference)
Parameters
reference Amazon.JSII.Runtime.Deputy.ByRefValue

The Javascript-owned object reference

CfnFirewall(DeputyBase.DeputyProps)

Used by jsii to construct an instance of this class from DeputyProps

protected CfnFirewall(DeputyBase.DeputyProps props)
Parameters
props Amazon.JSII.Runtime.Deputy.DeputyBase.DeputyProps

The deputy props

CfnFirewall(Construct, String, ICfnFirewallProps)

public CfnFirewall(Construct scope, string id, ICfnFirewallProps props)
Parameters
scope Constructs.Construct

Scope in which this resource is defined.

id System.String

Construct identifier for this resource (unique in its scope).

props ICfnFirewallProps

Resource properties.

Properties

AttrEndpointIds

The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall.

public virtual string[] AttrEndpointIds { get; }
Property Value

System.String[]

Remarks

The subnets are not listed in any particular order. For example: ["us-west-2c:vpce-111122223333", "us-west-2a:vpce-987654321098", "us-west-2b:vpce-012345678901"] .

CloudformationAttribute: EndpointIds

AttrFirewallArn

The Amazon Resource Name (ARN) of the Firewall .

public virtual string AttrFirewallArn { get; }
Property Value

System.String

Remarks

CloudformationAttribute: FirewallArn

AttrFirewallId

The name of the Firewall resource.

public virtual string AttrFirewallId { get; }
Property Value

System.String

Remarks

CloudformationAttribute: FirewallId

CFN_RESOURCE_TYPE_NAME

The CloudFormation resource type name for this resource class.

public static string CFN_RESOURCE_TYPE_NAME { get; }
Property Value

System.String

CfnProperties

protected override IDictionary<string, object> CfnProperties { get; }
Property Value

System.Collections.Generic.IDictionary<System.String, System.Object>

Overrides

DeleteProtection

A flag indicating whether it is possible to delete the firewall.

public virtual object DeleteProtection { get; set; }
Property Value

System.Object

Description

A description of the firewall.

public virtual string Description { get; set; }
Property Value

System.String

FirewallName

The descriptive name of the firewall.

public virtual string FirewallName { get; set; }
Property Value

System.String

FirewallPolicyArn

The Amazon Resource Name (ARN) of the firewall policy.

public virtual string FirewallPolicyArn { get; set; }
Property Value

System.String

FirewallPolicyChangeProtection

A setting indicating whether the firewall is protected against a change to the firewall policy association.

public virtual object FirewallPolicyChangeProtection { get; set; }
Property Value

System.Object

SubnetChangeProtection

A setting indicating whether the firewall is protected against changes to the subnet associations.

public virtual object SubnetChangeProtection { get; set; }
Property Value

System.Object

SubnetMappings

The public subnets that Network Firewall is using for the firewall.

public virtual object SubnetMappings { get; set; }
Property Value

System.Object

Tags

Tag Manager which manages the tags for this resource.

public virtual TagManager Tags { get; }
Property Value

TagManager

TagsRaw

An array of key-value pairs to apply to this resource.

public virtual ICfnTag[] TagsRaw { get; set; }
Property Value

ICfnTag[]

VpcId

The unique identifier of the VPC where the firewall is in use.

public virtual string VpcId { get; set; }
Property Value

System.String

Methods

Inspect(TreeInspector)

Examines the CloudFormation resource and discloses attributes.

public virtual void Inspect(TreeInspector inspector)
Parameters
inspector TreeInspector

tree inspector to collect and process attributes.

RenderProperties(IDictionary<String, Object>)

protected override IDictionary<string, object> RenderProperties(IDictionary<string, object> props)
Parameters
props System.Collections.Generic.IDictionary<System.String, System.Object>
Returns

System.Collections.Generic.IDictionary<System.String, System.Object>

Overrides

Implements