Interface CfnRuleGroup.RuleDefinitionProperty

All Superinterfaces:
software.amazon.jsii.JsiiSerializable
All Known Implementing Classes:
CfnRuleGroup.RuleDefinitionProperty.Jsii$Proxy
Enclosing class:
CfnRuleGroup

@Stability(Stable) public static interface CfnRuleGroup.RuleDefinitionProperty extends software.amazon.jsii.JsiiSerializable
The inspection criteria and action for a single stateless rule.

AWS Network Firewall inspects each packet for the specified matching criteria. When a packet matches the criteria, Network Firewall performs the rule's actions on the packet.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.networkfirewall.*;
 RuleDefinitionProperty ruleDefinitionProperty = RuleDefinitionProperty.builder()
         .actions(List.of("actions"))
         .matchAttributes(MatchAttributesProperty.builder()
                 .destinationPorts(List.of(PortRangeProperty.builder()
                         .fromPort(123)
                         .toPort(123)
                         .build()))
                 .destinations(List.of(AddressProperty.builder()
                         .addressDefinition("addressDefinition")
                         .build()))
                 .protocols(List.of(123))
                 .sourcePorts(List.of(PortRangeProperty.builder()
                         .fromPort(123)
                         .toPort(123)
                         .build()))
                 .sources(List.of(AddressProperty.builder()
                         .addressDefinition("addressDefinition")
                         .build()))
                 .tcpFlags(List.of(TCPFlagFieldProperty.builder()
                         .flags(List.of("flags"))
                         // the properties below are optional
                         .masks(List.of("masks"))
                         .build()))
                 .build())
         .build();
 

See Also: