Class: Aws::NetworkFirewall::Types::FirewallRuleGroup

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-networkfirewall/lib/aws-sdk-networkfirewall/types.rb

Overview

The object that defines a firewall engine rule group, for use in a Next Generation policy. A firewall engine rule group provides access-control rules that the firewall engine evaluates at connection-state hooks. You provide the rules as a Suricata-compatible rule string, as structured firewall rules, or generated from a list of domain names. For more information, see Rule groups for a firewall using a Next Generation policy in the Network Firewall Developer Guide.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#reference_sets ⇒ Types::ReferenceSets

The list of a rule group's reference sets. Firewall engine rule groups don't support IP set references (reference sets); this setting applies to IPS engine rule groups. To use CIDR ranges in firewall engine rules, use rule variables instead.

Returns:



5322
5323
5324
5325
5326
5327
5328
 
# File 'gems/aws-sdk-networkfirewall/lib/aws-sdk-networkfirewall/types.rb', line 5322

class FirewallRuleGroup < Struct.new(
  :rules_source,
  :rule_variables,
  :reference_sets)
  SENSITIVE = []
  include Aws::Structure
end

#rule_variables ⇒ Types::RuleVariables

Settings that are available for use in the rules in the firewall engine rule group, such as IP set and port variables that the rules reference.

Returns:



5322
5323
5324
5325
5326
5327
5328
 
# File 'gems/aws-sdk-networkfirewall/lib/aws-sdk-networkfirewall/types.rb', line 5322

class FirewallRuleGroup < Struct.new(
  :rules_source,
  :rule_variables,
  :reference_sets)
  SENSITIVE = []
  include Aws::Structure
end

#rules_source ⇒ Types::FirewallRulesSource

The stateful inspection criteria for the firewall engine rule group.

Returns:



5322
5323
5324
5325
5326
5327
5328
 
# File 'gems/aws-sdk-networkfirewall/lib/aws-sdk-networkfirewall/types.rb', line 5322

class FirewallRuleGroup < Struct.new(
  :rules_source,
  :rule_variables,
  :reference_sets)
  SENSITIVE = []
  include Aws::Structure
end