Describes the action that the service insertion will take for any segments associated with it.
Contents
- Action
-
The action the service insertion takes for traffic.
send-viasends east-west traffic between attachments.send-tosends north-south traffic to the security appliance, and then from that to either the Internet or to an on-premesis location.Type: String
Valid Values:
send-via | send-toRequired: No
- Mode
-
Describes the mode packets take for the
send-viaaction. This is not used when the action issend-to.dual-hoppackets traverse attachments in both the source to the destination core network edges. This mode requires that an inspection attachment must be present in all Regions of the service insertion-enabled segments. Forsingle-hop, packets traverse a single intermediate inserted attachment. You can useEdgeOverrideto specify a specific edge to use.Type: String
Valid Values:
dual-hop | single-hopRequired: No
- Via
-
The list of network function groups and any edge overrides for the chosen service insertion action. Used for both
send-toorsend-via.Type: Via object
Required: No
- WhenSentTo
-
The list of destination segments if the service insertion action is
send-via.Type: WhenSentTo object
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
