Struct aws_sdk_networkfirewall::model::firewall_policy::Builder

#[non_exhaustive]
pub struct Builder { /* private fields */ }

A builder for FirewallPolicy

Implementations

impl Builder

pub fn stateless_rule_group_references(
    self,
    input: StatelessRuleGroupReference
) -> Self

Appends an item to stateless_rule_group_references.

To override the contents of this collection use set_stateless_rule_group_references.

References to the stateless rule groups that are used in the policy. These define the matching criteria in stateless rules.

pub fn set_stateless_rule_group_references(
    self,
    input: Option<Vec<StatelessRuleGroupReference>>
) -> Self

References to the stateless rule groups that are used in the policy. These define the matching criteria in stateless rules.

pub fn stateless_default_actions(self, input: impl Into<String>) -> Self

Appends an item to stateless_default_actions.

To override the contents of this collection use set_stateless_default_actions.

The actions to take on a packet if it doesn't match any of the stateless rules in the policy. If you want non-matching packets to be forwarded for stateful inspection, specify aws:forward_to_sfe.

You must specify one of the standard actions: aws:pass, aws:drop, or aws:forward_to_sfe. In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify ["aws:pass"] or you could specify ["aws:pass", “customActionName”]. For information about compatibility, see the custom action descriptions under CustomAction.

pub fn set_stateless_default_actions(self, input: Option<Vec<String>>) -> Self

The actions to take on a packet if it doesn't match any of the stateless rules in the policy. If you want non-matching packets to be forwarded for stateful inspection, specify aws:forward_to_sfe.

You must specify one of the standard actions: aws:pass, aws:drop, or aws:forward_to_sfe. In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify ["aws:pass"] or you could specify ["aws:pass", “customActionName”]. For information about compatibility, see the custom action descriptions under CustomAction.

pub fn stateless_fragment_default_actions(
    self,
    input: impl Into<String>
) -> Self

Appends an item to stateless_fragment_default_actions.

To override the contents of this collection use set_stateless_fragment_default_actions.

The actions to take on a fragmented UDP packet if it doesn't match any of the stateless rules in the policy. Network Firewall only manages UDP packet fragments and silently drops packet fragments for other protocols. If you want non-matching fragmented UDP packets to be forwarded for stateful inspection, specify aws:forward_to_sfe.

You must specify one of the standard actions: aws:pass, aws:drop, or aws:forward_to_sfe. In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify ["aws:pass"] or you could specify ["aws:pass", “customActionName”]. For information about compatibility, see the custom action descriptions under CustomAction.

pub fn set_stateless_fragment_default_actions(
    self,
    input: Option<Vec<String>>
) -> Self

The actions to take on a fragmented UDP packet if it doesn't match any of the stateless rules in the policy. Network Firewall only manages UDP packet fragments and silently drops packet fragments for other protocols. If you want non-matching fragmented UDP packets to be forwarded for stateful inspection, specify aws:forward_to_sfe.

You must specify one of the standard actions: aws:pass, aws:drop, or aws:forward_to_sfe. In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify ["aws:pass"] or you could specify ["aws:pass", “customActionName”]. For information about compatibility, see the custom action descriptions under CustomAction.

pub fn stateless_custom_actions(self, input: CustomAction) -> Self

Appends an item to stateless_custom_actions.

To override the contents of this collection use set_stateless_custom_actions.

The custom action definitions that are available for use in the firewall policy's StatelessDefaultActions setting. You name each custom action that you define, and then you can use it by name in your default actions specifications.

pub fn set_stateless_custom_actions(
    self,
    input: Option<Vec<CustomAction>>
) -> Self

The custom action definitions that are available for use in the firewall policy's StatelessDefaultActions setting. You name each custom action that you define, and then you can use it by name in your default actions specifications.

pub fn stateful_rule_group_references(
    self,
    input: StatefulRuleGroupReference
) -> Self

Appends an item to stateful_rule_group_references.

To override the contents of this collection use set_stateful_rule_group_references.

References to the stateful rule groups that are used in the policy. These define the inspection criteria in stateful rules.

pub fn set_stateful_rule_group_references(
    self,
    input: Option<Vec<StatefulRuleGroupReference>>
) -> Self

References to the stateful rule groups that are used in the policy. These define the inspection criteria in stateful rules.

pub fn stateful_default_actions(self, input: impl Into<String>) -> Self

Appends an item to stateful_default_actions.

To override the contents of this collection use set_stateful_default_actions.

The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.

Valid values of the stateful default action:

• aws:drop_strict

• aws:drop_established

• aws:alert_strict

• aws:alert_established

For more information, see Strict evaluation order in the Network Firewall Developer Guide.

pub fn set_stateful_default_actions(self, input: Option<Vec<String>>) -> Self

The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.

Valid values of the stateful default action:

• aws:drop_strict

• aws:drop_established

• aws:alert_strict

• aws:alert_established

For more information, see Strict evaluation order in the Network Firewall Developer Guide.

pub fn stateful_engine_options(self, input: StatefulEngineOptions) -> Self

Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.

pub fn set_stateful_engine_options(
    self,
    input: Option<StatefulEngineOptions>
) -> Self

Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.

pub fn build(self) -> FirewallPolicy

Consumes the builder and constructs a FirewallPolicy

Trait Implementations

impl Clone for Builder

fn clone(&self) -> Builder

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Builder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Builder

fn default() -> Builder

Returns the “default value” for a type.

impl PartialEq<Builder> for Builder

fn eq(&self, other: &Builder) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Builder) -> bool

This method tests for !=.

impl StructuralPartialEq for Builder