Struct aws_sdk_networkfirewall::model::RuleDefinition
source · [−]#[non_exhaustive]pub struct RuleDefinition {
pub match_attributes: Option<MatchAttributes>,
pub actions: Option<Vec<String>>,
}
Expand description
The inspection criteria and action for a single stateless rule. Network Firewall inspects each packet for the specified matching criteria. When a packet matches the criteria, Network Firewall performs the rule's actions on the packet.
Fields (Non-exhaustive)
This struct is marked as non-exhaustive
Struct { .. }
syntax; cannot be matched against without a wildcard ..
; and struct update syntax will not work.match_attributes: Option<MatchAttributes>
Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.
actions: Option<Vec<String>>
The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.
Network Firewall only forwards a packet for stateful rule inspection if you specify aws:forward_to_sfe
for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify aws:forward_to_sfe
for the StatelessDefaultActions
setting for the FirewallPolicy
.
For every rule, you must specify exactly one of the following standard actions.
-
aws:pass - Discontinues all inspection of the packet and permits it to go to its intended destination.
-
aws:drop - Discontinues all inspection of the packet and blocks it from going to its intended destination.
-
aws:forward_to_sfe - Discontinues stateless inspection of the packet and forwards it to the stateful rule engine for inspection.
Additionally, you can specify a custom action. To do this, you define a custom action by name and type, then provide the name you've assigned to the action in this Actions
setting. For information about the options, see CustomAction
.
To provide more than one action in this setting, separate the settings with a comma. For example, if you have a custom PublishMetrics
action that you've named MyMetricsAction
, then you could specify the standard action aws:pass
and the custom action with [“aws:pass”, “MyMetricsAction”]
.
Implementations
sourceimpl RuleDefinition
impl RuleDefinition
sourcepub fn match_attributes(&self) -> Option<&MatchAttributes>
pub fn match_attributes(&self) -> Option<&MatchAttributes>
Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.
sourcepub fn actions(&self) -> Option<&[String]>
pub fn actions(&self) -> Option<&[String]>
The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.
Network Firewall only forwards a packet for stateful rule inspection if you specify aws:forward_to_sfe
for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify aws:forward_to_sfe
for the StatelessDefaultActions
setting for the FirewallPolicy
.
For every rule, you must specify exactly one of the following standard actions.
-
aws:pass - Discontinues all inspection of the packet and permits it to go to its intended destination.
-
aws:drop - Discontinues all inspection of the packet and blocks it from going to its intended destination.
-
aws:forward_to_sfe - Discontinues stateless inspection of the packet and forwards it to the stateful rule engine for inspection.
Additionally, you can specify a custom action. To do this, you define a custom action by name and type, then provide the name you've assigned to the action in this Actions
setting. For information about the options, see CustomAction
.
To provide more than one action in this setting, separate the settings with a comma. For example, if you have a custom PublishMetrics
action that you've named MyMetricsAction
, then you could specify the standard action aws:pass
and the custom action with [“aws:pass”, “MyMetricsAction”]
.
sourceimpl RuleDefinition
impl RuleDefinition
sourcepub fn builder() -> Builder
pub fn builder() -> Builder
Creates a new builder-style object to manufacture RuleDefinition
Trait Implementations
sourceimpl Clone for RuleDefinition
impl Clone for RuleDefinition
sourcefn clone(&self) -> RuleDefinition
fn clone(&self) -> RuleDefinition
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl Debug for RuleDefinition
impl Debug for RuleDefinition
sourceimpl PartialEq<RuleDefinition> for RuleDefinition
impl PartialEq<RuleDefinition> for RuleDefinition
sourcefn eq(&self, other: &RuleDefinition) -> bool
fn eq(&self, other: &RuleDefinition) -> bool
This method tests for self
and other
values to be equal, and is used
by ==
. Read more
sourcefn ne(&self, other: &RuleDefinition) -> bool
fn ne(&self, other: &RuleDefinition) -> bool
This method tests for !=
.
impl StructuralPartialEq for RuleDefinition
Auto Trait Implementations
impl RefUnwindSafe for RuleDefinition
impl Send for RuleDefinition
impl Sync for RuleDefinition
impl Unpin for RuleDefinition
impl UnwindSafe for RuleDefinition
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcefn clone_into(&self, target: &mut T)
fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber
to this type, returning a
WithDispatch
wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber
to this type, returning a
WithDispatch
wrapper. Read more