aws-cdk-lib.aws_networkfirewall.CfnRuleGroup.StatelessRulesAndCustomActionsProperty

interface StatelessRulesAndCustomActionsProperty

LanguageType name
.NETAmazon.CDK.AWS.NetworkFirewall.CfnRuleGroup.StatelessRulesAndCustomActionsProperty
Gogithub.com/aws/aws-cdk-go/awscdk/v2/awsnetworkfirewall#CfnRuleGroup_StatelessRulesAndCustomActionsProperty
Javasoftware.amazon.awscdk.services.networkfirewall.CfnRuleGroup.StatelessRulesAndCustomActionsProperty
Pythonaws_cdk.aws_networkfirewall.CfnRuleGroup.StatelessRulesAndCustomActionsProperty
TypeScript aws-cdk-lib » aws_networkfirewall » CfnRuleGroup » StatelessRulesAndCustomActionsProperty

Stateless inspection criteria.

Each stateless rule group uses exactly one of these data types to define its stateless rules.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_networkfirewall as networkfirewall } from 'aws-cdk-lib';
const statelessRulesAndCustomActionsProperty: networkfirewall.CfnRuleGroup.StatelessRulesAndCustomActionsProperty = {
  statelessRules: [{
    priority: 123,
    ruleDefinition: {
      actions: ['actions'],
      matchAttributes: {
        destinationPorts: [{
          fromPort: 123,
          toPort: 123,
        }],
        destinations: [{
          addressDefinition: 'addressDefinition',
        }],
        protocols: [123],
        sourcePorts: [{
          fromPort: 123,
          toPort: 123,
        }],
        sources: [{
          addressDefinition: 'addressDefinition',
        }],
        tcpFlags: [{
          flags: ['flags'],

          // the properties below are optional
          masks: ['masks'],
        }],
      },
    },
  }],

  // the properties below are optional
  customActions: [{
    actionDefinition: {
      publishMetricAction: {
        dimensions: [{
          value: 'value',
        }],
      },
    },
    actionName: 'actionName',
  }],
};

Properties

NameTypeDescription
statelessRulesIResolvable | IResolvable | StatelessRuleProperty[]Defines the set of stateless rules for use in a stateless rule group.
customActions?IResolvable | IResolvable | CustomActionProperty[]Defines an array of individual custom action definitions that are available for use by the stateless rules in this StatelessRulesAndCustomActions specification.

statelessRules

Type: IResolvable | IResolvable | StatelessRuleProperty[]

Defines the set of stateless rules for use in a stateless rule group.


customActions?

Type: IResolvable | IResolvable | CustomActionProperty[] (optional)

Defines an array of individual custom action definitions that are available for use by the stateless rules in this StatelessRulesAndCustomActions specification.

You name each custom action that you define, and then you can use it by name in your stateless rule RuleGroup.RuleDefinition Actions specification.