software.amazon.awscdk.services.networkfirewall

Interface CfnRuleGroup.HeaderProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnRuleGroup.HeaderProperty.Jsii$Proxy

Enclosing class:

CfnRuleGroup

@Stability(value=Stable)
public static interface CfnRuleGroup.HeaderProperty
extends software.amazon.jsii.JsiiSerializable

The 5-tuple criteria for AWS Network Firewall to use to inspect packet headers in stateful traffic flow inspection.

Traffic flows that match the criteria are a match for the corresponding stateful rule.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.networkfirewall.*;
 HeaderProperty headerProperty = HeaderProperty.builder()
         .destination("destination")
         .destinationPort("destinationPort")
         .direction("direction")
         .protocol("protocol")
         .source("source")
         .sourcePort("sourcePort")
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	CfnRuleGroup.HeaderProperty.Builder A builder for CfnRuleGroup.HeaderProperty
static class	CfnRuleGroup.HeaderProperty.Jsii$Proxy An implementation for CfnRuleGroup.HeaderProperty

Method Summary

Modifier and Type	Method and Description
static CfnRuleGroup.HeaderProperty.Builder	builder()
String	getDestination() The destination IP address or address range to inspect for, in CIDR notation.
String	getDestinationPort() The destination port to inspect for.
String	getDirection() The direction of traffic flow to inspect.
String	getProtocol() The protocol to inspect for.
String	getSource() The source IP address or address range to inspect for, in CIDR notation.
String	getSourcePort() The source port to inspect for.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getDestination

@Stability(value=Stable)
 @NotNull
String getDestination()

The destination IP address or address range to inspect for, in CIDR notation.

To match with any address, specify ANY .

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

Examples:

• To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32 .
• To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24 .

For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing .

getDestinationPort

@Stability(value=Stable)
 @NotNull
String getDestinationPort()

The destination port to inspect for.

You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994 . To match with any port, specify ANY .

getDirection

@Stability(value=Stable)
 @NotNull
String getDirection()

The direction of traffic flow to inspect.

If set to ANY , the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to FORWARD , the inspection only matches traffic going from the source to the destination.

getProtocol

@Stability(value=Stable)
 @NotNull
String getProtocol()

The protocol to inspect for.

To specify all, you can use IP , because all traffic on AWS and on the internet is IP.

getSource

@Stability(value=Stable)
 @NotNull
String getSource()

The source IP address or address range to inspect for, in CIDR notation.

To match with any address, specify ANY .

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

Examples:

• To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32 .
• To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24 .

For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing .

getSourcePort

@Stability(value=Stable)
 @NotNull
String getSourcePort()

The source port to inspect for.

You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994 . To match with any port, specify ANY .

builder

@Stability(value=Stable)
static CfnRuleGroup.HeaderProperty.Builder builder()

Returns:

a CfnRuleGroup.HeaderProperty.Builder of CfnRuleGroup.HeaderProperty