NetworkFirewallPolicyDescription ¶

class NetworkFirewallPolicyDescription(TypedDict, closed=True):
    stateless_rule_groups: NotRequired[
        "capo_fms.types.stateless_rule_group_list.StatelessRuleGroupList"
    ]
    """<p>The stateless rule groups that are used in the Network Firewall firewall policy. </p>"""
    stateless_default_actions: NotRequired[
        "capo_fms.types.network_firewall_action_list.NetworkFirewallActionList"
    ]
    """<p>The actions to take on packets that don't match any of the stateless rule groups. </p>"""
    stateless_fragment_default_actions: NotRequired[
        "capo_fms.types.network_firewall_action_list.NetworkFirewallActionList"
    ]
    """<p>The actions to take on packet fragments that don't match any of the stateless rule groups. </p>"""
    stateless_custom_actions: NotRequired[
        "capo_fms.types.network_firewall_action_list.NetworkFirewallActionList"
    ]
    """<p>Names of custom actions that are available for use in the stateless default actions settings.</p>"""
    stateful_rule_groups: NotRequired[
        "capo_fms.types.stateful_rule_group_list.StatefulRuleGroupList"
    ]
    """<p>The stateful rule groups that are used in the Network Firewall firewall policy. </p>"""
    stateful_default_actions: NotRequired[
        "capo_fms.types.network_firewall_action_list.NetworkFirewallActionList"
    ]
    """<p>The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.</p> <p> Valid values of the stateful default action: </p> <ul> <li> <p>aws:drop_strict</p> </li> <li> <p>aws:drop_established</p> </li> <li> <p>aws:alert_strict</p> </li> <li> <p>aws:alert_established</p> </li> </ul>"""
    stateful_engine_options: NotRequired[
        "capo_fms.types.stateful_engine_options.StatefulEngineOptions"
    ]
    """<p>Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.</p>"""