Skip to content

StatefulRuleGroup

Source code in docs_src/capo_fms/types/stateful_rule_group.py 
14
15
16
17
18
19
20
21
22
23
24
25
26
class StatefulRuleGroup(TypedDict, closed=True):
    rule_group_name: NotRequired[
        "capo_fms.types.network_firewall_resource_name.NetworkFirewallResourceName"
    ]
    """<p>The name of the rule group.</p>"""
    resource_id: NotRequired["capo_fms.types.resource_id.ResourceId"]
    """<p>The resource ID of the rule group.</p>"""
    priority: NotRequired["capo_fms.types.priority_number.PriorityNumber"]
    """<p>An integer setting that indicates the order in which to run the stateful rule groups in a single Network Firewall firewall policy. This setting only applies to firewall policies that specify the <code>STRICT_ORDER</code> rule order in the stateful engine options settings.</p> <p> Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy. For information about </p> <p> You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on. </p>"""
    override: NotRequired[
        "capo_fms.types.network_firewall_stateful_rule_group_override.NetworkFirewallStatefulRuleGroupOverride"
    ]
    """<p>The action that allows the policy owner to override the behavior of the rule group within a policy.</p>"""

override instance-attribute 

override: NotRequired[NetworkFirewallStatefulRuleGroupOverride]

The action that allows the policy owner to override the behavior of the rule group within a policy.

priority instance-attribute 

priority: NotRequired[PriorityNumber]

An integer setting that indicates the order in which to run the stateful rule groups in a single Network Firewall firewall policy. This setting only applies to firewall policies that specify the STRICT_ORDER rule order in the stateful engine options settings.

Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy. For information about

You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on.

resource_id instance-attribute 

resource_id: NotRequired[ResourceId]

The resource ID of the rule group.

rule_group_name instance-attribute 

rule_group_name: NotRequired[NetworkFirewallResourceName]

The name of the rule group.