Skip to content

FirewallPolicyDetails

Source code in docs_src/capo_securityhub/types/firewall_policy_details.py 
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
class FirewallPolicyDetails(TypedDict, closed=True):
    stateful_rule_group_references: NotRequired[
        "capo_securityhub.types.firewall_policy_stateful_rule_group_references_list.FirewallPolicyStatefulRuleGroupReferencesList"
    ]
    """<p>The stateful rule groups that are used in the firewall policy.</p>"""
    stateless_custom_actions: NotRequired[
        "capo_securityhub.types.firewall_policy_stateless_custom_actions_list.FirewallPolicyStatelessCustomActionsList"
    ]
    """<p>The custom action definitions that are available to use in the firewall policy's <code>StatelessDefaultActions</code> setting.</p>"""
    stateless_default_actions: NotRequired[
        "capo_securityhub.types.non_empty_string_list.NonEmptyStringList"
    ]
    """<p>The actions to take on a packet if it doesn't match any of the stateless rules in the policy.</p> <p>You must specify a standard action (<code>aws:pass</code>, <code>aws:drop</code>, <code>aws:forward_to_sfe</code>), and can optionally include a custom action from <code>StatelessCustomActions</code>. </p>"""
    stateless_fragment_default_actions: NotRequired[
        "capo_securityhub.types.non_empty_string_list.NonEmptyStringList"
    ]
    """<p>The actions to take on a fragmented UDP packet if it doesn't match any of the stateless rules in the policy.</p> <p>You must specify a standard action (<code>aws:pass</code>, <code>aws:drop</code>, <code>aws:forward_to_sfe</code>), and can optionally include a custom action from <code>StatelessCustomActions</code>. </p>"""
    stateless_rule_group_references: NotRequired[
        "capo_securityhub.types.firewall_policy_stateless_rule_group_references_list.FirewallPolicyStatelessRuleGroupReferencesList"
    ]
    """<p>The stateless rule groups that are used in the firewall policy.</p>"""

stateful_rule_group_references instance-attribute 

stateful_rule_group_references: NotRequired[
    FirewallPolicyStatefulRuleGroupReferencesList
]

The stateful rule groups that are used in the firewall policy.

stateless_custom_actions instance-attribute 

stateless_custom_actions: NotRequired[FirewallPolicyStatelessCustomActionsList]

The custom action definitions that are available to use in the firewall policy's StatelessDefaultActions setting.

stateless_default_actions instance-attribute 

stateless_default_actions: NotRequired[NonEmptyStringList]

The actions to take on a packet if it doesn't match any of the stateless rules in the policy.

You must specify a standard action (aws:pass, aws:drop, aws:forward_to_sfe), and can optionally include a custom action from StatelessCustomActions.

stateless_fragment_default_actions instance-attribute 

stateless_fragment_default_actions: NotRequired[NonEmptyStringList]

The actions to take on a fragmented UDP packet if it doesn't match any of the stateless rules in the policy.

You must specify a standard action (aws:pass, aws:drop, aws:forward_to_sfe), and can optionally include a custom action from StatelessCustomActions.

stateless_rule_group_references instance-attribute 

stateless_rule_group_references: NotRequired[
    FirewallPolicyStatelessRuleGroupReferencesList
]

The stateless rule groups that are used in the firewall policy.