networkfirewall

package
v0.111.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 9, 2024 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

View Source
const (
	FirewallPolicyRuleOrderDefaultActionOrder = FirewallPolicyRuleOrder("DEFAULT_ACTION_ORDER")
	FirewallPolicyRuleOrderStrictOrder        = FirewallPolicyRuleOrder("STRICT_ORDER")
)
View Source
const (
	FirewallPolicyStreamExceptionPolicyDrop     = FirewallPolicyStreamExceptionPolicy("DROP")
	FirewallPolicyStreamExceptionPolicyContinue = FirewallPolicyStreamExceptionPolicy("CONTINUE")
	FirewallPolicyStreamExceptionPolicyReject   = FirewallPolicyStreamExceptionPolicy("REJECT")
)
View Source
const (
	LoggingConfigurationLogDestinationConfigLogDestinationTypeS3                  = LoggingConfigurationLogDestinationConfigLogDestinationType("S3")
	LoggingConfigurationLogDestinationConfigLogDestinationTypeCloudWatchLogs      = LoggingConfigurationLogDestinationConfigLogDestinationType("CloudWatchLogs")
	LoggingConfigurationLogDestinationConfigLogDestinationTypeKinesisDataFirehose = LoggingConfigurationLogDestinationConfigLogDestinationType("KinesisDataFirehose")
)
View Source
const (
	LoggingConfigurationLogDestinationConfigLogTypeAlert = LoggingConfigurationLogDestinationConfigLogType("ALERT")
	LoggingConfigurationLogDestinationConfigLogTypeFlow  = LoggingConfigurationLogDestinationConfigLogType("FLOW")
)
View Source
const (
	RuleGroupGeneratedRulesTypeAllowlist = RuleGroupGeneratedRulesType("ALLOWLIST")
	RuleGroupGeneratedRulesTypeDenylist  = RuleGroupGeneratedRulesType("DENYLIST")
)
View Source
const (
	RuleGroupHeaderDirectionForward = RuleGroupHeaderDirection("FORWARD")
	RuleGroupHeaderDirectionAny     = RuleGroupHeaderDirection("ANY")
)
View Source
const (
	RuleGroupHeaderProtocolIp     = RuleGroupHeaderProtocol("IP")
	RuleGroupHeaderProtocolTcp    = RuleGroupHeaderProtocol("TCP")
	RuleGroupHeaderProtocolUdp    = RuleGroupHeaderProtocol("UDP")
	RuleGroupHeaderProtocolIcmp   = RuleGroupHeaderProtocol("ICMP")
	RuleGroupHeaderProtocolHttp   = RuleGroupHeaderProtocol("HTTP")
	RuleGroupHeaderProtocolFtp    = RuleGroupHeaderProtocol("FTP")
	RuleGroupHeaderProtocolTls    = RuleGroupHeaderProtocol("TLS")
	RuleGroupHeaderProtocolSmb    = RuleGroupHeaderProtocol("SMB")
	RuleGroupHeaderProtocolDns    = RuleGroupHeaderProtocol("DNS")
	RuleGroupHeaderProtocolDcerpc = RuleGroupHeaderProtocol("DCERPC")
	RuleGroupHeaderProtocolSsh    = RuleGroupHeaderProtocol("SSH")
	RuleGroupHeaderProtocolSmtp   = RuleGroupHeaderProtocol("SMTP")
	RuleGroupHeaderProtocolImap   = RuleGroupHeaderProtocol("IMAP")
	RuleGroupHeaderProtocolMsn    = RuleGroupHeaderProtocol("MSN")
	RuleGroupHeaderProtocolKrb5   = RuleGroupHeaderProtocol("KRB5")
	RuleGroupHeaderProtocolIkev2  = RuleGroupHeaderProtocol("IKEV2")
	RuleGroupHeaderProtocolTftp   = RuleGroupHeaderProtocol("TFTP")
	RuleGroupHeaderProtocolNtp    = RuleGroupHeaderProtocol("NTP")
	RuleGroupHeaderProtocolDhcp   = RuleGroupHeaderProtocol("DHCP")
)
View Source
const (
	RuleGroupRuleOrderDefaultActionOrder = RuleGroupRuleOrder("DEFAULT_ACTION_ORDER")
	RuleGroupRuleOrderStrictOrder        = RuleGroupRuleOrder("STRICT_ORDER")
)
View Source
const (
	RuleGroupStatefulRuleActionPass   = RuleGroupStatefulRuleAction("PASS")
	RuleGroupStatefulRuleActionDrop   = RuleGroupStatefulRuleAction("DROP")
	RuleGroupStatefulRuleActionAlert  = RuleGroupStatefulRuleAction("ALERT")
	RuleGroupStatefulRuleActionReject = RuleGroupStatefulRuleAction("REJECT")
)
View Source
const (
	RuleGroupTargetTypeTlsSni   = RuleGroupTargetType("TLS_SNI")
	RuleGroupTargetTypeHttpHost = RuleGroupTargetType("HTTP_HOST")
)
View Source
const (
	RuleGroupTcpFlagFin = RuleGroupTcpFlag("FIN")
	RuleGroupTcpFlagSyn = RuleGroupTcpFlag("SYN")
	RuleGroupTcpFlagRst = RuleGroupTcpFlag("RST")
	RuleGroupTcpFlagPsh = RuleGroupTcpFlag("PSH")
	RuleGroupTcpFlagAck = RuleGroupTcpFlag("ACK")
	RuleGroupTcpFlagUrg = RuleGroupTcpFlag("URG")
	RuleGroupTcpFlagEce = RuleGroupTcpFlag("ECE")
	RuleGroupTcpFlagCwr = RuleGroupTcpFlag("CWR")
)
View Source
const (
	RuleGroupTypeEnumStateless = RuleGroupTypeEnum("STATELESS")
	RuleGroupTypeEnumStateful  = RuleGroupTypeEnum("STATEFUL")
)
View Source
const (
	TlsInspectionConfigurationRevokedStatusActionPass   = TlsInspectionConfigurationRevokedStatusAction("PASS")
	TlsInspectionConfigurationRevokedStatusActionDrop   = TlsInspectionConfigurationRevokedStatusAction("DROP")
	TlsInspectionConfigurationRevokedStatusActionReject = TlsInspectionConfigurationRevokedStatusAction("REJECT")
)
View Source
const (
	TlsInspectionConfigurationUnknownStatusActionPass   = TlsInspectionConfigurationUnknownStatusAction("PASS")
	TlsInspectionConfigurationUnknownStatusActionDrop   = TlsInspectionConfigurationUnknownStatusAction("DROP")
	TlsInspectionConfigurationUnknownStatusActionReject = TlsInspectionConfigurationUnknownStatusAction("REJECT")
)
View Source
const (
	FirewallPolicyOverrideActionDropToAlert = FirewallPolicyOverrideAction("DROP_TO_ALERT")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type Firewall

type Firewall struct {
	pulumi.CustomResourceState

	// A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .
	DeleteProtection pulumi.BoolPtrOutput `pulumi:"deleteProtection"`
	// A description of the firewall.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall. The subnets are not listed in any particular order. For example: `["us-west-2c:vpce-111122223333", "us-west-2a:vpce-987654321098", "us-west-2b:vpce-012345678901"]` .
	EndpointIds pulumi.StringArrayOutput `pulumi:"endpointIds"`
	// The Amazon Resource Name (ARN) of the `Firewall` .
	FirewallArn pulumi.StringOutput `pulumi:"firewallArn"`
	// The name of the `Firewall` resource.
	FirewallId pulumi.StringOutput `pulumi:"firewallId"`
	// The descriptive name of the firewall. You can't change the name of a firewall after you create it.
	FirewallName pulumi.StringOutput `pulumi:"firewallName"`
	// The Amazon Resource Name (ARN) of the firewall policy.
	//
	// The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.
	FirewallPolicyArn pulumi.StringOutput `pulumi:"firewallPolicyArn"`
	// A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .
	FirewallPolicyChangeProtection pulumi.BoolPtrOutput `pulumi:"firewallPolicyChangeProtection"`
	// A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .
	SubnetChangeProtection pulumi.BoolPtrOutput `pulumi:"subnetChangeProtection"`
	// The public subnets that Network Firewall is using for the firewall. Each subnet must belong to a different Availability Zone.
	SubnetMappings FirewallSubnetMappingArrayOutput `pulumi:"subnetMappings"`
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags aws.TagArrayOutput `pulumi:"tags"`
	// The unique identifier of the VPC where the firewall is in use. You can't change the VPC of a firewall after you create the firewall.
	VpcId pulumi.StringOutput `pulumi:"vpcId"`
}

Resource type definition for AWS::NetworkFirewall::Firewall

func GetFirewall

func GetFirewall(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *FirewallState, opts ...pulumi.ResourceOption) (*Firewall, error)

GetFirewall gets an existing Firewall resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewFirewall

func NewFirewall(ctx *pulumi.Context,
	name string, args *FirewallArgs, opts ...pulumi.ResourceOption) (*Firewall, error)

NewFirewall registers a new resource with the given unique name, arguments, and options.

func (*Firewall) ElementType

func (*Firewall) ElementType() reflect.Type

func (*Firewall) ToFirewallOutput

func (i *Firewall) ToFirewallOutput() FirewallOutput

func (*Firewall) ToFirewallOutputWithContext

func (i *Firewall) ToFirewallOutputWithContext(ctx context.Context) FirewallOutput

type FirewallArgs

type FirewallArgs struct {
	// A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .
	DeleteProtection pulumi.BoolPtrInput
	// A description of the firewall.
	Description pulumi.StringPtrInput
	// The descriptive name of the firewall. You can't change the name of a firewall after you create it.
	FirewallName pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the firewall policy.
	//
	// The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.
	FirewallPolicyArn pulumi.StringInput
	// A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .
	FirewallPolicyChangeProtection pulumi.BoolPtrInput
	// A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .
	SubnetChangeProtection pulumi.BoolPtrInput
	// The public subnets that Network Firewall is using for the firewall. Each subnet must belong to a different Availability Zone.
	SubnetMappings FirewallSubnetMappingArrayInput
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags aws.TagArrayInput
	// The unique identifier of the VPC where the firewall is in use. You can't change the VPC of a firewall after you create the firewall.
	VpcId pulumi.StringInput
}

The set of arguments for constructing a Firewall resource.

func (FirewallArgs) ElementType

func (FirewallArgs) ElementType() reflect.Type

type FirewallInput

type FirewallInput interface {
	pulumi.Input

	ToFirewallOutput() FirewallOutput
	ToFirewallOutputWithContext(ctx context.Context) FirewallOutput
}

type FirewallOutput

type FirewallOutput struct{ *pulumi.OutputState }

func (FirewallOutput) DeleteProtection added in v0.17.0

func (o FirewallOutput) DeleteProtection() pulumi.BoolPtrOutput

A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .

func (FirewallOutput) Description added in v0.17.0

func (o FirewallOutput) Description() pulumi.StringPtrOutput

A description of the firewall.

func (FirewallOutput) ElementType

func (FirewallOutput) ElementType() reflect.Type

func (FirewallOutput) EndpointIds added in v0.17.0

func (o FirewallOutput) EndpointIds() pulumi.StringArrayOutput

The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall. The subnets are not listed in any particular order. For example: `["us-west-2c:vpce-111122223333", "us-west-2a:vpce-987654321098", "us-west-2b:vpce-012345678901"]` .

func (FirewallOutput) FirewallArn added in v0.17.0

func (o FirewallOutput) FirewallArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the `Firewall` .

func (FirewallOutput) FirewallId added in v0.17.0

func (o FirewallOutput) FirewallId() pulumi.StringOutput

The name of the `Firewall` resource.

func (FirewallOutput) FirewallName added in v0.17.0

func (o FirewallOutput) FirewallName() pulumi.StringOutput

The descriptive name of the firewall. You can't change the name of a firewall after you create it.

func (FirewallOutput) FirewallPolicyArn added in v0.17.0

func (o FirewallOutput) FirewallPolicyArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the firewall policy.

The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.

func (FirewallOutput) FirewallPolicyChangeProtection added in v0.17.0

func (o FirewallOutput) FirewallPolicyChangeProtection() pulumi.BoolPtrOutput

A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .

func (FirewallOutput) SubnetChangeProtection added in v0.17.0

func (o FirewallOutput) SubnetChangeProtection() pulumi.BoolPtrOutput

A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .

func (FirewallOutput) SubnetMappings added in v0.17.0

The public subnets that Network Firewall is using for the firewall. Each subnet must belong to a different Availability Zone.

func (FirewallOutput) Tags added in v0.17.0

An array of key-value pairs to apply to this resource.

For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .

func (FirewallOutput) ToFirewallOutput

func (o FirewallOutput) ToFirewallOutput() FirewallOutput

func (FirewallOutput) ToFirewallOutputWithContext

func (o FirewallOutput) ToFirewallOutputWithContext(ctx context.Context) FirewallOutput

func (FirewallOutput) VpcId added in v0.17.0

The unique identifier of the VPC where the firewall is in use. You can't change the VPC of a firewall after you create the firewall.

type FirewallPolicy

type FirewallPolicy struct {
	pulumi.CustomResourceState

	// A description of the firewall policy.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.
	FirewallPolicy FirewallPolicyTypeOutput `pulumi:"firewallPolicy"`
	// The Amazon Resource Name (ARN) of the `FirewallPolicy` .
	FirewallPolicyArn pulumi.StringOutput `pulumi:"firewallPolicyArn"`
	// The unique ID of the `FirewallPolicy` resource.
	FirewallPolicyId pulumi.StringOutput `pulumi:"firewallPolicyId"`
	// The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it.
	FirewallPolicyName pulumi.StringOutput `pulumi:"firewallPolicyName"`
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags aws.TagArrayOutput `pulumi:"tags"`
}

Resource type definition for AWS::NetworkFirewall::FirewallPolicy

func GetFirewallPolicy

func GetFirewallPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *FirewallPolicyState, opts ...pulumi.ResourceOption) (*FirewallPolicy, error)

GetFirewallPolicy gets an existing FirewallPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewFirewallPolicy

func NewFirewallPolicy(ctx *pulumi.Context,
	name string, args *FirewallPolicyArgs, opts ...pulumi.ResourceOption) (*FirewallPolicy, error)

NewFirewallPolicy registers a new resource with the given unique name, arguments, and options.

func (*FirewallPolicy) ElementType

func (*FirewallPolicy) ElementType() reflect.Type

func (*FirewallPolicy) ToFirewallPolicyOutput

func (i *FirewallPolicy) ToFirewallPolicyOutput() FirewallPolicyOutput

func (*FirewallPolicy) ToFirewallPolicyOutputWithContext

func (i *FirewallPolicy) ToFirewallPolicyOutputWithContext(ctx context.Context) FirewallPolicyOutput

type FirewallPolicyActionDefinition

type FirewallPolicyActionDefinition struct {
	// Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.
	//
	// You can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it.
	PublishMetricAction *FirewallPolicyPublishMetricAction `pulumi:"publishMetricAction"`
}

type FirewallPolicyActionDefinitionArgs

type FirewallPolicyActionDefinitionArgs struct {
	// Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.
	//
	// You can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it.
	PublishMetricAction FirewallPolicyPublishMetricActionPtrInput `pulumi:"publishMetricAction"`
}

func (FirewallPolicyActionDefinitionArgs) ElementType

func (FirewallPolicyActionDefinitionArgs) ToFirewallPolicyActionDefinitionOutput

func (i FirewallPolicyActionDefinitionArgs) ToFirewallPolicyActionDefinitionOutput() FirewallPolicyActionDefinitionOutput

func (FirewallPolicyActionDefinitionArgs) ToFirewallPolicyActionDefinitionOutputWithContext

func (i FirewallPolicyActionDefinitionArgs) ToFirewallPolicyActionDefinitionOutputWithContext(ctx context.Context) FirewallPolicyActionDefinitionOutput

type FirewallPolicyActionDefinitionInput

type FirewallPolicyActionDefinitionInput interface {
	pulumi.Input

	ToFirewallPolicyActionDefinitionOutput() FirewallPolicyActionDefinitionOutput
	ToFirewallPolicyActionDefinitionOutputWithContext(context.Context) FirewallPolicyActionDefinitionOutput
}

FirewallPolicyActionDefinitionInput is an input type that accepts FirewallPolicyActionDefinitionArgs and FirewallPolicyActionDefinitionOutput values. You can construct a concrete instance of `FirewallPolicyActionDefinitionInput` via:

FirewallPolicyActionDefinitionArgs{...}

type FirewallPolicyActionDefinitionOutput

type FirewallPolicyActionDefinitionOutput struct{ *pulumi.OutputState }

func (FirewallPolicyActionDefinitionOutput) ElementType

func (FirewallPolicyActionDefinitionOutput) PublishMetricAction

Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.

You can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it.

func (FirewallPolicyActionDefinitionOutput) ToFirewallPolicyActionDefinitionOutput

func (o FirewallPolicyActionDefinitionOutput) ToFirewallPolicyActionDefinitionOutput() FirewallPolicyActionDefinitionOutput

func (FirewallPolicyActionDefinitionOutput) ToFirewallPolicyActionDefinitionOutputWithContext

func (o FirewallPolicyActionDefinitionOutput) ToFirewallPolicyActionDefinitionOutputWithContext(ctx context.Context) FirewallPolicyActionDefinitionOutput

type FirewallPolicyArgs

type FirewallPolicyArgs struct {
	// A description of the firewall policy.
	Description pulumi.StringPtrInput
	// The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.
	FirewallPolicy FirewallPolicyTypeInput
	// The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it.
	FirewallPolicyName pulumi.StringPtrInput
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags aws.TagArrayInput
}

The set of arguments for constructing a FirewallPolicy resource.

func (FirewallPolicyArgs) ElementType

func (FirewallPolicyArgs) ElementType() reflect.Type

type FirewallPolicyCustomAction

type FirewallPolicyCustomAction struct {
	// The custom action associated with the action name.
	ActionDefinition FirewallPolicyActionDefinition `pulumi:"actionDefinition"`
	// The descriptive name of the custom action. You can't change the name of a custom action after you create it.
	ActionName string `pulumi:"actionName"`
}

type FirewallPolicyCustomActionArgs

type FirewallPolicyCustomActionArgs struct {
	// The custom action associated with the action name.
	ActionDefinition FirewallPolicyActionDefinitionInput `pulumi:"actionDefinition"`
	// The descriptive name of the custom action. You can't change the name of a custom action after you create it.
	ActionName pulumi.StringInput `pulumi:"actionName"`
}

func (FirewallPolicyCustomActionArgs) ElementType

func (FirewallPolicyCustomActionArgs) ToFirewallPolicyCustomActionOutput

func (i FirewallPolicyCustomActionArgs) ToFirewallPolicyCustomActionOutput() FirewallPolicyCustomActionOutput

func (FirewallPolicyCustomActionArgs) ToFirewallPolicyCustomActionOutputWithContext

func (i FirewallPolicyCustomActionArgs) ToFirewallPolicyCustomActionOutputWithContext(ctx context.Context) FirewallPolicyCustomActionOutput

type FirewallPolicyCustomActionArray

type FirewallPolicyCustomActionArray []FirewallPolicyCustomActionInput

func (FirewallPolicyCustomActionArray) ElementType

func (FirewallPolicyCustomActionArray) ToFirewallPolicyCustomActionArrayOutput

func (i FirewallPolicyCustomActionArray) ToFirewallPolicyCustomActionArrayOutput() FirewallPolicyCustomActionArrayOutput

func (FirewallPolicyCustomActionArray) ToFirewallPolicyCustomActionArrayOutputWithContext

func (i FirewallPolicyCustomActionArray) ToFirewallPolicyCustomActionArrayOutputWithContext(ctx context.Context) FirewallPolicyCustomActionArrayOutput

type FirewallPolicyCustomActionArrayInput

type FirewallPolicyCustomActionArrayInput interface {
	pulumi.Input

	ToFirewallPolicyCustomActionArrayOutput() FirewallPolicyCustomActionArrayOutput
	ToFirewallPolicyCustomActionArrayOutputWithContext(context.Context) FirewallPolicyCustomActionArrayOutput
}

FirewallPolicyCustomActionArrayInput is an input type that accepts FirewallPolicyCustomActionArray and FirewallPolicyCustomActionArrayOutput values. You can construct a concrete instance of `FirewallPolicyCustomActionArrayInput` via:

FirewallPolicyCustomActionArray{ FirewallPolicyCustomActionArgs{...} }

type FirewallPolicyCustomActionArrayOutput

type FirewallPolicyCustomActionArrayOutput struct{ *pulumi.OutputState }

func (FirewallPolicyCustomActionArrayOutput) ElementType

func (FirewallPolicyCustomActionArrayOutput) Index

func (FirewallPolicyCustomActionArrayOutput) ToFirewallPolicyCustomActionArrayOutput

func (o FirewallPolicyCustomActionArrayOutput) ToFirewallPolicyCustomActionArrayOutput() FirewallPolicyCustomActionArrayOutput

func (FirewallPolicyCustomActionArrayOutput) ToFirewallPolicyCustomActionArrayOutputWithContext

func (o FirewallPolicyCustomActionArrayOutput) ToFirewallPolicyCustomActionArrayOutputWithContext(ctx context.Context) FirewallPolicyCustomActionArrayOutput

type FirewallPolicyCustomActionInput

type FirewallPolicyCustomActionInput interface {
	pulumi.Input

	ToFirewallPolicyCustomActionOutput() FirewallPolicyCustomActionOutput
	ToFirewallPolicyCustomActionOutputWithContext(context.Context) FirewallPolicyCustomActionOutput
}

FirewallPolicyCustomActionInput is an input type that accepts FirewallPolicyCustomActionArgs and FirewallPolicyCustomActionOutput values. You can construct a concrete instance of `FirewallPolicyCustomActionInput` via:

FirewallPolicyCustomActionArgs{...}

type FirewallPolicyCustomActionOutput

type FirewallPolicyCustomActionOutput struct{ *pulumi.OutputState }

func (FirewallPolicyCustomActionOutput) ActionDefinition

The custom action associated with the action name.

func (FirewallPolicyCustomActionOutput) ActionName

The descriptive name of the custom action. You can't change the name of a custom action after you create it.

func (FirewallPolicyCustomActionOutput) ElementType

func (FirewallPolicyCustomActionOutput) ToFirewallPolicyCustomActionOutput

func (o FirewallPolicyCustomActionOutput) ToFirewallPolicyCustomActionOutput() FirewallPolicyCustomActionOutput

func (FirewallPolicyCustomActionOutput) ToFirewallPolicyCustomActionOutputWithContext

func (o FirewallPolicyCustomActionOutput) ToFirewallPolicyCustomActionOutputWithContext(ctx context.Context) FirewallPolicyCustomActionOutput

type FirewallPolicyDimension

type FirewallPolicyDimension struct {
	// The value to use in the custom metric dimension.
	Value string `pulumi:"value"`
}

type FirewallPolicyDimensionArgs

type FirewallPolicyDimensionArgs struct {
	// The value to use in the custom metric dimension.
	Value pulumi.StringInput `pulumi:"value"`
}

func (FirewallPolicyDimensionArgs) ElementType

func (FirewallPolicyDimensionArgs) ToFirewallPolicyDimensionOutput

func (i FirewallPolicyDimensionArgs) ToFirewallPolicyDimensionOutput() FirewallPolicyDimensionOutput

func (FirewallPolicyDimensionArgs) ToFirewallPolicyDimensionOutputWithContext

func (i FirewallPolicyDimensionArgs) ToFirewallPolicyDimensionOutputWithContext(ctx context.Context) FirewallPolicyDimensionOutput

type FirewallPolicyDimensionArray

type FirewallPolicyDimensionArray []FirewallPolicyDimensionInput

func (FirewallPolicyDimensionArray) ElementType

func (FirewallPolicyDimensionArray) ToFirewallPolicyDimensionArrayOutput

func (i FirewallPolicyDimensionArray) ToFirewallPolicyDimensionArrayOutput() FirewallPolicyDimensionArrayOutput

func (FirewallPolicyDimensionArray) ToFirewallPolicyDimensionArrayOutputWithContext

func (i FirewallPolicyDimensionArray) ToFirewallPolicyDimensionArrayOutputWithContext(ctx context.Context) FirewallPolicyDimensionArrayOutput

type FirewallPolicyDimensionArrayInput

type FirewallPolicyDimensionArrayInput interface {
	pulumi.Input

	ToFirewallPolicyDimensionArrayOutput() FirewallPolicyDimensionArrayOutput
	ToFirewallPolicyDimensionArrayOutputWithContext(context.Context) FirewallPolicyDimensionArrayOutput
}

FirewallPolicyDimensionArrayInput is an input type that accepts FirewallPolicyDimensionArray and FirewallPolicyDimensionArrayOutput values. You can construct a concrete instance of `FirewallPolicyDimensionArrayInput` via:

FirewallPolicyDimensionArray{ FirewallPolicyDimensionArgs{...} }

type FirewallPolicyDimensionArrayOutput

type FirewallPolicyDimensionArrayOutput struct{ *pulumi.OutputState }

func (FirewallPolicyDimensionArrayOutput) ElementType

func (FirewallPolicyDimensionArrayOutput) Index

func (FirewallPolicyDimensionArrayOutput) ToFirewallPolicyDimensionArrayOutput

func (o FirewallPolicyDimensionArrayOutput) ToFirewallPolicyDimensionArrayOutput() FirewallPolicyDimensionArrayOutput

func (FirewallPolicyDimensionArrayOutput) ToFirewallPolicyDimensionArrayOutputWithContext

func (o FirewallPolicyDimensionArrayOutput) ToFirewallPolicyDimensionArrayOutputWithContext(ctx context.Context) FirewallPolicyDimensionArrayOutput

type FirewallPolicyDimensionInput

type FirewallPolicyDimensionInput interface {
	pulumi.Input

	ToFirewallPolicyDimensionOutput() FirewallPolicyDimensionOutput
	ToFirewallPolicyDimensionOutputWithContext(context.Context) FirewallPolicyDimensionOutput
}

FirewallPolicyDimensionInput is an input type that accepts FirewallPolicyDimensionArgs and FirewallPolicyDimensionOutput values. You can construct a concrete instance of `FirewallPolicyDimensionInput` via:

FirewallPolicyDimensionArgs{...}

type FirewallPolicyDimensionOutput

type FirewallPolicyDimensionOutput struct{ *pulumi.OutputState }

func (FirewallPolicyDimensionOutput) ElementType

func (FirewallPolicyDimensionOutput) ToFirewallPolicyDimensionOutput

func (o FirewallPolicyDimensionOutput) ToFirewallPolicyDimensionOutput() FirewallPolicyDimensionOutput

func (FirewallPolicyDimensionOutput) ToFirewallPolicyDimensionOutputWithContext

func (o FirewallPolicyDimensionOutput) ToFirewallPolicyDimensionOutputWithContext(ctx context.Context) FirewallPolicyDimensionOutput

func (FirewallPolicyDimensionOutput) Value

The value to use in the custom metric dimension.

type FirewallPolicyInput

type FirewallPolicyInput interface {
	pulumi.Input

	ToFirewallPolicyOutput() FirewallPolicyOutput
	ToFirewallPolicyOutputWithContext(ctx context.Context) FirewallPolicyOutput
}

type FirewallPolicyIpSet added in v0.98.0

type FirewallPolicyIpSet struct {
	// The list of IP addresses and address ranges, in CIDR notation.
	Definition []string `pulumi:"definition"`
}

type FirewallPolicyIpSetArgs added in v0.98.0

type FirewallPolicyIpSetArgs struct {
	// The list of IP addresses and address ranges, in CIDR notation.
	Definition pulumi.StringArrayInput `pulumi:"definition"`
}

func (FirewallPolicyIpSetArgs) ElementType added in v0.98.0

func (FirewallPolicyIpSetArgs) ElementType() reflect.Type

func (FirewallPolicyIpSetArgs) ToFirewallPolicyIpSetOutput added in v0.98.0

func (i FirewallPolicyIpSetArgs) ToFirewallPolicyIpSetOutput() FirewallPolicyIpSetOutput

func (FirewallPolicyIpSetArgs) ToFirewallPolicyIpSetOutputWithContext added in v0.98.0

func (i FirewallPolicyIpSetArgs) ToFirewallPolicyIpSetOutputWithContext(ctx context.Context) FirewallPolicyIpSetOutput

type FirewallPolicyIpSetInput added in v0.98.0

type FirewallPolicyIpSetInput interface {
	pulumi.Input

	ToFirewallPolicyIpSetOutput() FirewallPolicyIpSetOutput
	ToFirewallPolicyIpSetOutputWithContext(context.Context) FirewallPolicyIpSetOutput
}

FirewallPolicyIpSetInput is an input type that accepts FirewallPolicyIpSetArgs and FirewallPolicyIpSetOutput values. You can construct a concrete instance of `FirewallPolicyIpSetInput` via:

FirewallPolicyIpSetArgs{...}

type FirewallPolicyIpSetMap added in v0.98.0

type FirewallPolicyIpSetMap map[string]FirewallPolicyIpSetInput

func (FirewallPolicyIpSetMap) ElementType added in v0.98.0

func (FirewallPolicyIpSetMap) ElementType() reflect.Type

func (FirewallPolicyIpSetMap) ToFirewallPolicyIpSetMapOutput added in v0.98.0

func (i FirewallPolicyIpSetMap) ToFirewallPolicyIpSetMapOutput() FirewallPolicyIpSetMapOutput

func (FirewallPolicyIpSetMap) ToFirewallPolicyIpSetMapOutputWithContext added in v0.98.0

func (i FirewallPolicyIpSetMap) ToFirewallPolicyIpSetMapOutputWithContext(ctx context.Context) FirewallPolicyIpSetMapOutput

type FirewallPolicyIpSetMapInput added in v0.98.0

type FirewallPolicyIpSetMapInput interface {
	pulumi.Input

	ToFirewallPolicyIpSetMapOutput() FirewallPolicyIpSetMapOutput
	ToFirewallPolicyIpSetMapOutputWithContext(context.Context) FirewallPolicyIpSetMapOutput
}

FirewallPolicyIpSetMapInput is an input type that accepts FirewallPolicyIpSetMap and FirewallPolicyIpSetMapOutput values. You can construct a concrete instance of `FirewallPolicyIpSetMapInput` via:

FirewallPolicyIpSetMap{ "key": FirewallPolicyIpSetArgs{...} }

type FirewallPolicyIpSetMapOutput added in v0.98.0

type FirewallPolicyIpSetMapOutput struct{ *pulumi.OutputState }

func (FirewallPolicyIpSetMapOutput) ElementType added in v0.98.0

func (FirewallPolicyIpSetMapOutput) MapIndex added in v0.98.0

func (FirewallPolicyIpSetMapOutput) ToFirewallPolicyIpSetMapOutput added in v0.98.0

func (o FirewallPolicyIpSetMapOutput) ToFirewallPolicyIpSetMapOutput() FirewallPolicyIpSetMapOutput

func (FirewallPolicyIpSetMapOutput) ToFirewallPolicyIpSetMapOutputWithContext added in v0.98.0

func (o FirewallPolicyIpSetMapOutput) ToFirewallPolicyIpSetMapOutputWithContext(ctx context.Context) FirewallPolicyIpSetMapOutput

type FirewallPolicyIpSetOutput added in v0.98.0

type FirewallPolicyIpSetOutput struct{ *pulumi.OutputState }

func (FirewallPolicyIpSetOutput) Definition added in v0.98.0

The list of IP addresses and address ranges, in CIDR notation.

func (FirewallPolicyIpSetOutput) ElementType added in v0.98.0

func (FirewallPolicyIpSetOutput) ElementType() reflect.Type

func (FirewallPolicyIpSetOutput) ToFirewallPolicyIpSetOutput added in v0.98.0

func (o FirewallPolicyIpSetOutput) ToFirewallPolicyIpSetOutput() FirewallPolicyIpSetOutput

func (FirewallPolicyIpSetOutput) ToFirewallPolicyIpSetOutputWithContext added in v0.98.0

func (o FirewallPolicyIpSetOutput) ToFirewallPolicyIpSetOutputWithContext(ctx context.Context) FirewallPolicyIpSetOutput

type FirewallPolicyOutput

type FirewallPolicyOutput struct{ *pulumi.OutputState }

func (FirewallPolicyOutput) Description added in v0.17.0

A description of the firewall policy.

func (FirewallPolicyOutput) ElementType

func (FirewallPolicyOutput) ElementType() reflect.Type

func (FirewallPolicyOutput) FirewallPolicy added in v0.17.0

The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.

func (FirewallPolicyOutput) FirewallPolicyArn added in v0.17.0

func (o FirewallPolicyOutput) FirewallPolicyArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the `FirewallPolicy` .

func (FirewallPolicyOutput) FirewallPolicyId added in v0.17.0

func (o FirewallPolicyOutput) FirewallPolicyId() pulumi.StringOutput

The unique ID of the `FirewallPolicy` resource.

func (FirewallPolicyOutput) FirewallPolicyName added in v0.17.0

func (o FirewallPolicyOutput) FirewallPolicyName() pulumi.StringOutput

The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it.

func (FirewallPolicyOutput) Tags added in v0.17.0

An array of key-value pairs to apply to this resource.

For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .

func (FirewallPolicyOutput) ToFirewallPolicyOutput

func (o FirewallPolicyOutput) ToFirewallPolicyOutput() FirewallPolicyOutput

func (FirewallPolicyOutput) ToFirewallPolicyOutputWithContext

func (o FirewallPolicyOutput) ToFirewallPolicyOutputWithContext(ctx context.Context) FirewallPolicyOutput

type FirewallPolicyOverrideAction added in v0.39.0

type FirewallPolicyOverrideAction string

func (FirewallPolicyOverrideAction) ElementType added in v0.39.0

func (FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionOutput added in v0.39.0

func (e FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionOutput() FirewallPolicyOverrideActionOutput

func (FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionOutputWithContext added in v0.39.0

func (e FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionOutputWithContext(ctx context.Context) FirewallPolicyOverrideActionOutput

func (FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionPtrOutput added in v0.39.0

func (e FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionPtrOutput() FirewallPolicyOverrideActionPtrOutput

func (FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionPtrOutputWithContext added in v0.39.0

func (e FirewallPolicyOverrideAction) ToFirewallPolicyOverrideActionPtrOutputWithContext(ctx context.Context) FirewallPolicyOverrideActionPtrOutput

func (FirewallPolicyOverrideAction) ToStringOutput added in v0.39.0

func (FirewallPolicyOverrideAction) ToStringOutputWithContext added in v0.39.0

func (e FirewallPolicyOverrideAction) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (FirewallPolicyOverrideAction) ToStringPtrOutput added in v0.39.0

func (e FirewallPolicyOverrideAction) ToStringPtrOutput() pulumi.StringPtrOutput

func (FirewallPolicyOverrideAction) ToStringPtrOutputWithContext added in v0.39.0

func (e FirewallPolicyOverrideAction) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type FirewallPolicyOverrideActionInput added in v0.39.0

type FirewallPolicyOverrideActionInput interface {
	pulumi.Input

	ToFirewallPolicyOverrideActionOutput() FirewallPolicyOverrideActionOutput
	ToFirewallPolicyOverrideActionOutputWithContext(context.Context) FirewallPolicyOverrideActionOutput
}

FirewallPolicyOverrideActionInput is an input type that accepts values of the FirewallPolicyOverrideAction enum A concrete instance of `FirewallPolicyOverrideActionInput` can be one of the following:

FirewallPolicyOverrideActionDropToAlert

type FirewallPolicyOverrideActionOutput added in v0.39.0

type FirewallPolicyOverrideActionOutput struct{ *pulumi.OutputState }

func (FirewallPolicyOverrideActionOutput) ElementType added in v0.39.0

func (FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionOutput added in v0.39.0

func (o FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionOutput() FirewallPolicyOverrideActionOutput

func (FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionOutputWithContext added in v0.39.0

func (o FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionOutputWithContext(ctx context.Context) FirewallPolicyOverrideActionOutput

func (FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionPtrOutput added in v0.39.0

func (o FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionPtrOutput() FirewallPolicyOverrideActionPtrOutput

func (FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionPtrOutputWithContext added in v0.39.0

func (o FirewallPolicyOverrideActionOutput) ToFirewallPolicyOverrideActionPtrOutputWithContext(ctx context.Context) FirewallPolicyOverrideActionPtrOutput

func (FirewallPolicyOverrideActionOutput) ToStringOutput added in v0.39.0

func (FirewallPolicyOverrideActionOutput) ToStringOutputWithContext added in v0.39.0

func (o FirewallPolicyOverrideActionOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (FirewallPolicyOverrideActionOutput) ToStringPtrOutput added in v0.39.0

func (FirewallPolicyOverrideActionOutput) ToStringPtrOutputWithContext added in v0.39.0

func (o FirewallPolicyOverrideActionOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type FirewallPolicyOverrideActionPtrInput added in v0.39.0

type FirewallPolicyOverrideActionPtrInput interface {
	pulumi.Input

	ToFirewallPolicyOverrideActionPtrOutput() FirewallPolicyOverrideActionPtrOutput
	ToFirewallPolicyOverrideActionPtrOutputWithContext(context.Context) FirewallPolicyOverrideActionPtrOutput
}

func FirewallPolicyOverrideActionPtr added in v0.39.0

func FirewallPolicyOverrideActionPtr(v string) FirewallPolicyOverrideActionPtrInput

type FirewallPolicyOverrideActionPtrOutput added in v0.39.0

type FirewallPolicyOverrideActionPtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyOverrideActionPtrOutput) Elem added in v0.39.0

func (FirewallPolicyOverrideActionPtrOutput) ElementType added in v0.39.0

func (FirewallPolicyOverrideActionPtrOutput) ToFirewallPolicyOverrideActionPtrOutput added in v0.39.0

func (o FirewallPolicyOverrideActionPtrOutput) ToFirewallPolicyOverrideActionPtrOutput() FirewallPolicyOverrideActionPtrOutput

func (FirewallPolicyOverrideActionPtrOutput) ToFirewallPolicyOverrideActionPtrOutputWithContext added in v0.39.0

func (o FirewallPolicyOverrideActionPtrOutput) ToFirewallPolicyOverrideActionPtrOutputWithContext(ctx context.Context) FirewallPolicyOverrideActionPtrOutput

func (FirewallPolicyOverrideActionPtrOutput) ToStringPtrOutput added in v0.39.0

func (FirewallPolicyOverrideActionPtrOutput) ToStringPtrOutputWithContext added in v0.39.0

func (o FirewallPolicyOverrideActionPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type FirewallPolicyPolicyVariablesProperties added in v0.61.0

type FirewallPolicyPolicyVariablesProperties struct {
	RuleVariables map[string]FirewallPolicyIpSet `pulumi:"ruleVariables"`
}

Contains variables that you can use to override default Suricata settings in your firewall policy.

type FirewallPolicyPolicyVariablesPropertiesArgs added in v0.61.0

type FirewallPolicyPolicyVariablesPropertiesArgs struct {
	RuleVariables FirewallPolicyIpSetMapInput `pulumi:"ruleVariables"`
}

Contains variables that you can use to override default Suricata settings in your firewall policy.

func (FirewallPolicyPolicyVariablesPropertiesArgs) ElementType added in v0.61.0

func (FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesOutput added in v0.61.0

func (i FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesOutput() FirewallPolicyPolicyVariablesPropertiesOutput

func (FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesOutputWithContext added in v0.61.0

func (i FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesOutputWithContext(ctx context.Context) FirewallPolicyPolicyVariablesPropertiesOutput

func (FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesPtrOutput added in v0.61.0

func (i FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesPtrOutput() FirewallPolicyPolicyVariablesPropertiesPtrOutput

func (FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesPtrOutputWithContext added in v0.61.0

func (i FirewallPolicyPolicyVariablesPropertiesArgs) ToFirewallPolicyPolicyVariablesPropertiesPtrOutputWithContext(ctx context.Context) FirewallPolicyPolicyVariablesPropertiesPtrOutput

type FirewallPolicyPolicyVariablesPropertiesInput added in v0.61.0

type FirewallPolicyPolicyVariablesPropertiesInput interface {
	pulumi.Input

	ToFirewallPolicyPolicyVariablesPropertiesOutput() FirewallPolicyPolicyVariablesPropertiesOutput
	ToFirewallPolicyPolicyVariablesPropertiesOutputWithContext(context.Context) FirewallPolicyPolicyVariablesPropertiesOutput
}

FirewallPolicyPolicyVariablesPropertiesInput is an input type that accepts FirewallPolicyPolicyVariablesPropertiesArgs and FirewallPolicyPolicyVariablesPropertiesOutput values. You can construct a concrete instance of `FirewallPolicyPolicyVariablesPropertiesInput` via:

FirewallPolicyPolicyVariablesPropertiesArgs{...}

type FirewallPolicyPolicyVariablesPropertiesOutput added in v0.61.0

type FirewallPolicyPolicyVariablesPropertiesOutput struct{ *pulumi.OutputState }

Contains variables that you can use to override default Suricata settings in your firewall policy.

func (FirewallPolicyPolicyVariablesPropertiesOutput) ElementType added in v0.61.0

func (FirewallPolicyPolicyVariablesPropertiesOutput) RuleVariables added in v0.61.0

func (FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesOutput added in v0.61.0

func (o FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesOutput() FirewallPolicyPolicyVariablesPropertiesOutput

func (FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesOutputWithContext added in v0.61.0

func (o FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesOutputWithContext(ctx context.Context) FirewallPolicyPolicyVariablesPropertiesOutput

func (FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutput added in v0.61.0

func (o FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutput() FirewallPolicyPolicyVariablesPropertiesPtrOutput

func (FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutputWithContext added in v0.61.0

func (o FirewallPolicyPolicyVariablesPropertiesOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutputWithContext(ctx context.Context) FirewallPolicyPolicyVariablesPropertiesPtrOutput

type FirewallPolicyPolicyVariablesPropertiesPtrInput added in v0.61.0

type FirewallPolicyPolicyVariablesPropertiesPtrInput interface {
	pulumi.Input

	ToFirewallPolicyPolicyVariablesPropertiesPtrOutput() FirewallPolicyPolicyVariablesPropertiesPtrOutput
	ToFirewallPolicyPolicyVariablesPropertiesPtrOutputWithContext(context.Context) FirewallPolicyPolicyVariablesPropertiesPtrOutput
}

FirewallPolicyPolicyVariablesPropertiesPtrInput is an input type that accepts FirewallPolicyPolicyVariablesPropertiesArgs, FirewallPolicyPolicyVariablesPropertiesPtr and FirewallPolicyPolicyVariablesPropertiesPtrOutput values. You can construct a concrete instance of `FirewallPolicyPolicyVariablesPropertiesPtrInput` via:

        FirewallPolicyPolicyVariablesPropertiesArgs{...}

or:

        nil

type FirewallPolicyPolicyVariablesPropertiesPtrOutput added in v0.61.0

type FirewallPolicyPolicyVariablesPropertiesPtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyPolicyVariablesPropertiesPtrOutput) Elem added in v0.61.0

func (FirewallPolicyPolicyVariablesPropertiesPtrOutput) ElementType added in v0.61.0

func (FirewallPolicyPolicyVariablesPropertiesPtrOutput) RuleVariables added in v0.61.0

func (FirewallPolicyPolicyVariablesPropertiesPtrOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutput added in v0.61.0

func (o FirewallPolicyPolicyVariablesPropertiesPtrOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutput() FirewallPolicyPolicyVariablesPropertiesPtrOutput

func (FirewallPolicyPolicyVariablesPropertiesPtrOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutputWithContext added in v0.61.0

func (o FirewallPolicyPolicyVariablesPropertiesPtrOutput) ToFirewallPolicyPolicyVariablesPropertiesPtrOutputWithContext(ctx context.Context) FirewallPolicyPolicyVariablesPropertiesPtrOutput

type FirewallPolicyPublishMetricAction

type FirewallPolicyPublishMetricAction struct {
	Dimensions []FirewallPolicyDimension `pulumi:"dimensions"`
}

type FirewallPolicyPublishMetricActionArgs

type FirewallPolicyPublishMetricActionArgs struct {
	Dimensions FirewallPolicyDimensionArrayInput `pulumi:"dimensions"`
}

func (FirewallPolicyPublishMetricActionArgs) ElementType

func (FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionOutput

func (i FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionOutput() FirewallPolicyPublishMetricActionOutput

func (FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionOutputWithContext

func (i FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionOutputWithContext(ctx context.Context) FirewallPolicyPublishMetricActionOutput

func (FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionPtrOutput

func (i FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionPtrOutput() FirewallPolicyPublishMetricActionPtrOutput

func (FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionPtrOutputWithContext

func (i FirewallPolicyPublishMetricActionArgs) ToFirewallPolicyPublishMetricActionPtrOutputWithContext(ctx context.Context) FirewallPolicyPublishMetricActionPtrOutput

type FirewallPolicyPublishMetricActionInput

type FirewallPolicyPublishMetricActionInput interface {
	pulumi.Input

	ToFirewallPolicyPublishMetricActionOutput() FirewallPolicyPublishMetricActionOutput
	ToFirewallPolicyPublishMetricActionOutputWithContext(context.Context) FirewallPolicyPublishMetricActionOutput
}

FirewallPolicyPublishMetricActionInput is an input type that accepts FirewallPolicyPublishMetricActionArgs and FirewallPolicyPublishMetricActionOutput values. You can construct a concrete instance of `FirewallPolicyPublishMetricActionInput` via:

FirewallPolicyPublishMetricActionArgs{...}

type FirewallPolicyPublishMetricActionOutput

type FirewallPolicyPublishMetricActionOutput struct{ *pulumi.OutputState }

func (FirewallPolicyPublishMetricActionOutput) Dimensions

func (FirewallPolicyPublishMetricActionOutput) ElementType

func (FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionOutput

func (o FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionOutput() FirewallPolicyPublishMetricActionOutput

func (FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionOutputWithContext

func (o FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionOutputWithContext(ctx context.Context) FirewallPolicyPublishMetricActionOutput

func (FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionPtrOutput

func (o FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionPtrOutput() FirewallPolicyPublishMetricActionPtrOutput

func (FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionPtrOutputWithContext

func (o FirewallPolicyPublishMetricActionOutput) ToFirewallPolicyPublishMetricActionPtrOutputWithContext(ctx context.Context) FirewallPolicyPublishMetricActionPtrOutput

type FirewallPolicyPublishMetricActionPtrInput

type FirewallPolicyPublishMetricActionPtrInput interface {
	pulumi.Input

	ToFirewallPolicyPublishMetricActionPtrOutput() FirewallPolicyPublishMetricActionPtrOutput
	ToFirewallPolicyPublishMetricActionPtrOutputWithContext(context.Context) FirewallPolicyPublishMetricActionPtrOutput
}

FirewallPolicyPublishMetricActionPtrInput is an input type that accepts FirewallPolicyPublishMetricActionArgs, FirewallPolicyPublishMetricActionPtr and FirewallPolicyPublishMetricActionPtrOutput values. You can construct a concrete instance of `FirewallPolicyPublishMetricActionPtrInput` via:

        FirewallPolicyPublishMetricActionArgs{...}

or:

        nil

type FirewallPolicyPublishMetricActionPtrOutput

type FirewallPolicyPublishMetricActionPtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyPublishMetricActionPtrOutput) Dimensions

func (FirewallPolicyPublishMetricActionPtrOutput) Elem

func (FirewallPolicyPublishMetricActionPtrOutput) ElementType

func (FirewallPolicyPublishMetricActionPtrOutput) ToFirewallPolicyPublishMetricActionPtrOutput

func (o FirewallPolicyPublishMetricActionPtrOutput) ToFirewallPolicyPublishMetricActionPtrOutput() FirewallPolicyPublishMetricActionPtrOutput

func (FirewallPolicyPublishMetricActionPtrOutput) ToFirewallPolicyPublishMetricActionPtrOutputWithContext

func (o FirewallPolicyPublishMetricActionPtrOutput) ToFirewallPolicyPublishMetricActionPtrOutputWithContext(ctx context.Context) FirewallPolicyPublishMetricActionPtrOutput

type FirewallPolicyRuleOrder added in v0.3.0

type FirewallPolicyRuleOrder string

func (FirewallPolicyRuleOrder) ElementType added in v0.3.0

func (FirewallPolicyRuleOrder) ElementType() reflect.Type

func (FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderOutput added in v0.3.0

func (e FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderOutput() FirewallPolicyRuleOrderOutput

func (FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderOutputWithContext added in v0.3.0

func (e FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderOutputWithContext(ctx context.Context) FirewallPolicyRuleOrderOutput

func (FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderPtrOutput added in v0.3.0

func (e FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderPtrOutput() FirewallPolicyRuleOrderPtrOutput

func (FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderPtrOutputWithContext added in v0.3.0

func (e FirewallPolicyRuleOrder) ToFirewallPolicyRuleOrderPtrOutputWithContext(ctx context.Context) FirewallPolicyRuleOrderPtrOutput

func (FirewallPolicyRuleOrder) ToStringOutput added in v0.3.0

func (e FirewallPolicyRuleOrder) ToStringOutput() pulumi.StringOutput

func (FirewallPolicyRuleOrder) ToStringOutputWithContext added in v0.3.0

func (e FirewallPolicyRuleOrder) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (FirewallPolicyRuleOrder) ToStringPtrOutput added in v0.3.0

func (e FirewallPolicyRuleOrder) ToStringPtrOutput() pulumi.StringPtrOutput

func (FirewallPolicyRuleOrder) ToStringPtrOutputWithContext added in v0.3.0

func (e FirewallPolicyRuleOrder) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type FirewallPolicyRuleOrderInput added in v0.3.0

type FirewallPolicyRuleOrderInput interface {
	pulumi.Input

	ToFirewallPolicyRuleOrderOutput() FirewallPolicyRuleOrderOutput
	ToFirewallPolicyRuleOrderOutputWithContext(context.Context) FirewallPolicyRuleOrderOutput
}

FirewallPolicyRuleOrderInput is an input type that accepts values of the FirewallPolicyRuleOrder enum A concrete instance of `FirewallPolicyRuleOrderInput` can be one of the following:

FirewallPolicyRuleOrderDefaultActionOrder
FirewallPolicyRuleOrderStrictOrder

type FirewallPolicyRuleOrderOutput added in v0.3.0

type FirewallPolicyRuleOrderOutput struct{ *pulumi.OutputState }

func (FirewallPolicyRuleOrderOutput) ElementType added in v0.3.0

func (FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderOutput added in v0.3.0

func (o FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderOutput() FirewallPolicyRuleOrderOutput

func (FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderOutputWithContext added in v0.3.0

func (o FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderOutputWithContext(ctx context.Context) FirewallPolicyRuleOrderOutput

func (FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderPtrOutput added in v0.3.0

func (o FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderPtrOutput() FirewallPolicyRuleOrderPtrOutput

func (FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderPtrOutputWithContext added in v0.3.0

func (o FirewallPolicyRuleOrderOutput) ToFirewallPolicyRuleOrderPtrOutputWithContext(ctx context.Context) FirewallPolicyRuleOrderPtrOutput

func (FirewallPolicyRuleOrderOutput) ToStringOutput added in v0.3.0

func (FirewallPolicyRuleOrderOutput) ToStringOutputWithContext added in v0.3.0

func (o FirewallPolicyRuleOrderOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (FirewallPolicyRuleOrderOutput) ToStringPtrOutput added in v0.3.0

func (FirewallPolicyRuleOrderOutput) ToStringPtrOutputWithContext added in v0.3.0

func (o FirewallPolicyRuleOrderOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type FirewallPolicyRuleOrderPtrInput added in v0.3.0

type FirewallPolicyRuleOrderPtrInput interface {
	pulumi.Input

	ToFirewallPolicyRuleOrderPtrOutput() FirewallPolicyRuleOrderPtrOutput
	ToFirewallPolicyRuleOrderPtrOutputWithContext(context.Context) FirewallPolicyRuleOrderPtrOutput
}

func FirewallPolicyRuleOrderPtr added in v0.3.0

func FirewallPolicyRuleOrderPtr(v string) FirewallPolicyRuleOrderPtrInput

type FirewallPolicyRuleOrderPtrOutput added in v0.3.0

type FirewallPolicyRuleOrderPtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyRuleOrderPtrOutput) Elem added in v0.3.0

func (FirewallPolicyRuleOrderPtrOutput) ElementType added in v0.3.0

func (FirewallPolicyRuleOrderPtrOutput) ToFirewallPolicyRuleOrderPtrOutput added in v0.3.0

func (o FirewallPolicyRuleOrderPtrOutput) ToFirewallPolicyRuleOrderPtrOutput() FirewallPolicyRuleOrderPtrOutput

func (FirewallPolicyRuleOrderPtrOutput) ToFirewallPolicyRuleOrderPtrOutputWithContext added in v0.3.0

func (o FirewallPolicyRuleOrderPtrOutput) ToFirewallPolicyRuleOrderPtrOutputWithContext(ctx context.Context) FirewallPolicyRuleOrderPtrOutput

func (FirewallPolicyRuleOrderPtrOutput) ToStringPtrOutput added in v0.3.0

func (FirewallPolicyRuleOrderPtrOutput) ToStringPtrOutputWithContext added in v0.3.0

func (o FirewallPolicyRuleOrderPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type FirewallPolicyState

type FirewallPolicyState struct {
}

func (FirewallPolicyState) ElementType

func (FirewallPolicyState) ElementType() reflect.Type

type FirewallPolicyStatefulEngineOptions added in v0.3.0

type FirewallPolicyStatefulEngineOptions struct {
	// Indicates how to manage the order of stateful rule evaluation for the policy. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .
	RuleOrder *FirewallPolicyRuleOrder `pulumi:"ruleOrder"`
	// Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.
	//
	// - `DROP` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior.
	// - `CONTINUE` - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to `drop http` traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a `flow:stateless` rule would still match, as would the `aws:drop_strict` default action.
	// - `REJECT` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.
	StreamExceptionPolicy *FirewallPolicyStreamExceptionPolicy `pulumi:"streamExceptionPolicy"`
}

type FirewallPolicyStatefulEngineOptionsArgs added in v0.3.0

type FirewallPolicyStatefulEngineOptionsArgs struct {
	// Indicates how to manage the order of stateful rule evaluation for the policy. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .
	RuleOrder FirewallPolicyRuleOrderPtrInput `pulumi:"ruleOrder"`
	// Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.
	//
	// - `DROP` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior.
	// - `CONTINUE` - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to `drop http` traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a `flow:stateless` rule would still match, as would the `aws:drop_strict` default action.
	// - `REJECT` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.
	StreamExceptionPolicy FirewallPolicyStreamExceptionPolicyPtrInput `pulumi:"streamExceptionPolicy"`
}

func (FirewallPolicyStatefulEngineOptionsArgs) ElementType added in v0.3.0

func (FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsOutput added in v0.3.0

func (i FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsOutput() FirewallPolicyStatefulEngineOptionsOutput

func (FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsOutputWithContext added in v0.3.0

func (i FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsOutputWithContext(ctx context.Context) FirewallPolicyStatefulEngineOptionsOutput

func (FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsPtrOutput added in v0.3.0

func (i FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsPtrOutput() FirewallPolicyStatefulEngineOptionsPtrOutput

func (FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsPtrOutputWithContext added in v0.3.0

func (i FirewallPolicyStatefulEngineOptionsArgs) ToFirewallPolicyStatefulEngineOptionsPtrOutputWithContext(ctx context.Context) FirewallPolicyStatefulEngineOptionsPtrOutput

type FirewallPolicyStatefulEngineOptionsInput added in v0.3.0

type FirewallPolicyStatefulEngineOptionsInput interface {
	pulumi.Input

	ToFirewallPolicyStatefulEngineOptionsOutput() FirewallPolicyStatefulEngineOptionsOutput
	ToFirewallPolicyStatefulEngineOptionsOutputWithContext(context.Context) FirewallPolicyStatefulEngineOptionsOutput
}

FirewallPolicyStatefulEngineOptionsInput is an input type that accepts FirewallPolicyStatefulEngineOptionsArgs and FirewallPolicyStatefulEngineOptionsOutput values. You can construct a concrete instance of `FirewallPolicyStatefulEngineOptionsInput` via:

FirewallPolicyStatefulEngineOptionsArgs{...}

type FirewallPolicyStatefulEngineOptionsOutput added in v0.3.0

type FirewallPolicyStatefulEngineOptionsOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatefulEngineOptionsOutput) ElementType added in v0.3.0

func (FirewallPolicyStatefulEngineOptionsOutput) RuleOrder added in v0.3.0

Indicates how to manage the order of stateful rule evaluation for the policy. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .

func (FirewallPolicyStatefulEngineOptionsOutput) StreamExceptionPolicy added in v0.46.0

Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.

- `DROP` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior. - `CONTINUE` - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to `drop http` traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a `flow:stateless` rule would still match, as would the `aws:drop_strict` default action. - `REJECT` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.

func (FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsOutput added in v0.3.0

func (o FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsOutput() FirewallPolicyStatefulEngineOptionsOutput

func (FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsOutputWithContext added in v0.3.0

func (o FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsOutputWithContext(ctx context.Context) FirewallPolicyStatefulEngineOptionsOutput

func (FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutput added in v0.3.0

func (o FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutput() FirewallPolicyStatefulEngineOptionsPtrOutput

func (FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutputWithContext added in v0.3.0

func (o FirewallPolicyStatefulEngineOptionsOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutputWithContext(ctx context.Context) FirewallPolicyStatefulEngineOptionsPtrOutput

type FirewallPolicyStatefulEngineOptionsPtrInput added in v0.3.0

type FirewallPolicyStatefulEngineOptionsPtrInput interface {
	pulumi.Input

	ToFirewallPolicyStatefulEngineOptionsPtrOutput() FirewallPolicyStatefulEngineOptionsPtrOutput
	ToFirewallPolicyStatefulEngineOptionsPtrOutputWithContext(context.Context) FirewallPolicyStatefulEngineOptionsPtrOutput
}

FirewallPolicyStatefulEngineOptionsPtrInput is an input type that accepts FirewallPolicyStatefulEngineOptionsArgs, FirewallPolicyStatefulEngineOptionsPtr and FirewallPolicyStatefulEngineOptionsPtrOutput values. You can construct a concrete instance of `FirewallPolicyStatefulEngineOptionsPtrInput` via:

        FirewallPolicyStatefulEngineOptionsArgs{...}

or:

        nil

type FirewallPolicyStatefulEngineOptionsPtrOutput added in v0.3.0

type FirewallPolicyStatefulEngineOptionsPtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatefulEngineOptionsPtrOutput) Elem added in v0.3.0

func (FirewallPolicyStatefulEngineOptionsPtrOutput) ElementType added in v0.3.0

func (FirewallPolicyStatefulEngineOptionsPtrOutput) RuleOrder added in v0.3.0

Indicates how to manage the order of stateful rule evaluation for the policy. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .

func (FirewallPolicyStatefulEngineOptionsPtrOutput) StreamExceptionPolicy added in v0.46.0

Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.

- `DROP` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior. - `CONTINUE` - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to `drop http` traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a `flow:stateless` rule would still match, as would the `aws:drop_strict` default action. - `REJECT` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.

func (FirewallPolicyStatefulEngineOptionsPtrOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutput added in v0.3.0

func (o FirewallPolicyStatefulEngineOptionsPtrOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutput() FirewallPolicyStatefulEngineOptionsPtrOutput

func (FirewallPolicyStatefulEngineOptionsPtrOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutputWithContext added in v0.3.0

func (o FirewallPolicyStatefulEngineOptionsPtrOutput) ToFirewallPolicyStatefulEngineOptionsPtrOutputWithContext(ctx context.Context) FirewallPolicyStatefulEngineOptionsPtrOutput

type FirewallPolicyStatefulRuleGroupOverride added in v0.39.0

type FirewallPolicyStatefulRuleGroupOverride struct {
	// The action that changes the rule group from `DROP` to `ALERT` . This only applies to managed rule groups.
	Action *FirewallPolicyOverrideAction `pulumi:"action"`
}

type FirewallPolicyStatefulRuleGroupOverrideArgs added in v0.39.0

type FirewallPolicyStatefulRuleGroupOverrideArgs struct {
	// The action that changes the rule group from `DROP` to `ALERT` . This only applies to managed rule groups.
	Action FirewallPolicyOverrideActionPtrInput `pulumi:"action"`
}

func (FirewallPolicyStatefulRuleGroupOverrideArgs) ElementType added in v0.39.0

func (FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverrideOutput added in v0.39.0

func (i FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverrideOutput() FirewallPolicyStatefulRuleGroupOverrideOutput

func (FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverrideOutputWithContext added in v0.39.0

func (i FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverrideOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupOverrideOutput

func (FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverridePtrOutput added in v0.39.0

func (i FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverridePtrOutput() FirewallPolicyStatefulRuleGroupOverridePtrOutput

func (FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverridePtrOutputWithContext added in v0.39.0

func (i FirewallPolicyStatefulRuleGroupOverrideArgs) ToFirewallPolicyStatefulRuleGroupOverridePtrOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupOverridePtrOutput

type FirewallPolicyStatefulRuleGroupOverrideInput added in v0.39.0

type FirewallPolicyStatefulRuleGroupOverrideInput interface {
	pulumi.Input

	ToFirewallPolicyStatefulRuleGroupOverrideOutput() FirewallPolicyStatefulRuleGroupOverrideOutput
	ToFirewallPolicyStatefulRuleGroupOverrideOutputWithContext(context.Context) FirewallPolicyStatefulRuleGroupOverrideOutput
}

FirewallPolicyStatefulRuleGroupOverrideInput is an input type that accepts FirewallPolicyStatefulRuleGroupOverrideArgs and FirewallPolicyStatefulRuleGroupOverrideOutput values. You can construct a concrete instance of `FirewallPolicyStatefulRuleGroupOverrideInput` via:

FirewallPolicyStatefulRuleGroupOverrideArgs{...}

type FirewallPolicyStatefulRuleGroupOverrideOutput added in v0.39.0

type FirewallPolicyStatefulRuleGroupOverrideOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatefulRuleGroupOverrideOutput) Action added in v0.39.0

The action that changes the rule group from `DROP` to `ALERT` . This only applies to managed rule groups.

func (FirewallPolicyStatefulRuleGroupOverrideOutput) ElementType added in v0.39.0

func (FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverrideOutput added in v0.39.0

func (o FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverrideOutput() FirewallPolicyStatefulRuleGroupOverrideOutput

func (FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverrideOutputWithContext added in v0.39.0

func (o FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverrideOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupOverrideOutput

func (FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutput added in v0.39.0

func (o FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutput() FirewallPolicyStatefulRuleGroupOverridePtrOutput

func (FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutputWithContext added in v0.39.0

func (o FirewallPolicyStatefulRuleGroupOverrideOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupOverridePtrOutput

type FirewallPolicyStatefulRuleGroupOverridePtrInput added in v0.39.0

type FirewallPolicyStatefulRuleGroupOverridePtrInput interface {
	pulumi.Input

	ToFirewallPolicyStatefulRuleGroupOverridePtrOutput() FirewallPolicyStatefulRuleGroupOverridePtrOutput
	ToFirewallPolicyStatefulRuleGroupOverridePtrOutputWithContext(context.Context) FirewallPolicyStatefulRuleGroupOverridePtrOutput
}

FirewallPolicyStatefulRuleGroupOverridePtrInput is an input type that accepts FirewallPolicyStatefulRuleGroupOverrideArgs, FirewallPolicyStatefulRuleGroupOverridePtr and FirewallPolicyStatefulRuleGroupOverridePtrOutput values. You can construct a concrete instance of `FirewallPolicyStatefulRuleGroupOverridePtrInput` via:

        FirewallPolicyStatefulRuleGroupOverrideArgs{...}

or:

        nil

type FirewallPolicyStatefulRuleGroupOverridePtrOutput added in v0.39.0

type FirewallPolicyStatefulRuleGroupOverridePtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatefulRuleGroupOverridePtrOutput) Action added in v0.39.0

The action that changes the rule group from `DROP` to `ALERT` . This only applies to managed rule groups.

func (FirewallPolicyStatefulRuleGroupOverridePtrOutput) Elem added in v0.39.0

func (FirewallPolicyStatefulRuleGroupOverridePtrOutput) ElementType added in v0.39.0

func (FirewallPolicyStatefulRuleGroupOverridePtrOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutput added in v0.39.0

func (o FirewallPolicyStatefulRuleGroupOverridePtrOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutput() FirewallPolicyStatefulRuleGroupOverridePtrOutput

func (FirewallPolicyStatefulRuleGroupOverridePtrOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutputWithContext added in v0.39.0

func (o FirewallPolicyStatefulRuleGroupOverridePtrOutput) ToFirewallPolicyStatefulRuleGroupOverridePtrOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupOverridePtrOutput

type FirewallPolicyStatefulRuleGroupReference

type FirewallPolicyStatefulRuleGroupReference struct {
	// The action that allows the policy owner to override the behavior of the rule group within a policy.
	Override *FirewallPolicyStatefulRuleGroupOverride `pulumi:"override"`
	// An integer setting that indicates the order in which to run the stateful rule groups in a single `FirewallPolicy` . This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings.
	//
	// Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
	//
	// You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on.
	Priority *int `pulumi:"priority"`
	// The Amazon Resource Name (ARN) of the stateful rule group.
	ResourceArn string `pulumi:"resourceArn"`
}

type FirewallPolicyStatefulRuleGroupReferenceArgs

type FirewallPolicyStatefulRuleGroupReferenceArgs struct {
	// The action that allows the policy owner to override the behavior of the rule group within a policy.
	Override FirewallPolicyStatefulRuleGroupOverridePtrInput `pulumi:"override"`
	// An integer setting that indicates the order in which to run the stateful rule groups in a single `FirewallPolicy` . This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings.
	//
	// Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
	//
	// You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on.
	Priority pulumi.IntPtrInput `pulumi:"priority"`
	// The Amazon Resource Name (ARN) of the stateful rule group.
	ResourceArn pulumi.StringInput `pulumi:"resourceArn"`
}

func (FirewallPolicyStatefulRuleGroupReferenceArgs) ElementType

func (FirewallPolicyStatefulRuleGroupReferenceArgs) ToFirewallPolicyStatefulRuleGroupReferenceOutput

func (i FirewallPolicyStatefulRuleGroupReferenceArgs) ToFirewallPolicyStatefulRuleGroupReferenceOutput() FirewallPolicyStatefulRuleGroupReferenceOutput

func (FirewallPolicyStatefulRuleGroupReferenceArgs) ToFirewallPolicyStatefulRuleGroupReferenceOutputWithContext

func (i FirewallPolicyStatefulRuleGroupReferenceArgs) ToFirewallPolicyStatefulRuleGroupReferenceOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupReferenceOutput

type FirewallPolicyStatefulRuleGroupReferenceArray

type FirewallPolicyStatefulRuleGroupReferenceArray []FirewallPolicyStatefulRuleGroupReferenceInput

func (FirewallPolicyStatefulRuleGroupReferenceArray) ElementType

func (FirewallPolicyStatefulRuleGroupReferenceArray) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutput

func (i FirewallPolicyStatefulRuleGroupReferenceArray) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutput() FirewallPolicyStatefulRuleGroupReferenceArrayOutput

func (FirewallPolicyStatefulRuleGroupReferenceArray) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutputWithContext

func (i FirewallPolicyStatefulRuleGroupReferenceArray) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupReferenceArrayOutput

type FirewallPolicyStatefulRuleGroupReferenceArrayInput

type FirewallPolicyStatefulRuleGroupReferenceArrayInput interface {
	pulumi.Input

	ToFirewallPolicyStatefulRuleGroupReferenceArrayOutput() FirewallPolicyStatefulRuleGroupReferenceArrayOutput
	ToFirewallPolicyStatefulRuleGroupReferenceArrayOutputWithContext(context.Context) FirewallPolicyStatefulRuleGroupReferenceArrayOutput
}

FirewallPolicyStatefulRuleGroupReferenceArrayInput is an input type that accepts FirewallPolicyStatefulRuleGroupReferenceArray and FirewallPolicyStatefulRuleGroupReferenceArrayOutput values. You can construct a concrete instance of `FirewallPolicyStatefulRuleGroupReferenceArrayInput` via:

FirewallPolicyStatefulRuleGroupReferenceArray{ FirewallPolicyStatefulRuleGroupReferenceArgs{...} }

type FirewallPolicyStatefulRuleGroupReferenceArrayOutput

type FirewallPolicyStatefulRuleGroupReferenceArrayOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatefulRuleGroupReferenceArrayOutput) ElementType

func (FirewallPolicyStatefulRuleGroupReferenceArrayOutput) Index

func (FirewallPolicyStatefulRuleGroupReferenceArrayOutput) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutput

func (o FirewallPolicyStatefulRuleGroupReferenceArrayOutput) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutput() FirewallPolicyStatefulRuleGroupReferenceArrayOutput

func (FirewallPolicyStatefulRuleGroupReferenceArrayOutput) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutputWithContext

func (o FirewallPolicyStatefulRuleGroupReferenceArrayOutput) ToFirewallPolicyStatefulRuleGroupReferenceArrayOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupReferenceArrayOutput

type FirewallPolicyStatefulRuleGroupReferenceInput

type FirewallPolicyStatefulRuleGroupReferenceInput interface {
	pulumi.Input

	ToFirewallPolicyStatefulRuleGroupReferenceOutput() FirewallPolicyStatefulRuleGroupReferenceOutput
	ToFirewallPolicyStatefulRuleGroupReferenceOutputWithContext(context.Context) FirewallPolicyStatefulRuleGroupReferenceOutput
}

FirewallPolicyStatefulRuleGroupReferenceInput is an input type that accepts FirewallPolicyStatefulRuleGroupReferenceArgs and FirewallPolicyStatefulRuleGroupReferenceOutput values. You can construct a concrete instance of `FirewallPolicyStatefulRuleGroupReferenceInput` via:

FirewallPolicyStatefulRuleGroupReferenceArgs{...}

type FirewallPolicyStatefulRuleGroupReferenceOutput

type FirewallPolicyStatefulRuleGroupReferenceOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatefulRuleGroupReferenceOutput) ElementType

func (FirewallPolicyStatefulRuleGroupReferenceOutput) Override added in v0.39.0

The action that allows the policy owner to override the behavior of the rule group within a policy.

func (FirewallPolicyStatefulRuleGroupReferenceOutput) Priority added in v0.3.0

An integer setting that indicates the order in which to run the stateful rule groups in a single `FirewallPolicy` . This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings.

Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.

You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on.

func (FirewallPolicyStatefulRuleGroupReferenceOutput) ResourceArn

The Amazon Resource Name (ARN) of the stateful rule group.

func (FirewallPolicyStatefulRuleGroupReferenceOutput) ToFirewallPolicyStatefulRuleGroupReferenceOutput

func (o FirewallPolicyStatefulRuleGroupReferenceOutput) ToFirewallPolicyStatefulRuleGroupReferenceOutput() FirewallPolicyStatefulRuleGroupReferenceOutput

func (FirewallPolicyStatefulRuleGroupReferenceOutput) ToFirewallPolicyStatefulRuleGroupReferenceOutputWithContext

func (o FirewallPolicyStatefulRuleGroupReferenceOutput) ToFirewallPolicyStatefulRuleGroupReferenceOutputWithContext(ctx context.Context) FirewallPolicyStatefulRuleGroupReferenceOutput

type FirewallPolicyStatelessRuleGroupReference

type FirewallPolicyStatelessRuleGroupReference struct {
	// An integer setting that indicates the order in which to run the stateless rule groups in a single `FirewallPolicy` . Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
	Priority int `pulumi:"priority"`
	// The Amazon Resource Name (ARN) of the stateless rule group.
	ResourceArn string `pulumi:"resourceArn"`
}

type FirewallPolicyStatelessRuleGroupReferenceArgs

type FirewallPolicyStatelessRuleGroupReferenceArgs struct {
	// An integer setting that indicates the order in which to run the stateless rule groups in a single `FirewallPolicy` . Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.
	Priority pulumi.IntInput `pulumi:"priority"`
	// The Amazon Resource Name (ARN) of the stateless rule group.
	ResourceArn pulumi.StringInput `pulumi:"resourceArn"`
}

func (FirewallPolicyStatelessRuleGroupReferenceArgs) ElementType

func (FirewallPolicyStatelessRuleGroupReferenceArgs) ToFirewallPolicyStatelessRuleGroupReferenceOutput

func (i FirewallPolicyStatelessRuleGroupReferenceArgs) ToFirewallPolicyStatelessRuleGroupReferenceOutput() FirewallPolicyStatelessRuleGroupReferenceOutput

func (FirewallPolicyStatelessRuleGroupReferenceArgs) ToFirewallPolicyStatelessRuleGroupReferenceOutputWithContext

func (i FirewallPolicyStatelessRuleGroupReferenceArgs) ToFirewallPolicyStatelessRuleGroupReferenceOutputWithContext(ctx context.Context) FirewallPolicyStatelessRuleGroupReferenceOutput

type FirewallPolicyStatelessRuleGroupReferenceArray

type FirewallPolicyStatelessRuleGroupReferenceArray []FirewallPolicyStatelessRuleGroupReferenceInput

func (FirewallPolicyStatelessRuleGroupReferenceArray) ElementType

func (FirewallPolicyStatelessRuleGroupReferenceArray) ToFirewallPolicyStatelessRuleGroupReferenceArrayOutput

func (i FirewallPolicyStatelessRuleGroupReferenceArray) ToFirewallPolicyStatelessRuleGroupReferenceArrayOutput() FirewallPolicyStatelessRuleGroupReferenceArrayOutput

func (FirewallPolicyStatelessRuleGroupReferenceArray) ToFirewallPolicyStatelessRuleGroupReferenceArrayOutputWithContext

func (i FirewallPolicyStatelessRuleGroupReferenceArray) ToFirewallPolicyStatelessRuleGroupReferenceArrayOutputWithContext(ctx context.Context) FirewallPolicyStatelessRuleGroupReferenceArrayOutput

type FirewallPolicyStatelessRuleGroupReferenceArrayInput

type FirewallPolicyStatelessRuleGroupReferenceArrayInput interface {
	pulumi.Input

	ToFirewallPolicyStatelessRuleGroupReferenceArrayOutput() FirewallPolicyStatelessRuleGroupReferenceArrayOutput
	ToFirewallPolicyStatelessRuleGroupReferenceArrayOutputWithContext(context.Context) FirewallPolicyStatelessRuleGroupReferenceArrayOutput
}

FirewallPolicyStatelessRuleGroupReferenceArrayInput is an input type that accepts FirewallPolicyStatelessRuleGroupReferenceArray and FirewallPolicyStatelessRuleGroupReferenceArrayOutput values. You can construct a concrete instance of `FirewallPolicyStatelessRuleGroupReferenceArrayInput` via:

FirewallPolicyStatelessRuleGroupReferenceArray{ FirewallPolicyStatelessRuleGroupReferenceArgs{...} }

type FirewallPolicyStatelessRuleGroupReferenceArrayOutput

type FirewallPolicyStatelessRuleGroupReferenceArrayOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatelessRuleGroupReferenceArrayOutput) ElementType

func (FirewallPolicyStatelessRuleGroupReferenceArrayOutput) Index

func (FirewallPolicyStatelessRuleGroupReferenceArrayOutput) ToFirewallPolicyStatelessRuleGroupReferenceArrayOutput

func (FirewallPolicyStatelessRuleGroupReferenceArrayOutput) ToFirewallPolicyStatelessRuleGroupReferenceArrayOutputWithContext

func (o FirewallPolicyStatelessRuleGroupReferenceArrayOutput) ToFirewallPolicyStatelessRuleGroupReferenceArrayOutputWithContext(ctx context.Context) FirewallPolicyStatelessRuleGroupReferenceArrayOutput

type FirewallPolicyStatelessRuleGroupReferenceInput

type FirewallPolicyStatelessRuleGroupReferenceInput interface {
	pulumi.Input

	ToFirewallPolicyStatelessRuleGroupReferenceOutput() FirewallPolicyStatelessRuleGroupReferenceOutput
	ToFirewallPolicyStatelessRuleGroupReferenceOutputWithContext(context.Context) FirewallPolicyStatelessRuleGroupReferenceOutput
}

FirewallPolicyStatelessRuleGroupReferenceInput is an input type that accepts FirewallPolicyStatelessRuleGroupReferenceArgs and FirewallPolicyStatelessRuleGroupReferenceOutput values. You can construct a concrete instance of `FirewallPolicyStatelessRuleGroupReferenceInput` via:

FirewallPolicyStatelessRuleGroupReferenceArgs{...}

type FirewallPolicyStatelessRuleGroupReferenceOutput

type FirewallPolicyStatelessRuleGroupReferenceOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStatelessRuleGroupReferenceOutput) ElementType

func (FirewallPolicyStatelessRuleGroupReferenceOutput) Priority

An integer setting that indicates the order in which to run the stateless rule groups in a single `FirewallPolicy` . Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.

func (FirewallPolicyStatelessRuleGroupReferenceOutput) ResourceArn

The Amazon Resource Name (ARN) of the stateless rule group.

func (FirewallPolicyStatelessRuleGroupReferenceOutput) ToFirewallPolicyStatelessRuleGroupReferenceOutput

func (o FirewallPolicyStatelessRuleGroupReferenceOutput) ToFirewallPolicyStatelessRuleGroupReferenceOutput() FirewallPolicyStatelessRuleGroupReferenceOutput

func (FirewallPolicyStatelessRuleGroupReferenceOutput) ToFirewallPolicyStatelessRuleGroupReferenceOutputWithContext

func (o FirewallPolicyStatelessRuleGroupReferenceOutput) ToFirewallPolicyStatelessRuleGroupReferenceOutputWithContext(ctx context.Context) FirewallPolicyStatelessRuleGroupReferenceOutput

type FirewallPolicyStreamExceptionPolicy added in v0.46.0

type FirewallPolicyStreamExceptionPolicy string

func (FirewallPolicyStreamExceptionPolicy) ElementType added in v0.46.0

func (FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyOutput added in v0.46.0

func (e FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyOutput() FirewallPolicyStreamExceptionPolicyOutput

func (FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyOutputWithContext added in v0.46.0

func (e FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyOutputWithContext(ctx context.Context) FirewallPolicyStreamExceptionPolicyOutput

func (FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyPtrOutput added in v0.46.0

func (e FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyPtrOutput() FirewallPolicyStreamExceptionPolicyPtrOutput

func (FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyPtrOutputWithContext added in v0.46.0

func (e FirewallPolicyStreamExceptionPolicy) ToFirewallPolicyStreamExceptionPolicyPtrOutputWithContext(ctx context.Context) FirewallPolicyStreamExceptionPolicyPtrOutput

func (FirewallPolicyStreamExceptionPolicy) ToStringOutput added in v0.46.0

func (FirewallPolicyStreamExceptionPolicy) ToStringOutputWithContext added in v0.46.0

func (e FirewallPolicyStreamExceptionPolicy) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (FirewallPolicyStreamExceptionPolicy) ToStringPtrOutput added in v0.46.0

func (FirewallPolicyStreamExceptionPolicy) ToStringPtrOutputWithContext added in v0.46.0

func (e FirewallPolicyStreamExceptionPolicy) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type FirewallPolicyStreamExceptionPolicyInput added in v0.46.0

type FirewallPolicyStreamExceptionPolicyInput interface {
	pulumi.Input

	ToFirewallPolicyStreamExceptionPolicyOutput() FirewallPolicyStreamExceptionPolicyOutput
	ToFirewallPolicyStreamExceptionPolicyOutputWithContext(context.Context) FirewallPolicyStreamExceptionPolicyOutput
}

FirewallPolicyStreamExceptionPolicyInput is an input type that accepts values of the FirewallPolicyStreamExceptionPolicy enum A concrete instance of `FirewallPolicyStreamExceptionPolicyInput` can be one of the following:

FirewallPolicyStreamExceptionPolicyDrop
FirewallPolicyStreamExceptionPolicyContinue
FirewallPolicyStreamExceptionPolicyReject

type FirewallPolicyStreamExceptionPolicyOutput added in v0.46.0

type FirewallPolicyStreamExceptionPolicyOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStreamExceptionPolicyOutput) ElementType added in v0.46.0

func (FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyOutput added in v0.46.0

func (o FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyOutput() FirewallPolicyStreamExceptionPolicyOutput

func (FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyOutputWithContext added in v0.46.0

func (o FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyOutputWithContext(ctx context.Context) FirewallPolicyStreamExceptionPolicyOutput

func (FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutput added in v0.46.0

func (o FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutput() FirewallPolicyStreamExceptionPolicyPtrOutput

func (FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutputWithContext added in v0.46.0

func (o FirewallPolicyStreamExceptionPolicyOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutputWithContext(ctx context.Context) FirewallPolicyStreamExceptionPolicyPtrOutput

func (FirewallPolicyStreamExceptionPolicyOutput) ToStringOutput added in v0.46.0

func (FirewallPolicyStreamExceptionPolicyOutput) ToStringOutputWithContext added in v0.46.0

func (FirewallPolicyStreamExceptionPolicyOutput) ToStringPtrOutput added in v0.46.0

func (FirewallPolicyStreamExceptionPolicyOutput) ToStringPtrOutputWithContext added in v0.46.0

type FirewallPolicyStreamExceptionPolicyPtrInput added in v0.46.0

type FirewallPolicyStreamExceptionPolicyPtrInput interface {
	pulumi.Input

	ToFirewallPolicyStreamExceptionPolicyPtrOutput() FirewallPolicyStreamExceptionPolicyPtrOutput
	ToFirewallPolicyStreamExceptionPolicyPtrOutputWithContext(context.Context) FirewallPolicyStreamExceptionPolicyPtrOutput
}

func FirewallPolicyStreamExceptionPolicyPtr added in v0.46.0

func FirewallPolicyStreamExceptionPolicyPtr(v string) FirewallPolicyStreamExceptionPolicyPtrInput

type FirewallPolicyStreamExceptionPolicyPtrOutput added in v0.46.0

type FirewallPolicyStreamExceptionPolicyPtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyStreamExceptionPolicyPtrOutput) Elem added in v0.46.0

func (FirewallPolicyStreamExceptionPolicyPtrOutput) ElementType added in v0.46.0

func (FirewallPolicyStreamExceptionPolicyPtrOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutput added in v0.46.0

func (o FirewallPolicyStreamExceptionPolicyPtrOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutput() FirewallPolicyStreamExceptionPolicyPtrOutput

func (FirewallPolicyStreamExceptionPolicyPtrOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutputWithContext added in v0.46.0

func (o FirewallPolicyStreamExceptionPolicyPtrOutput) ToFirewallPolicyStreamExceptionPolicyPtrOutputWithContext(ctx context.Context) FirewallPolicyStreamExceptionPolicyPtrOutput

func (FirewallPolicyStreamExceptionPolicyPtrOutput) ToStringPtrOutput added in v0.46.0

func (FirewallPolicyStreamExceptionPolicyPtrOutput) ToStringPtrOutputWithContext added in v0.46.0

type FirewallPolicyTag

type FirewallPolicyTag struct {
	// The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key string `pulumi:"key"`
	// The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value string `pulumi:"value"`
}

type FirewallPolicyType added in v0.2.0

type FirewallPolicyType struct {
	// Contains variables that you can use to override default Suricata settings in your firewall policy.
	PolicyVariables *FirewallPolicyPolicyVariablesProperties `pulumi:"policyVariables"`
	// The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.
	//
	// Valid values of the stateful default action:
	//
	// - aws:drop_strict
	// - aws:drop_established
	// - aws:alert_strict
	// - aws:alert_established
	//
	// For more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html#suricata-strict-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .
	StatefulDefaultActions []string `pulumi:"statefulDefaultActions"`
	// Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.
	StatefulEngineOptions *FirewallPolicyStatefulEngineOptions `pulumi:"statefulEngineOptions"`
	// References to the stateful rule groups that are used in the policy. These define the inspection criteria in stateful rules.
	StatefulRuleGroupReferences []FirewallPolicyStatefulRuleGroupReference `pulumi:"statefulRuleGroupReferences"`
	// The custom action definitions that are available for use in the firewall policy's `StatelessDefaultActions` setting. You name each custom action that you define, and then you can use it by name in your default actions specifications.
	StatelessCustomActions []FirewallPolicyCustomAction `pulumi:"statelessCustomActions"`
	// The actions to take on a packet if it doesn't match any of the stateless rules in the policy. If you want non-matching packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .
	//
	// You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.
	//
	// For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.
	StatelessDefaultActions []string `pulumi:"statelessDefaultActions"`
	// The actions to take on a fragmented packet if it doesn't match any of the stateless rules in the policy. If you want non-matching fragmented packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .
	//
	// You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.
	//
	// For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.
	StatelessFragmentDefaultActions []string `pulumi:"statelessFragmentDefaultActions"`
	// References to the stateless rule groups that are used in the policy. These define the matching criteria in stateless rules.
	StatelessRuleGroupReferences []FirewallPolicyStatelessRuleGroupReference `pulumi:"statelessRuleGroupReferences"`
	// The Amazon Resource Name (ARN) of the TLS inspection configuration.
	TlsInspectionConfigurationArn *string `pulumi:"tlsInspectionConfigurationArn"`
}

type FirewallPolicyTypeArgs added in v0.2.0

type FirewallPolicyTypeArgs struct {
	// Contains variables that you can use to override default Suricata settings in your firewall policy.
	PolicyVariables FirewallPolicyPolicyVariablesPropertiesPtrInput `pulumi:"policyVariables"`
	// The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.
	//
	// Valid values of the stateful default action:
	//
	// - aws:drop_strict
	// - aws:drop_established
	// - aws:alert_strict
	// - aws:alert_established
	//
	// For more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html#suricata-strict-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .
	StatefulDefaultActions pulumi.StringArrayInput `pulumi:"statefulDefaultActions"`
	// Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.
	StatefulEngineOptions FirewallPolicyStatefulEngineOptionsPtrInput `pulumi:"statefulEngineOptions"`
	// References to the stateful rule groups that are used in the policy. These define the inspection criteria in stateful rules.
	StatefulRuleGroupReferences FirewallPolicyStatefulRuleGroupReferenceArrayInput `pulumi:"statefulRuleGroupReferences"`
	// The custom action definitions that are available for use in the firewall policy's `StatelessDefaultActions` setting. You name each custom action that you define, and then you can use it by name in your default actions specifications.
	StatelessCustomActions FirewallPolicyCustomActionArrayInput `pulumi:"statelessCustomActions"`
	// The actions to take on a packet if it doesn't match any of the stateless rules in the policy. If you want non-matching packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .
	//
	// You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.
	//
	// For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.
	StatelessDefaultActions pulumi.StringArrayInput `pulumi:"statelessDefaultActions"`
	// The actions to take on a fragmented packet if it doesn't match any of the stateless rules in the policy. If you want non-matching fragmented packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .
	//
	// You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.
	//
	// For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.
	StatelessFragmentDefaultActions pulumi.StringArrayInput `pulumi:"statelessFragmentDefaultActions"`
	// References to the stateless rule groups that are used in the policy. These define the matching criteria in stateless rules.
	StatelessRuleGroupReferences FirewallPolicyStatelessRuleGroupReferenceArrayInput `pulumi:"statelessRuleGroupReferences"`
	// The Amazon Resource Name (ARN) of the TLS inspection configuration.
	TlsInspectionConfigurationArn pulumi.StringPtrInput `pulumi:"tlsInspectionConfigurationArn"`
}

func (FirewallPolicyTypeArgs) ElementType added in v0.2.0

func (FirewallPolicyTypeArgs) ElementType() reflect.Type

func (FirewallPolicyTypeArgs) ToFirewallPolicyTypeOutput added in v0.2.0

func (i FirewallPolicyTypeArgs) ToFirewallPolicyTypeOutput() FirewallPolicyTypeOutput

func (FirewallPolicyTypeArgs) ToFirewallPolicyTypeOutputWithContext added in v0.2.0

func (i FirewallPolicyTypeArgs) ToFirewallPolicyTypeOutputWithContext(ctx context.Context) FirewallPolicyTypeOutput

type FirewallPolicyTypeInput added in v0.2.0

type FirewallPolicyTypeInput interface {
	pulumi.Input

	ToFirewallPolicyTypeOutput() FirewallPolicyTypeOutput
	ToFirewallPolicyTypeOutputWithContext(context.Context) FirewallPolicyTypeOutput
}

FirewallPolicyTypeInput is an input type that accepts FirewallPolicyTypeArgs and FirewallPolicyTypeOutput values. You can construct a concrete instance of `FirewallPolicyTypeInput` via:

FirewallPolicyTypeArgs{...}

type FirewallPolicyTypeOutput added in v0.2.0

type FirewallPolicyTypeOutput struct{ *pulumi.OutputState }

func (FirewallPolicyTypeOutput) ElementType added in v0.2.0

func (FirewallPolicyTypeOutput) ElementType() reflect.Type

func (FirewallPolicyTypeOutput) PolicyVariables added in v0.61.0

Contains variables that you can use to override default Suricata settings in your firewall policy.

func (FirewallPolicyTypeOutput) StatefulDefaultActions added in v0.3.0

func (o FirewallPolicyTypeOutput) StatefulDefaultActions() pulumi.StringArrayOutput

The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.

Valid values of the stateful default action:

- aws:drop_strict - aws:drop_established - aws:alert_strict - aws:alert_established

For more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html#suricata-strict-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .

func (FirewallPolicyTypeOutput) StatefulEngineOptions added in v0.3.0

Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.

func (FirewallPolicyTypeOutput) StatefulRuleGroupReferences added in v0.2.0

References to the stateful rule groups that are used in the policy. These define the inspection criteria in stateful rules.

func (FirewallPolicyTypeOutput) StatelessCustomActions added in v0.2.0

The custom action definitions that are available for use in the firewall policy's `StatelessDefaultActions` setting. You name each custom action that you define, and then you can use it by name in your default actions specifications.

func (FirewallPolicyTypeOutput) StatelessDefaultActions added in v0.2.0

func (o FirewallPolicyTypeOutput) StatelessDefaultActions() pulumi.StringArrayOutput

The actions to take on a packet if it doesn't match any of the stateless rules in the policy. If you want non-matching packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .

You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.

func (FirewallPolicyTypeOutput) StatelessFragmentDefaultActions added in v0.2.0

func (o FirewallPolicyTypeOutput) StatelessFragmentDefaultActions() pulumi.StringArrayOutput

The actions to take on a fragmented packet if it doesn't match any of the stateless rules in the policy. If you want non-matching fragmented packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .

You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.

func (FirewallPolicyTypeOutput) StatelessRuleGroupReferences added in v0.2.0

References to the stateless rule groups that are used in the policy. These define the matching criteria in stateless rules.

func (FirewallPolicyTypeOutput) TlsInspectionConfigurationArn added in v0.92.0

func (o FirewallPolicyTypeOutput) TlsInspectionConfigurationArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the TLS inspection configuration.

func (FirewallPolicyTypeOutput) ToFirewallPolicyTypeOutput added in v0.2.0

func (o FirewallPolicyTypeOutput) ToFirewallPolicyTypeOutput() FirewallPolicyTypeOutput

func (FirewallPolicyTypeOutput) ToFirewallPolicyTypeOutputWithContext added in v0.2.0

func (o FirewallPolicyTypeOutput) ToFirewallPolicyTypeOutputWithContext(ctx context.Context) FirewallPolicyTypeOutput

type FirewallPolicyTypePtrOutput added in v0.2.0

type FirewallPolicyTypePtrOutput struct{ *pulumi.OutputState }

func (FirewallPolicyTypePtrOutput) Elem added in v0.2.0

func (FirewallPolicyTypePtrOutput) ElementType added in v0.2.0

func (FirewallPolicyTypePtrOutput) PolicyVariables added in v0.61.0

Contains variables that you can use to override default Suricata settings in your firewall policy.

func (FirewallPolicyTypePtrOutput) StatefulDefaultActions added in v0.3.0

func (o FirewallPolicyTypePtrOutput) StatefulDefaultActions() pulumi.StringArrayOutput

The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.

Valid values of the stateful default action:

- aws:drop_strict - aws:drop_established - aws:alert_strict - aws:alert_established

For more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html#suricata-strict-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .

func (FirewallPolicyTypePtrOutput) StatefulEngineOptions added in v0.3.0

Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.

func (FirewallPolicyTypePtrOutput) StatefulRuleGroupReferences added in v0.2.0

References to the stateful rule groups that are used in the policy. These define the inspection criteria in stateful rules.

func (FirewallPolicyTypePtrOutput) StatelessCustomActions added in v0.2.0

The custom action definitions that are available for use in the firewall policy's `StatelessDefaultActions` setting. You name each custom action that you define, and then you can use it by name in your default actions specifications.

func (FirewallPolicyTypePtrOutput) StatelessDefaultActions added in v0.2.0

func (o FirewallPolicyTypePtrOutput) StatelessDefaultActions() pulumi.StringArrayOutput

The actions to take on a packet if it doesn't match any of the stateless rules in the policy. If you want non-matching packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .

You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.

func (FirewallPolicyTypePtrOutput) StatelessFragmentDefaultActions added in v0.2.0

func (o FirewallPolicyTypePtrOutput) StatelessFragmentDefaultActions() pulumi.StringArrayOutput

The actions to take on a fragmented packet if it doesn't match any of the stateless rules in the policy. If you want non-matching fragmented packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .

You must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.

For example, you could specify `["aws:pass"]` or you could specify `["aws:pass", "customActionName"]` . For information about compatibility, see the custom action descriptions.

func (FirewallPolicyTypePtrOutput) StatelessRuleGroupReferences added in v0.2.0

References to the stateless rule groups that are used in the policy. These define the matching criteria in stateless rules.

func (FirewallPolicyTypePtrOutput) TlsInspectionConfigurationArn added in v0.92.0

func (o FirewallPolicyTypePtrOutput) TlsInspectionConfigurationArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the TLS inspection configuration.

func (FirewallPolicyTypePtrOutput) ToFirewallPolicyTypePtrOutput added in v0.2.0

func (o FirewallPolicyTypePtrOutput) ToFirewallPolicyTypePtrOutput() FirewallPolicyTypePtrOutput

func (FirewallPolicyTypePtrOutput) ToFirewallPolicyTypePtrOutputWithContext added in v0.2.0

func (o FirewallPolicyTypePtrOutput) ToFirewallPolicyTypePtrOutputWithContext(ctx context.Context) FirewallPolicyTypePtrOutput

type FirewallState

type FirewallState struct {
}

func (FirewallState) ElementType

func (FirewallState) ElementType() reflect.Type

type FirewallSubnetMapping

type FirewallSubnetMapping struct {
	// A IPAddressType
	IpAddressType *string `pulumi:"ipAddressType"`
	// A SubnetId.
	SubnetId string `pulumi:"subnetId"`
}

type FirewallSubnetMappingArgs

type FirewallSubnetMappingArgs struct {
	// A IPAddressType
	IpAddressType pulumi.StringPtrInput `pulumi:"ipAddressType"`
	// A SubnetId.
	SubnetId pulumi.StringInput `pulumi:"subnetId"`
}

func (FirewallSubnetMappingArgs) ElementType

func (FirewallSubnetMappingArgs) ElementType() reflect.Type

func (FirewallSubnetMappingArgs) ToFirewallSubnetMappingOutput

func (i FirewallSubnetMappingArgs) ToFirewallSubnetMappingOutput() FirewallSubnetMappingOutput

func (FirewallSubnetMappingArgs) ToFirewallSubnetMappingOutputWithContext

func (i FirewallSubnetMappingArgs) ToFirewallSubnetMappingOutputWithContext(ctx context.Context) FirewallSubnetMappingOutput

type FirewallSubnetMappingArray

type FirewallSubnetMappingArray []FirewallSubnetMappingInput

func (FirewallSubnetMappingArray) ElementType

func (FirewallSubnetMappingArray) ElementType() reflect.Type

func (FirewallSubnetMappingArray) ToFirewallSubnetMappingArrayOutput

func (i FirewallSubnetMappingArray) ToFirewallSubnetMappingArrayOutput() FirewallSubnetMappingArrayOutput

func (FirewallSubnetMappingArray) ToFirewallSubnetMappingArrayOutputWithContext

func (i FirewallSubnetMappingArray) ToFirewallSubnetMappingArrayOutputWithContext(ctx context.Context) FirewallSubnetMappingArrayOutput

type FirewallSubnetMappingArrayInput

type FirewallSubnetMappingArrayInput interface {
	pulumi.Input

	ToFirewallSubnetMappingArrayOutput() FirewallSubnetMappingArrayOutput
	ToFirewallSubnetMappingArrayOutputWithContext(context.Context) FirewallSubnetMappingArrayOutput
}

FirewallSubnetMappingArrayInput is an input type that accepts FirewallSubnetMappingArray and FirewallSubnetMappingArrayOutput values. You can construct a concrete instance of `FirewallSubnetMappingArrayInput` via:

FirewallSubnetMappingArray{ FirewallSubnetMappingArgs{...} }

type FirewallSubnetMappingArrayOutput

type FirewallSubnetMappingArrayOutput struct{ *pulumi.OutputState }

func (FirewallSubnetMappingArrayOutput) ElementType

func (FirewallSubnetMappingArrayOutput) Index

func (FirewallSubnetMappingArrayOutput) ToFirewallSubnetMappingArrayOutput

func (o FirewallSubnetMappingArrayOutput) ToFirewallSubnetMappingArrayOutput() FirewallSubnetMappingArrayOutput

func (FirewallSubnetMappingArrayOutput) ToFirewallSubnetMappingArrayOutputWithContext

func (o FirewallSubnetMappingArrayOutput) ToFirewallSubnetMappingArrayOutputWithContext(ctx context.Context) FirewallSubnetMappingArrayOutput

type FirewallSubnetMappingInput

type FirewallSubnetMappingInput interface {
	pulumi.Input

	ToFirewallSubnetMappingOutput() FirewallSubnetMappingOutput
	ToFirewallSubnetMappingOutputWithContext(context.Context) FirewallSubnetMappingOutput
}

FirewallSubnetMappingInput is an input type that accepts FirewallSubnetMappingArgs and FirewallSubnetMappingOutput values. You can construct a concrete instance of `FirewallSubnetMappingInput` via:

FirewallSubnetMappingArgs{...}

type FirewallSubnetMappingOutput

type FirewallSubnetMappingOutput struct{ *pulumi.OutputState }

func (FirewallSubnetMappingOutput) ElementType

func (FirewallSubnetMappingOutput) IpAddressType added in v0.72.0

A IPAddressType

func (FirewallSubnetMappingOutput) SubnetId

A SubnetId.

func (FirewallSubnetMappingOutput) ToFirewallSubnetMappingOutput

func (o FirewallSubnetMappingOutput) ToFirewallSubnetMappingOutput() FirewallSubnetMappingOutput

func (FirewallSubnetMappingOutput) ToFirewallSubnetMappingOutputWithContext

func (o FirewallSubnetMappingOutput) ToFirewallSubnetMappingOutputWithContext(ctx context.Context) FirewallSubnetMappingOutput

type FirewallTag

type FirewallTag struct {
	// The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key string `pulumi:"key"`
	// The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value string `pulumi:"value"`
}

type LoggingConfiguration

type LoggingConfiguration struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the `Firewall` that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
	FirewallArn pulumi.StringOutput `pulumi:"firewallArn"`
	// The name of the firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
	FirewallName pulumi.StringPtrOutput `pulumi:"firewallName"`
	// Defines how AWS Network Firewall performs logging for a `Firewall` .
	LoggingConfiguration LoggingConfigurationTypeOutput `pulumi:"loggingConfiguration"`
}

Resource type definition for AWS::NetworkFirewall::LoggingConfiguration

func GetLoggingConfiguration

func GetLoggingConfiguration(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *LoggingConfigurationState, opts ...pulumi.ResourceOption) (*LoggingConfiguration, error)

GetLoggingConfiguration gets an existing LoggingConfiguration resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewLoggingConfiguration

func NewLoggingConfiguration(ctx *pulumi.Context,
	name string, args *LoggingConfigurationArgs, opts ...pulumi.ResourceOption) (*LoggingConfiguration, error)

NewLoggingConfiguration registers a new resource with the given unique name, arguments, and options.

func (*LoggingConfiguration) ElementType

func (*LoggingConfiguration) ElementType() reflect.Type

func (*LoggingConfiguration) ToLoggingConfigurationOutput

func (i *LoggingConfiguration) ToLoggingConfigurationOutput() LoggingConfigurationOutput

func (*LoggingConfiguration) ToLoggingConfigurationOutputWithContext

func (i *LoggingConfiguration) ToLoggingConfigurationOutputWithContext(ctx context.Context) LoggingConfigurationOutput

type LoggingConfigurationArgs

type LoggingConfigurationArgs struct {
	// The Amazon Resource Name (ARN) of the `Firewall` that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
	FirewallArn pulumi.StringInput
	// The name of the firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
	FirewallName pulumi.StringPtrInput
	// Defines how AWS Network Firewall performs logging for a `Firewall` .
	LoggingConfiguration LoggingConfigurationTypeInput
}

The set of arguments for constructing a LoggingConfiguration resource.

func (LoggingConfigurationArgs) ElementType

func (LoggingConfigurationArgs) ElementType() reflect.Type

type LoggingConfigurationInput

type LoggingConfigurationInput interface {
	pulumi.Input

	ToLoggingConfigurationOutput() LoggingConfigurationOutput
	ToLoggingConfigurationOutputWithContext(ctx context.Context) LoggingConfigurationOutput
}

type LoggingConfigurationLogDestinationConfig

type LoggingConfigurationLogDestinationConfig struct {
	// A key-value pair to configure the logDestinations.
	LogDestination map[string]string `pulumi:"logDestination"`
	// The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
	LogDestinationType LoggingConfigurationLogDestinationConfigLogDestinationType `pulumi:"logDestinationType"`
	// The type of log to send. Alert logs report traffic that matches a stateful rule with an action setting that sends an alert log message. Flow logs are standard network traffic flow logs.
	LogType LoggingConfigurationLogDestinationConfigLogType `pulumi:"logType"`
}

type LoggingConfigurationLogDestinationConfigArgs

type LoggingConfigurationLogDestinationConfigArgs struct {
	// A key-value pair to configure the logDestinations.
	LogDestination pulumi.StringMapInput `pulumi:"logDestination"`
	// The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
	LogDestinationType LoggingConfigurationLogDestinationConfigLogDestinationTypeInput `pulumi:"logDestinationType"`
	// The type of log to send. Alert logs report traffic that matches a stateful rule with an action setting that sends an alert log message. Flow logs are standard network traffic flow logs.
	LogType LoggingConfigurationLogDestinationConfigLogTypeInput `pulumi:"logType"`
}

func (LoggingConfigurationLogDestinationConfigArgs) ElementType

func (LoggingConfigurationLogDestinationConfigArgs) ToLoggingConfigurationLogDestinationConfigOutput

func (i LoggingConfigurationLogDestinationConfigArgs) ToLoggingConfigurationLogDestinationConfigOutput() LoggingConfigurationLogDestinationConfigOutput

func (LoggingConfigurationLogDestinationConfigArgs) ToLoggingConfigurationLogDestinationConfigOutputWithContext

func (i LoggingConfigurationLogDestinationConfigArgs) ToLoggingConfigurationLogDestinationConfigOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigOutput

type LoggingConfigurationLogDestinationConfigArray

type LoggingConfigurationLogDestinationConfigArray []LoggingConfigurationLogDestinationConfigInput

func (LoggingConfigurationLogDestinationConfigArray) ElementType

func (LoggingConfigurationLogDestinationConfigArray) ToLoggingConfigurationLogDestinationConfigArrayOutput

func (i LoggingConfigurationLogDestinationConfigArray) ToLoggingConfigurationLogDestinationConfigArrayOutput() LoggingConfigurationLogDestinationConfigArrayOutput

func (LoggingConfigurationLogDestinationConfigArray) ToLoggingConfigurationLogDestinationConfigArrayOutputWithContext

func (i LoggingConfigurationLogDestinationConfigArray) ToLoggingConfigurationLogDestinationConfigArrayOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigArrayOutput

type LoggingConfigurationLogDestinationConfigArrayInput

type LoggingConfigurationLogDestinationConfigArrayInput interface {
	pulumi.Input

	ToLoggingConfigurationLogDestinationConfigArrayOutput() LoggingConfigurationLogDestinationConfigArrayOutput
	ToLoggingConfigurationLogDestinationConfigArrayOutputWithContext(context.Context) LoggingConfigurationLogDestinationConfigArrayOutput
}

LoggingConfigurationLogDestinationConfigArrayInput is an input type that accepts LoggingConfigurationLogDestinationConfigArray and LoggingConfigurationLogDestinationConfigArrayOutput values. You can construct a concrete instance of `LoggingConfigurationLogDestinationConfigArrayInput` via:

LoggingConfigurationLogDestinationConfigArray{ LoggingConfigurationLogDestinationConfigArgs{...} }

type LoggingConfigurationLogDestinationConfigArrayOutput

type LoggingConfigurationLogDestinationConfigArrayOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLogDestinationConfigArrayOutput) ElementType

func (LoggingConfigurationLogDestinationConfigArrayOutput) Index

func (LoggingConfigurationLogDestinationConfigArrayOutput) ToLoggingConfigurationLogDestinationConfigArrayOutput

func (o LoggingConfigurationLogDestinationConfigArrayOutput) ToLoggingConfigurationLogDestinationConfigArrayOutput() LoggingConfigurationLogDestinationConfigArrayOutput

func (LoggingConfigurationLogDestinationConfigArrayOutput) ToLoggingConfigurationLogDestinationConfigArrayOutputWithContext

func (o LoggingConfigurationLogDestinationConfigArrayOutput) ToLoggingConfigurationLogDestinationConfigArrayOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigArrayOutput

type LoggingConfigurationLogDestinationConfigInput

type LoggingConfigurationLogDestinationConfigInput interface {
	pulumi.Input

	ToLoggingConfigurationLogDestinationConfigOutput() LoggingConfigurationLogDestinationConfigOutput
	ToLoggingConfigurationLogDestinationConfigOutputWithContext(context.Context) LoggingConfigurationLogDestinationConfigOutput
}

LoggingConfigurationLogDestinationConfigInput is an input type that accepts LoggingConfigurationLogDestinationConfigArgs and LoggingConfigurationLogDestinationConfigOutput values. You can construct a concrete instance of `LoggingConfigurationLogDestinationConfigInput` via:

LoggingConfigurationLogDestinationConfigArgs{...}

type LoggingConfigurationLogDestinationConfigLogDestinationType

type LoggingConfigurationLogDestinationConfigLogDestinationType string

The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ElementType

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutputWithContext

func (e LoggingConfigurationLogDestinationConfigLogDestinationType) ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

func (e LoggingConfigurationLogDestinationConfigLogDestinationType) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput() LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutputWithContext

func (e LoggingConfigurationLogDestinationConfigLogDestinationType) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToStringOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToStringOutputWithContext

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToStringPtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationType) ToStringPtrOutputWithContext

type LoggingConfigurationLogDestinationConfigLogDestinationTypeInput

type LoggingConfigurationLogDestinationConfigLogDestinationTypeInput interface {
	pulumi.Input

	ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutput() LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput
	ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutputWithContext(context.Context) LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput
}

LoggingConfigurationLogDestinationConfigLogDestinationTypeInput is an input type that accepts values of the LoggingConfigurationLogDestinationConfigLogDestinationType enum A concrete instance of `LoggingConfigurationLogDestinationConfigLogDestinationTypeInput` can be one of the following:

LoggingConfigurationLogDestinationConfigLogDestinationTypeS3
LoggingConfigurationLogDestinationConfigLogDestinationTypeCloudWatchLogs
LoggingConfigurationLogDestinationConfigLogDestinationTypeKinesisDataFirehose

type LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput

type LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ElementType

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutputWithContext

func (o LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypeOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutputWithContext

func (o LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToStringOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToStringOutputWithContext

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToStringPtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypeOutput) ToStringPtrOutputWithContext

type LoggingConfigurationLogDestinationConfigLogDestinationTypePtrInput

type LoggingConfigurationLogDestinationConfigLogDestinationTypePtrInput interface {
	pulumi.Input

	ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput() LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput
	ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutputWithContext(context.Context) LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput
}

type LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

type LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput) Elem

func (LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput) ElementType

func (LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutputWithContext

func (o LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput) ToLoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput) ToStringPtrOutput

func (LoggingConfigurationLogDestinationConfigLogDestinationTypePtrOutput) ToStringPtrOutputWithContext

type LoggingConfigurationLogDestinationConfigLogType

type LoggingConfigurationLogDestinationConfigLogType string

The type of log to send. Alert logs report traffic that matches a stateful rule with an action setting that sends an alert log message. Flow logs are standard network traffic flow logs.

func (LoggingConfigurationLogDestinationConfigLogType) ElementType

func (LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypeOutput

func (e LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypeOutput() LoggingConfigurationLogDestinationConfigLogTypeOutput

func (LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypeOutputWithContext

func (e LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypeOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogTypeOutput

func (LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (e LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutput() LoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutputWithContext

func (e LoggingConfigurationLogDestinationConfigLogType) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogType) ToStringOutput

func (LoggingConfigurationLogDestinationConfigLogType) ToStringOutputWithContext

func (LoggingConfigurationLogDestinationConfigLogType) ToStringPtrOutput

func (LoggingConfigurationLogDestinationConfigLogType) ToStringPtrOutputWithContext

type LoggingConfigurationLogDestinationConfigLogTypeInput

type LoggingConfigurationLogDestinationConfigLogTypeInput interface {
	pulumi.Input

	ToLoggingConfigurationLogDestinationConfigLogTypeOutput() LoggingConfigurationLogDestinationConfigLogTypeOutput
	ToLoggingConfigurationLogDestinationConfigLogTypeOutputWithContext(context.Context) LoggingConfigurationLogDestinationConfigLogTypeOutput
}

LoggingConfigurationLogDestinationConfigLogTypeInput is an input type that accepts values of the LoggingConfigurationLogDestinationConfigLogType enum A concrete instance of `LoggingConfigurationLogDestinationConfigLogTypeInput` can be one of the following:

LoggingConfigurationLogDestinationConfigLogTypeAlert
LoggingConfigurationLogDestinationConfigLogTypeFlow

type LoggingConfigurationLogDestinationConfigLogTypeOutput

type LoggingConfigurationLogDestinationConfigLogTypeOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ElementType

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToLoggingConfigurationLogDestinationConfigLogTypeOutput

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToLoggingConfigurationLogDestinationConfigLogTypeOutputWithContext

func (o LoggingConfigurationLogDestinationConfigLogTypeOutput) ToLoggingConfigurationLogDestinationConfigLogTypeOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogTypeOutput

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (o LoggingConfigurationLogDestinationConfigLogTypeOutput) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutput() LoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutputWithContext

func (o LoggingConfigurationLogDestinationConfigLogTypeOutput) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToStringOutput

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToStringOutputWithContext

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToStringPtrOutput

func (LoggingConfigurationLogDestinationConfigLogTypeOutput) ToStringPtrOutputWithContext

type LoggingConfigurationLogDestinationConfigLogTypePtrInput

type LoggingConfigurationLogDestinationConfigLogTypePtrInput interface {
	pulumi.Input

	ToLoggingConfigurationLogDestinationConfigLogTypePtrOutput() LoggingConfigurationLogDestinationConfigLogTypePtrOutput
	ToLoggingConfigurationLogDestinationConfigLogTypePtrOutputWithContext(context.Context) LoggingConfigurationLogDestinationConfigLogTypePtrOutput
}

type LoggingConfigurationLogDestinationConfigLogTypePtrOutput

type LoggingConfigurationLogDestinationConfigLogTypePtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLogDestinationConfigLogTypePtrOutput) Elem

func (LoggingConfigurationLogDestinationConfigLogTypePtrOutput) ElementType

func (LoggingConfigurationLogDestinationConfigLogTypePtrOutput) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogTypePtrOutput) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutputWithContext

func (o LoggingConfigurationLogDestinationConfigLogTypePtrOutput) ToLoggingConfigurationLogDestinationConfigLogTypePtrOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigLogTypePtrOutput

func (LoggingConfigurationLogDestinationConfigLogTypePtrOutput) ToStringPtrOutput

func (LoggingConfigurationLogDestinationConfigLogTypePtrOutput) ToStringPtrOutputWithContext

type LoggingConfigurationLogDestinationConfigOutput

type LoggingConfigurationLogDestinationConfigOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationLogDestinationConfigOutput) ElementType

func (LoggingConfigurationLogDestinationConfigOutput) LogDestination

A key-value pair to configure the logDestinations.

func (LoggingConfigurationLogDestinationConfigOutput) LogDestinationType

The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.

func (LoggingConfigurationLogDestinationConfigOutput) LogType

The type of log to send. Alert logs report traffic that matches a stateful rule with an action setting that sends an alert log message. Flow logs are standard network traffic flow logs.

func (LoggingConfigurationLogDestinationConfigOutput) ToLoggingConfigurationLogDestinationConfigOutput

func (o LoggingConfigurationLogDestinationConfigOutput) ToLoggingConfigurationLogDestinationConfigOutput() LoggingConfigurationLogDestinationConfigOutput

func (LoggingConfigurationLogDestinationConfigOutput) ToLoggingConfigurationLogDestinationConfigOutputWithContext

func (o LoggingConfigurationLogDestinationConfigOutput) ToLoggingConfigurationLogDestinationConfigOutputWithContext(ctx context.Context) LoggingConfigurationLogDestinationConfigOutput

type LoggingConfigurationOutput

type LoggingConfigurationOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationOutput) ElementType

func (LoggingConfigurationOutput) ElementType() reflect.Type

func (LoggingConfigurationOutput) FirewallArn added in v0.17.0

The Amazon Resource Name (ARN) of the `Firewall` that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.

func (LoggingConfigurationOutput) FirewallName added in v0.17.0

The name of the firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.

func (LoggingConfigurationOutput) LoggingConfiguration added in v0.17.0

Defines how AWS Network Firewall performs logging for a `Firewall` .

func (LoggingConfigurationOutput) ToLoggingConfigurationOutput

func (o LoggingConfigurationOutput) ToLoggingConfigurationOutput() LoggingConfigurationOutput

func (LoggingConfigurationOutput) ToLoggingConfigurationOutputWithContext

func (o LoggingConfigurationOutput) ToLoggingConfigurationOutputWithContext(ctx context.Context) LoggingConfigurationOutput

type LoggingConfigurationState

type LoggingConfigurationState struct {
}

func (LoggingConfigurationState) ElementType

func (LoggingConfigurationState) ElementType() reflect.Type

type LoggingConfigurationType added in v0.2.0

type LoggingConfigurationType struct {
	// Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
	LogDestinationConfigs []LoggingConfigurationLogDestinationConfig `pulumi:"logDestinationConfigs"`
}

type LoggingConfigurationTypeArgs added in v0.2.0

type LoggingConfigurationTypeArgs struct {
	// Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
	LogDestinationConfigs LoggingConfigurationLogDestinationConfigArrayInput `pulumi:"logDestinationConfigs"`
}

func (LoggingConfigurationTypeArgs) ElementType added in v0.2.0

func (LoggingConfigurationTypeArgs) ToLoggingConfigurationTypeOutput added in v0.2.0

func (i LoggingConfigurationTypeArgs) ToLoggingConfigurationTypeOutput() LoggingConfigurationTypeOutput

func (LoggingConfigurationTypeArgs) ToLoggingConfigurationTypeOutputWithContext added in v0.2.0

func (i LoggingConfigurationTypeArgs) ToLoggingConfigurationTypeOutputWithContext(ctx context.Context) LoggingConfigurationTypeOutput

type LoggingConfigurationTypeInput added in v0.2.0

type LoggingConfigurationTypeInput interface {
	pulumi.Input

	ToLoggingConfigurationTypeOutput() LoggingConfigurationTypeOutput
	ToLoggingConfigurationTypeOutputWithContext(context.Context) LoggingConfigurationTypeOutput
}

LoggingConfigurationTypeInput is an input type that accepts LoggingConfigurationTypeArgs and LoggingConfigurationTypeOutput values. You can construct a concrete instance of `LoggingConfigurationTypeInput` via:

LoggingConfigurationTypeArgs{...}

type LoggingConfigurationTypeOutput added in v0.2.0

type LoggingConfigurationTypeOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationTypeOutput) ElementType added in v0.2.0

func (LoggingConfigurationTypeOutput) LogDestinationConfigs added in v0.2.0

Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.

func (LoggingConfigurationTypeOutput) ToLoggingConfigurationTypeOutput added in v0.2.0

func (o LoggingConfigurationTypeOutput) ToLoggingConfigurationTypeOutput() LoggingConfigurationTypeOutput

func (LoggingConfigurationTypeOutput) ToLoggingConfigurationTypeOutputWithContext added in v0.2.0

func (o LoggingConfigurationTypeOutput) ToLoggingConfigurationTypeOutputWithContext(ctx context.Context) LoggingConfigurationTypeOutput

type LoggingConfigurationTypePtrOutput added in v0.2.0

type LoggingConfigurationTypePtrOutput struct{ *pulumi.OutputState }

func (LoggingConfigurationTypePtrOutput) Elem added in v0.2.0

func (LoggingConfigurationTypePtrOutput) ElementType added in v0.2.0

func (LoggingConfigurationTypePtrOutput) LogDestinationConfigs added in v0.2.0

Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.

func (LoggingConfigurationTypePtrOutput) ToLoggingConfigurationTypePtrOutput added in v0.2.0

func (o LoggingConfigurationTypePtrOutput) ToLoggingConfigurationTypePtrOutput() LoggingConfigurationTypePtrOutput

func (LoggingConfigurationTypePtrOutput) ToLoggingConfigurationTypePtrOutputWithContext added in v0.2.0

func (o LoggingConfigurationTypePtrOutput) ToLoggingConfigurationTypePtrOutputWithContext(ctx context.Context) LoggingConfigurationTypePtrOutput

type LookupFirewallArgs added in v0.12.0

type LookupFirewallArgs struct {
	// The Amazon Resource Name (ARN) of the `Firewall` .
	FirewallArn string `pulumi:"firewallArn"`
}

type LookupFirewallOutputArgs added in v0.12.0

type LookupFirewallOutputArgs struct {
	// The Amazon Resource Name (ARN) of the `Firewall` .
	FirewallArn pulumi.StringInput `pulumi:"firewallArn"`
}

func (LookupFirewallOutputArgs) ElementType added in v0.12.0

func (LookupFirewallOutputArgs) ElementType() reflect.Type

type LookupFirewallPolicyArgs added in v0.12.0

type LookupFirewallPolicyArgs struct {
	// The Amazon Resource Name (ARN) of the `FirewallPolicy` .
	FirewallPolicyArn string `pulumi:"firewallPolicyArn"`
}

type LookupFirewallPolicyOutputArgs added in v0.12.0

type LookupFirewallPolicyOutputArgs struct {
	// The Amazon Resource Name (ARN) of the `FirewallPolicy` .
	FirewallPolicyArn pulumi.StringInput `pulumi:"firewallPolicyArn"`
}

func (LookupFirewallPolicyOutputArgs) ElementType added in v0.12.0

type LookupFirewallPolicyResult added in v0.12.0

type LookupFirewallPolicyResult struct {
	// A description of the firewall policy.
	Description *string `pulumi:"description"`
	// The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.
	FirewallPolicy *FirewallPolicyType `pulumi:"firewallPolicy"`
	// The Amazon Resource Name (ARN) of the `FirewallPolicy` .
	FirewallPolicyArn *string `pulumi:"firewallPolicyArn"`
	// The unique ID of the `FirewallPolicy` resource.
	FirewallPolicyId *string `pulumi:"firewallPolicyId"`
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags []aws.Tag `pulumi:"tags"`
}

func LookupFirewallPolicy added in v0.12.0

func LookupFirewallPolicy(ctx *pulumi.Context, args *LookupFirewallPolicyArgs, opts ...pulumi.InvokeOption) (*LookupFirewallPolicyResult, error)

Resource type definition for AWS::NetworkFirewall::FirewallPolicy

type LookupFirewallPolicyResultOutput added in v0.12.0

type LookupFirewallPolicyResultOutput struct{ *pulumi.OutputState }

func LookupFirewallPolicyOutput added in v0.12.0

func (LookupFirewallPolicyResultOutput) Description added in v0.12.0

A description of the firewall policy.

func (LookupFirewallPolicyResultOutput) ElementType added in v0.12.0

func (LookupFirewallPolicyResultOutput) FirewallPolicy added in v0.12.0

The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.

func (LookupFirewallPolicyResultOutput) FirewallPolicyArn added in v0.12.0

The Amazon Resource Name (ARN) of the `FirewallPolicy` .

func (LookupFirewallPolicyResultOutput) FirewallPolicyId added in v0.12.0

The unique ID of the `FirewallPolicy` resource.

func (LookupFirewallPolicyResultOutput) Tags added in v0.12.0

An array of key-value pairs to apply to this resource.

For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .

func (LookupFirewallPolicyResultOutput) ToLookupFirewallPolicyResultOutput added in v0.12.0

func (o LookupFirewallPolicyResultOutput) ToLookupFirewallPolicyResultOutput() LookupFirewallPolicyResultOutput

func (LookupFirewallPolicyResultOutput) ToLookupFirewallPolicyResultOutputWithContext added in v0.12.0

func (o LookupFirewallPolicyResultOutput) ToLookupFirewallPolicyResultOutputWithContext(ctx context.Context) LookupFirewallPolicyResultOutput

type LookupFirewallResult added in v0.12.0

type LookupFirewallResult struct {
	// A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .
	DeleteProtection *bool `pulumi:"deleteProtection"`
	// A description of the firewall.
	Description *string `pulumi:"description"`
	// The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall. The subnets are not listed in any particular order. For example: `["us-west-2c:vpce-111122223333", "us-west-2a:vpce-987654321098", "us-west-2b:vpce-012345678901"]` .
	EndpointIds []string `pulumi:"endpointIds"`
	// The Amazon Resource Name (ARN) of the `Firewall` .
	FirewallArn *string `pulumi:"firewallArn"`
	// The name of the `Firewall` resource.
	FirewallId *string `pulumi:"firewallId"`
	// The Amazon Resource Name (ARN) of the firewall policy.
	//
	// The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.
	FirewallPolicyArn *string `pulumi:"firewallPolicyArn"`
	// A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .
	FirewallPolicyChangeProtection *bool `pulumi:"firewallPolicyChangeProtection"`
	// A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .
	SubnetChangeProtection *bool `pulumi:"subnetChangeProtection"`
	// The public subnets that Network Firewall is using for the firewall. Each subnet must belong to a different Availability Zone.
	SubnetMappings []FirewallSubnetMapping `pulumi:"subnetMappings"`
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags []aws.Tag `pulumi:"tags"`
}

func LookupFirewall added in v0.12.0

func LookupFirewall(ctx *pulumi.Context, args *LookupFirewallArgs, opts ...pulumi.InvokeOption) (*LookupFirewallResult, error)

Resource type definition for AWS::NetworkFirewall::Firewall

type LookupFirewallResultOutput added in v0.12.0

type LookupFirewallResultOutput struct{ *pulumi.OutputState }

func LookupFirewallOutput added in v0.12.0

func LookupFirewallOutput(ctx *pulumi.Context, args LookupFirewallOutputArgs, opts ...pulumi.InvokeOption) LookupFirewallResultOutput

func (LookupFirewallResultOutput) DeleteProtection added in v0.12.0

func (o LookupFirewallResultOutput) DeleteProtection() pulumi.BoolPtrOutput

A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .

func (LookupFirewallResultOutput) Description added in v0.12.0

A description of the firewall.

func (LookupFirewallResultOutput) ElementType added in v0.12.0

func (LookupFirewallResultOutput) ElementType() reflect.Type

func (LookupFirewallResultOutput) EndpointIds added in v0.12.0

The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall. The subnets are not listed in any particular order. For example: `["us-west-2c:vpce-111122223333", "us-west-2a:vpce-987654321098", "us-west-2b:vpce-012345678901"]` .

func (LookupFirewallResultOutput) FirewallArn added in v0.12.0

The Amazon Resource Name (ARN) of the `Firewall` .

func (LookupFirewallResultOutput) FirewallId added in v0.12.0

The name of the `Firewall` resource.

func (LookupFirewallResultOutput) FirewallPolicyArn added in v0.12.0

func (o LookupFirewallResultOutput) FirewallPolicyArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the firewall policy.

The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.

func (LookupFirewallResultOutput) FirewallPolicyChangeProtection added in v0.12.0

func (o LookupFirewallResultOutput) FirewallPolicyChangeProtection() pulumi.BoolPtrOutput

A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .

func (LookupFirewallResultOutput) SubnetChangeProtection added in v0.12.0

func (o LookupFirewallResultOutput) SubnetChangeProtection() pulumi.BoolPtrOutput

A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .

func (LookupFirewallResultOutput) SubnetMappings added in v0.12.0

The public subnets that Network Firewall is using for the firewall. Each subnet must belong to a different Availability Zone.

func (LookupFirewallResultOutput) Tags added in v0.12.0

An array of key-value pairs to apply to this resource.

For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .

func (LookupFirewallResultOutput) ToLookupFirewallResultOutput added in v0.12.0

func (o LookupFirewallResultOutput) ToLookupFirewallResultOutput() LookupFirewallResultOutput

func (LookupFirewallResultOutput) ToLookupFirewallResultOutputWithContext added in v0.12.0

func (o LookupFirewallResultOutput) ToLookupFirewallResultOutputWithContext(ctx context.Context) LookupFirewallResultOutput

type LookupLoggingConfigurationArgs added in v0.12.0

type LookupLoggingConfigurationArgs struct {
	// The Amazon Resource Name (ARN) of the `Firewall` that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
	FirewallArn string `pulumi:"firewallArn"`
}

type LookupLoggingConfigurationOutputArgs added in v0.12.0

type LookupLoggingConfigurationOutputArgs struct {
	// The Amazon Resource Name (ARN) of the `Firewall` that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
	FirewallArn pulumi.StringInput `pulumi:"firewallArn"`
}

func (LookupLoggingConfigurationOutputArgs) ElementType added in v0.12.0

type LookupLoggingConfigurationResult added in v0.12.0

type LookupLoggingConfigurationResult struct {
	// Defines how AWS Network Firewall performs logging for a `Firewall` .
	LoggingConfiguration *LoggingConfigurationType `pulumi:"loggingConfiguration"`
}

func LookupLoggingConfiguration added in v0.12.0

func LookupLoggingConfiguration(ctx *pulumi.Context, args *LookupLoggingConfigurationArgs, opts ...pulumi.InvokeOption) (*LookupLoggingConfigurationResult, error)

Resource type definition for AWS::NetworkFirewall::LoggingConfiguration

type LookupLoggingConfigurationResultOutput added in v0.12.0

type LookupLoggingConfigurationResultOutput struct{ *pulumi.OutputState }

func (LookupLoggingConfigurationResultOutput) ElementType added in v0.12.0

func (LookupLoggingConfigurationResultOutput) LoggingConfiguration added in v0.12.0

Defines how AWS Network Firewall performs logging for a `Firewall` .

func (LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutput added in v0.12.0

func (o LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutput() LookupLoggingConfigurationResultOutput

func (LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutputWithContext added in v0.12.0

func (o LookupLoggingConfigurationResultOutput) ToLookupLoggingConfigurationResultOutputWithContext(ctx context.Context) LookupLoggingConfigurationResultOutput

type LookupRuleGroupArgs added in v0.12.0

type LookupRuleGroupArgs struct {
	// The Amazon Resource Name (ARN) of the `RuleGroup` .
	RuleGroupArn string `pulumi:"ruleGroupArn"`
}

type LookupRuleGroupOutputArgs added in v0.12.0

type LookupRuleGroupOutputArgs struct {
	// The Amazon Resource Name (ARN) of the `RuleGroup` .
	RuleGroupArn pulumi.StringInput `pulumi:"ruleGroupArn"`
}

func (LookupRuleGroupOutputArgs) ElementType added in v0.12.0

func (LookupRuleGroupOutputArgs) ElementType() reflect.Type

type LookupRuleGroupResult added in v0.12.0

type LookupRuleGroupResult struct {
	// A description of the rule group.
	Description *string `pulumi:"description"`
	// An object that defines the rule group rules.
	RuleGroup *RuleGroupType `pulumi:"ruleGroup"`
	// The Amazon Resource Name (ARN) of the `RuleGroup` .
	RuleGroupArn *string `pulumi:"ruleGroupArn"`
	// The unique ID of the `RuleGroup` resource.
	RuleGroupId *string `pulumi:"ruleGroupId"`
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags []aws.Tag `pulumi:"tags"`
}

func LookupRuleGroup added in v0.12.0

func LookupRuleGroup(ctx *pulumi.Context, args *LookupRuleGroupArgs, opts ...pulumi.InvokeOption) (*LookupRuleGroupResult, error)

Resource type definition for AWS::NetworkFirewall::RuleGroup

type LookupRuleGroupResultOutput added in v0.12.0

type LookupRuleGroupResultOutput struct{ *pulumi.OutputState }

func LookupRuleGroupOutput added in v0.12.0

func (LookupRuleGroupResultOutput) Description added in v0.12.0

A description of the rule group.

func (LookupRuleGroupResultOutput) ElementType added in v0.12.0

func (LookupRuleGroupResultOutput) RuleGroup added in v0.12.0

An object that defines the rule group rules.

func (LookupRuleGroupResultOutput) RuleGroupArn added in v0.12.0

The Amazon Resource Name (ARN) of the `RuleGroup` .

func (LookupRuleGroupResultOutput) RuleGroupId added in v0.12.0

The unique ID of the `RuleGroup` resource.

func (LookupRuleGroupResultOutput) Tags added in v0.12.0

An array of key-value pairs to apply to this resource.

For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .

func (LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutput added in v0.12.0

func (o LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutput() LookupRuleGroupResultOutput

func (LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutputWithContext added in v0.12.0

func (o LookupRuleGroupResultOutput) ToLookupRuleGroupResultOutputWithContext(ctx context.Context) LookupRuleGroupResultOutput

type LookupTlsInspectionConfigurationArgs added in v0.92.0

type LookupTlsInspectionConfigurationArgs struct {
	// The Amazon Resource Name (ARN) of the TLS inspection configuration.
	TlsInspectionConfigurationArn string `pulumi:"tlsInspectionConfigurationArn"`
}

type LookupTlsInspectionConfigurationOutputArgs added in v0.92.0

type LookupTlsInspectionConfigurationOutputArgs struct {
	// The Amazon Resource Name (ARN) of the TLS inspection configuration.
	TlsInspectionConfigurationArn pulumi.StringInput `pulumi:"tlsInspectionConfigurationArn"`
}

func (LookupTlsInspectionConfigurationOutputArgs) ElementType added in v0.92.0

type LookupTlsInspectionConfigurationResult added in v0.92.0

type LookupTlsInspectionConfigurationResult struct {
	// A description of the TLS inspection configuration.
	Description *string `pulumi:"description"`
	// The key:value pairs to associate with the resource.
	Tags []aws.Tag `pulumi:"tags"`
	// The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .
	TlsInspectionConfiguration *TlsInspectionConfigurationTlsInspectionConfiguration `pulumi:"tlsInspectionConfiguration"`
	// The Amazon Resource Name (ARN) of the TLS inspection configuration.
	TlsInspectionConfigurationArn *string `pulumi:"tlsInspectionConfigurationArn"`
	// A unique identifier for the TLS inspection configuration. This ID is returned in the responses to create and list commands. You provide it to operations such as update and delete.
	TlsInspectionConfigurationId *string `pulumi:"tlsInspectionConfigurationId"`
}

func LookupTlsInspectionConfiguration added in v0.92.0

Resource type definition for AWS::NetworkFirewall::TLSInspectionConfiguration

type LookupTlsInspectionConfigurationResultOutput added in v0.92.0

type LookupTlsInspectionConfigurationResultOutput struct{ *pulumi.OutputState }

func (LookupTlsInspectionConfigurationResultOutput) Description added in v0.92.0

A description of the TLS inspection configuration.

func (LookupTlsInspectionConfigurationResultOutput) ElementType added in v0.92.0

func (LookupTlsInspectionConfigurationResultOutput) Tags added in v0.92.0

The key:value pairs to associate with the resource.

func (LookupTlsInspectionConfigurationResultOutput) TlsInspectionConfiguration added in v0.92.0

The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .

func (LookupTlsInspectionConfigurationResultOutput) TlsInspectionConfigurationArn added in v0.92.0

func (o LookupTlsInspectionConfigurationResultOutput) TlsInspectionConfigurationArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the TLS inspection configuration.

func (LookupTlsInspectionConfigurationResultOutput) TlsInspectionConfigurationId added in v0.92.0

func (o LookupTlsInspectionConfigurationResultOutput) TlsInspectionConfigurationId() pulumi.StringPtrOutput

A unique identifier for the TLS inspection configuration. This ID is returned in the responses to create and list commands. You provide it to operations such as update and delete.

func (LookupTlsInspectionConfigurationResultOutput) ToLookupTlsInspectionConfigurationResultOutput added in v0.92.0

func (o LookupTlsInspectionConfigurationResultOutput) ToLookupTlsInspectionConfigurationResultOutput() LookupTlsInspectionConfigurationResultOutput

func (LookupTlsInspectionConfigurationResultOutput) ToLookupTlsInspectionConfigurationResultOutputWithContext added in v0.92.0

func (o LookupTlsInspectionConfigurationResultOutput) ToLookupTlsInspectionConfigurationResultOutputWithContext(ctx context.Context) LookupTlsInspectionConfigurationResultOutput

type RuleGroup

type RuleGroup struct {
	pulumi.CustomResourceState

	// The maximum operating resources that this rule group can use. You can't change a rule group's capacity setting after you create the rule group. When you update a rule group, you are limited to this capacity. When you reference a rule group from a firewall policy, Network Firewall reserves this capacity for the rule group.
	Capacity pulumi.IntOutput `pulumi:"capacity"`
	// A description of the rule group.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// An object that defines the rule group rules.
	RuleGroup RuleGroupTypePtrOutput `pulumi:"ruleGroup"`
	// The Amazon Resource Name (ARN) of the `RuleGroup` .
	RuleGroupArn pulumi.StringOutput `pulumi:"ruleGroupArn"`
	// The unique ID of the `RuleGroup` resource.
	RuleGroupId pulumi.StringOutput `pulumi:"ruleGroupId"`
	// The descriptive name of the rule group. You can't change the name of a rule group after you create it.
	RuleGroupName pulumi.StringOutput `pulumi:"ruleGroupName"`
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags aws.TagArrayOutput `pulumi:"tags"`
	// Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains
	// stateless rules. If it is stateful, it contains stateful rules.
	Type RuleGroupTypeEnumOutput `pulumi:"type"`
}

Resource type definition for AWS::NetworkFirewall::RuleGroup

func GetRuleGroup

func GetRuleGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RuleGroupState, opts ...pulumi.ResourceOption) (*RuleGroup, error)

GetRuleGroup gets an existing RuleGroup resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRuleGroup

func NewRuleGroup(ctx *pulumi.Context,
	name string, args *RuleGroupArgs, opts ...pulumi.ResourceOption) (*RuleGroup, error)

NewRuleGroup registers a new resource with the given unique name, arguments, and options.

func (*RuleGroup) ElementType

func (*RuleGroup) ElementType() reflect.Type

func (*RuleGroup) ToRuleGroupOutput

func (i *RuleGroup) ToRuleGroupOutput() RuleGroupOutput

func (*RuleGroup) ToRuleGroupOutputWithContext

func (i *RuleGroup) ToRuleGroupOutputWithContext(ctx context.Context) RuleGroupOutput

type RuleGroupActionDefinition

type RuleGroupActionDefinition struct {
	// Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.
	//
	// You can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it.
	PublishMetricAction *RuleGroupPublishMetricAction `pulumi:"publishMetricAction"`
}

type RuleGroupActionDefinitionArgs

type RuleGroupActionDefinitionArgs struct {
	// Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.
	//
	// You can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it.
	PublishMetricAction RuleGroupPublishMetricActionPtrInput `pulumi:"publishMetricAction"`
}

func (RuleGroupActionDefinitionArgs) ElementType

func (RuleGroupActionDefinitionArgs) ToRuleGroupActionDefinitionOutput

func (i RuleGroupActionDefinitionArgs) ToRuleGroupActionDefinitionOutput() RuleGroupActionDefinitionOutput

func (RuleGroupActionDefinitionArgs) ToRuleGroupActionDefinitionOutputWithContext

func (i RuleGroupActionDefinitionArgs) ToRuleGroupActionDefinitionOutputWithContext(ctx context.Context) RuleGroupActionDefinitionOutput

type RuleGroupActionDefinitionInput

type RuleGroupActionDefinitionInput interface {
	pulumi.Input

	ToRuleGroupActionDefinitionOutput() RuleGroupActionDefinitionOutput
	ToRuleGroupActionDefinitionOutputWithContext(context.Context) RuleGroupActionDefinitionOutput
}

RuleGroupActionDefinitionInput is an input type that accepts RuleGroupActionDefinitionArgs and RuleGroupActionDefinitionOutput values. You can construct a concrete instance of `RuleGroupActionDefinitionInput` via:

RuleGroupActionDefinitionArgs{...}

type RuleGroupActionDefinitionOutput

type RuleGroupActionDefinitionOutput struct{ *pulumi.OutputState }

func (RuleGroupActionDefinitionOutput) ElementType

func (RuleGroupActionDefinitionOutput) PublishMetricAction

Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.

You can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it.

func (RuleGroupActionDefinitionOutput) ToRuleGroupActionDefinitionOutput

func (o RuleGroupActionDefinitionOutput) ToRuleGroupActionDefinitionOutput() RuleGroupActionDefinitionOutput

func (RuleGroupActionDefinitionOutput) ToRuleGroupActionDefinitionOutputWithContext

func (o RuleGroupActionDefinitionOutput) ToRuleGroupActionDefinitionOutputWithContext(ctx context.Context) RuleGroupActionDefinitionOutput

type RuleGroupAddress

type RuleGroupAddress struct {
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	AddressDefinition string `pulumi:"addressDefinition"`
}

type RuleGroupAddressArgs

type RuleGroupAddressArgs struct {
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	AddressDefinition pulumi.StringInput `pulumi:"addressDefinition"`
}

func (RuleGroupAddressArgs) ElementType

func (RuleGroupAddressArgs) ElementType() reflect.Type

func (RuleGroupAddressArgs) ToRuleGroupAddressOutput

func (i RuleGroupAddressArgs) ToRuleGroupAddressOutput() RuleGroupAddressOutput

func (RuleGroupAddressArgs) ToRuleGroupAddressOutputWithContext

func (i RuleGroupAddressArgs) ToRuleGroupAddressOutputWithContext(ctx context.Context) RuleGroupAddressOutput

type RuleGroupAddressArray

type RuleGroupAddressArray []RuleGroupAddressInput

func (RuleGroupAddressArray) ElementType

func (RuleGroupAddressArray) ElementType() reflect.Type

func (RuleGroupAddressArray) ToRuleGroupAddressArrayOutput

func (i RuleGroupAddressArray) ToRuleGroupAddressArrayOutput() RuleGroupAddressArrayOutput

func (RuleGroupAddressArray) ToRuleGroupAddressArrayOutputWithContext

func (i RuleGroupAddressArray) ToRuleGroupAddressArrayOutputWithContext(ctx context.Context) RuleGroupAddressArrayOutput

type RuleGroupAddressArrayInput

type RuleGroupAddressArrayInput interface {
	pulumi.Input

	ToRuleGroupAddressArrayOutput() RuleGroupAddressArrayOutput
	ToRuleGroupAddressArrayOutputWithContext(context.Context) RuleGroupAddressArrayOutput
}

RuleGroupAddressArrayInput is an input type that accepts RuleGroupAddressArray and RuleGroupAddressArrayOutput values. You can construct a concrete instance of `RuleGroupAddressArrayInput` via:

RuleGroupAddressArray{ RuleGroupAddressArgs{...} }

type RuleGroupAddressArrayOutput

type RuleGroupAddressArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupAddressArrayOutput) ElementType

func (RuleGroupAddressArrayOutput) Index

func (RuleGroupAddressArrayOutput) ToRuleGroupAddressArrayOutput

func (o RuleGroupAddressArrayOutput) ToRuleGroupAddressArrayOutput() RuleGroupAddressArrayOutput

func (RuleGroupAddressArrayOutput) ToRuleGroupAddressArrayOutputWithContext

func (o RuleGroupAddressArrayOutput) ToRuleGroupAddressArrayOutputWithContext(ctx context.Context) RuleGroupAddressArrayOutput

type RuleGroupAddressInput

type RuleGroupAddressInput interface {
	pulumi.Input

	ToRuleGroupAddressOutput() RuleGroupAddressOutput
	ToRuleGroupAddressOutputWithContext(context.Context) RuleGroupAddressOutput
}

RuleGroupAddressInput is an input type that accepts RuleGroupAddressArgs and RuleGroupAddressOutput values. You can construct a concrete instance of `RuleGroupAddressInput` via:

RuleGroupAddressArgs{...}

type RuleGroupAddressOutput

type RuleGroupAddressOutput struct{ *pulumi.OutputState }

func (RuleGroupAddressOutput) AddressDefinition

func (o RuleGroupAddressOutput) AddressDefinition() pulumi.StringOutput

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.

Examples:

- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` . - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` . - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` . - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .

For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .

func (RuleGroupAddressOutput) ElementType

func (RuleGroupAddressOutput) ElementType() reflect.Type

func (RuleGroupAddressOutput) ToRuleGroupAddressOutput

func (o RuleGroupAddressOutput) ToRuleGroupAddressOutput() RuleGroupAddressOutput

func (RuleGroupAddressOutput) ToRuleGroupAddressOutputWithContext

func (o RuleGroupAddressOutput) ToRuleGroupAddressOutputWithContext(ctx context.Context) RuleGroupAddressOutput

type RuleGroupArgs

type RuleGroupArgs struct {
	// The maximum operating resources that this rule group can use. You can't change a rule group's capacity setting after you create the rule group. When you update a rule group, you are limited to this capacity. When you reference a rule group from a firewall policy, Network Firewall reserves this capacity for the rule group.
	Capacity pulumi.IntInput
	// A description of the rule group.
	Description pulumi.StringPtrInput
	// An object that defines the rule group rules.
	RuleGroup RuleGroupTypePtrInput
	// The descriptive name of the rule group. You can't change the name of a rule group after you create it.
	RuleGroupName pulumi.StringPtrInput
	// An array of key-value pairs to apply to this resource.
	//
	// For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .
	Tags aws.TagArrayInput
	// Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains
	// stateless rules. If it is stateful, it contains stateful rules.
	Type RuleGroupTypeEnumInput
}

The set of arguments for constructing a RuleGroup resource.

func (RuleGroupArgs) ElementType

func (RuleGroupArgs) ElementType() reflect.Type

type RuleGroupCustomAction

type RuleGroupCustomAction struct {
	// The custom action associated with the action name.
	ActionDefinition RuleGroupActionDefinition `pulumi:"actionDefinition"`
	// The descriptive name of the custom action. You can't change the name of a custom action after you create it.
	ActionName string `pulumi:"actionName"`
}

type RuleGroupCustomActionArgs

type RuleGroupCustomActionArgs struct {
	// The custom action associated with the action name.
	ActionDefinition RuleGroupActionDefinitionInput `pulumi:"actionDefinition"`
	// The descriptive name of the custom action. You can't change the name of a custom action after you create it.
	ActionName pulumi.StringInput `pulumi:"actionName"`
}

func (RuleGroupCustomActionArgs) ElementType

func (RuleGroupCustomActionArgs) ElementType() reflect.Type

func (RuleGroupCustomActionArgs) ToRuleGroupCustomActionOutput

func (i RuleGroupCustomActionArgs) ToRuleGroupCustomActionOutput() RuleGroupCustomActionOutput

func (RuleGroupCustomActionArgs) ToRuleGroupCustomActionOutputWithContext

func (i RuleGroupCustomActionArgs) ToRuleGroupCustomActionOutputWithContext(ctx context.Context) RuleGroupCustomActionOutput

type RuleGroupCustomActionArray

type RuleGroupCustomActionArray []RuleGroupCustomActionInput

func (RuleGroupCustomActionArray) ElementType

func (RuleGroupCustomActionArray) ElementType() reflect.Type

func (RuleGroupCustomActionArray) ToRuleGroupCustomActionArrayOutput

func (i RuleGroupCustomActionArray) ToRuleGroupCustomActionArrayOutput() RuleGroupCustomActionArrayOutput

func (RuleGroupCustomActionArray) ToRuleGroupCustomActionArrayOutputWithContext

func (i RuleGroupCustomActionArray) ToRuleGroupCustomActionArrayOutputWithContext(ctx context.Context) RuleGroupCustomActionArrayOutput

type RuleGroupCustomActionArrayInput

type RuleGroupCustomActionArrayInput interface {
	pulumi.Input

	ToRuleGroupCustomActionArrayOutput() RuleGroupCustomActionArrayOutput
	ToRuleGroupCustomActionArrayOutputWithContext(context.Context) RuleGroupCustomActionArrayOutput
}

RuleGroupCustomActionArrayInput is an input type that accepts RuleGroupCustomActionArray and RuleGroupCustomActionArrayOutput values. You can construct a concrete instance of `RuleGroupCustomActionArrayInput` via:

RuleGroupCustomActionArray{ RuleGroupCustomActionArgs{...} }

type RuleGroupCustomActionArrayOutput

type RuleGroupCustomActionArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupCustomActionArrayOutput) ElementType

func (RuleGroupCustomActionArrayOutput) Index

func (RuleGroupCustomActionArrayOutput) ToRuleGroupCustomActionArrayOutput

func (o RuleGroupCustomActionArrayOutput) ToRuleGroupCustomActionArrayOutput() RuleGroupCustomActionArrayOutput

func (RuleGroupCustomActionArrayOutput) ToRuleGroupCustomActionArrayOutputWithContext

func (o RuleGroupCustomActionArrayOutput) ToRuleGroupCustomActionArrayOutputWithContext(ctx context.Context) RuleGroupCustomActionArrayOutput

type RuleGroupCustomActionInput

type RuleGroupCustomActionInput interface {
	pulumi.Input

	ToRuleGroupCustomActionOutput() RuleGroupCustomActionOutput
	ToRuleGroupCustomActionOutputWithContext(context.Context) RuleGroupCustomActionOutput
}

RuleGroupCustomActionInput is an input type that accepts RuleGroupCustomActionArgs and RuleGroupCustomActionOutput values. You can construct a concrete instance of `RuleGroupCustomActionInput` via:

RuleGroupCustomActionArgs{...}

type RuleGroupCustomActionOutput

type RuleGroupCustomActionOutput struct{ *pulumi.OutputState }

func (RuleGroupCustomActionOutput) ActionDefinition

The custom action associated with the action name.

func (RuleGroupCustomActionOutput) ActionName

The descriptive name of the custom action. You can't change the name of a custom action after you create it.

func (RuleGroupCustomActionOutput) ElementType

func (RuleGroupCustomActionOutput) ToRuleGroupCustomActionOutput

func (o RuleGroupCustomActionOutput) ToRuleGroupCustomActionOutput() RuleGroupCustomActionOutput

func (RuleGroupCustomActionOutput) ToRuleGroupCustomActionOutputWithContext

func (o RuleGroupCustomActionOutput) ToRuleGroupCustomActionOutputWithContext(ctx context.Context) RuleGroupCustomActionOutput

type RuleGroupDimension

type RuleGroupDimension struct {
	// The value to use in the custom metric dimension.
	Value string `pulumi:"value"`
}

type RuleGroupDimensionArgs

type RuleGroupDimensionArgs struct {
	// The value to use in the custom metric dimension.
	Value pulumi.StringInput `pulumi:"value"`
}

func (RuleGroupDimensionArgs) ElementType

func (RuleGroupDimensionArgs) ElementType() reflect.Type

func (RuleGroupDimensionArgs) ToRuleGroupDimensionOutput

func (i RuleGroupDimensionArgs) ToRuleGroupDimensionOutput() RuleGroupDimensionOutput

func (RuleGroupDimensionArgs) ToRuleGroupDimensionOutputWithContext

func (i RuleGroupDimensionArgs) ToRuleGroupDimensionOutputWithContext(ctx context.Context) RuleGroupDimensionOutput

type RuleGroupDimensionArray

type RuleGroupDimensionArray []RuleGroupDimensionInput

func (RuleGroupDimensionArray) ElementType

func (RuleGroupDimensionArray) ElementType() reflect.Type

func (RuleGroupDimensionArray) ToRuleGroupDimensionArrayOutput

func (i RuleGroupDimensionArray) ToRuleGroupDimensionArrayOutput() RuleGroupDimensionArrayOutput

func (RuleGroupDimensionArray) ToRuleGroupDimensionArrayOutputWithContext

func (i RuleGroupDimensionArray) ToRuleGroupDimensionArrayOutputWithContext(ctx context.Context) RuleGroupDimensionArrayOutput

type RuleGroupDimensionArrayInput

type RuleGroupDimensionArrayInput interface {
	pulumi.Input

	ToRuleGroupDimensionArrayOutput() RuleGroupDimensionArrayOutput
	ToRuleGroupDimensionArrayOutputWithContext(context.Context) RuleGroupDimensionArrayOutput
}

RuleGroupDimensionArrayInput is an input type that accepts RuleGroupDimensionArray and RuleGroupDimensionArrayOutput values. You can construct a concrete instance of `RuleGroupDimensionArrayInput` via:

RuleGroupDimensionArray{ RuleGroupDimensionArgs{...} }

type RuleGroupDimensionArrayOutput

type RuleGroupDimensionArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupDimensionArrayOutput) ElementType

func (RuleGroupDimensionArrayOutput) Index

func (RuleGroupDimensionArrayOutput) ToRuleGroupDimensionArrayOutput

func (o RuleGroupDimensionArrayOutput) ToRuleGroupDimensionArrayOutput() RuleGroupDimensionArrayOutput

func (RuleGroupDimensionArrayOutput) ToRuleGroupDimensionArrayOutputWithContext

func (o RuleGroupDimensionArrayOutput) ToRuleGroupDimensionArrayOutputWithContext(ctx context.Context) RuleGroupDimensionArrayOutput

type RuleGroupDimensionInput

type RuleGroupDimensionInput interface {
	pulumi.Input

	ToRuleGroupDimensionOutput() RuleGroupDimensionOutput
	ToRuleGroupDimensionOutputWithContext(context.Context) RuleGroupDimensionOutput
}

RuleGroupDimensionInput is an input type that accepts RuleGroupDimensionArgs and RuleGroupDimensionOutput values. You can construct a concrete instance of `RuleGroupDimensionInput` via:

RuleGroupDimensionArgs{...}

type RuleGroupDimensionOutput

type RuleGroupDimensionOutput struct{ *pulumi.OutputState }

func (RuleGroupDimensionOutput) ElementType

func (RuleGroupDimensionOutput) ElementType() reflect.Type

func (RuleGroupDimensionOutput) ToRuleGroupDimensionOutput

func (o RuleGroupDimensionOutput) ToRuleGroupDimensionOutput() RuleGroupDimensionOutput

func (RuleGroupDimensionOutput) ToRuleGroupDimensionOutputWithContext

func (o RuleGroupDimensionOutput) ToRuleGroupDimensionOutputWithContext(ctx context.Context) RuleGroupDimensionOutput

func (RuleGroupDimensionOutput) Value

The value to use in the custom metric dimension.

type RuleGroupGeneratedRulesType

type RuleGroupGeneratedRulesType string

func (RuleGroupGeneratedRulesType) ElementType

func (RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypeOutput

func (e RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypeOutput() RuleGroupGeneratedRulesTypeOutput

func (RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypeOutputWithContext

func (e RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypeOutputWithContext(ctx context.Context) RuleGroupGeneratedRulesTypeOutput

func (RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypePtrOutput

func (e RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypePtrOutput() RuleGroupGeneratedRulesTypePtrOutput

func (RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypePtrOutputWithContext

func (e RuleGroupGeneratedRulesType) ToRuleGroupGeneratedRulesTypePtrOutputWithContext(ctx context.Context) RuleGroupGeneratedRulesTypePtrOutput

func (RuleGroupGeneratedRulesType) ToStringOutput

func (e RuleGroupGeneratedRulesType) ToStringOutput() pulumi.StringOutput

func (RuleGroupGeneratedRulesType) ToStringOutputWithContext

func (e RuleGroupGeneratedRulesType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupGeneratedRulesType) ToStringPtrOutput

func (e RuleGroupGeneratedRulesType) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupGeneratedRulesType) ToStringPtrOutputWithContext

func (e RuleGroupGeneratedRulesType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupGeneratedRulesTypeInput

type RuleGroupGeneratedRulesTypeInput interface {
	pulumi.Input

	ToRuleGroupGeneratedRulesTypeOutput() RuleGroupGeneratedRulesTypeOutput
	ToRuleGroupGeneratedRulesTypeOutputWithContext(context.Context) RuleGroupGeneratedRulesTypeOutput
}

RuleGroupGeneratedRulesTypeInput is an input type that accepts values of the RuleGroupGeneratedRulesType enum A concrete instance of `RuleGroupGeneratedRulesTypeInput` can be one of the following:

RuleGroupGeneratedRulesTypeAllowlist
RuleGroupGeneratedRulesTypeDenylist

type RuleGroupGeneratedRulesTypeOutput

type RuleGroupGeneratedRulesTypeOutput struct{ *pulumi.OutputState }

func (RuleGroupGeneratedRulesTypeOutput) ElementType

func (RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypeOutput

func (o RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypeOutput() RuleGroupGeneratedRulesTypeOutput

func (RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypeOutputWithContext

func (o RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypeOutputWithContext(ctx context.Context) RuleGroupGeneratedRulesTypeOutput

func (RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypePtrOutput

func (o RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypePtrOutput() RuleGroupGeneratedRulesTypePtrOutput

func (RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypePtrOutputWithContext

func (o RuleGroupGeneratedRulesTypeOutput) ToRuleGroupGeneratedRulesTypePtrOutputWithContext(ctx context.Context) RuleGroupGeneratedRulesTypePtrOutput

func (RuleGroupGeneratedRulesTypeOutput) ToStringOutput

func (RuleGroupGeneratedRulesTypeOutput) ToStringOutputWithContext

func (o RuleGroupGeneratedRulesTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupGeneratedRulesTypeOutput) ToStringPtrOutput

func (RuleGroupGeneratedRulesTypeOutput) ToStringPtrOutputWithContext

func (o RuleGroupGeneratedRulesTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupGeneratedRulesTypePtrInput

type RuleGroupGeneratedRulesTypePtrInput interface {
	pulumi.Input

	ToRuleGroupGeneratedRulesTypePtrOutput() RuleGroupGeneratedRulesTypePtrOutput
	ToRuleGroupGeneratedRulesTypePtrOutputWithContext(context.Context) RuleGroupGeneratedRulesTypePtrOutput
}

func RuleGroupGeneratedRulesTypePtr

func RuleGroupGeneratedRulesTypePtr(v string) RuleGroupGeneratedRulesTypePtrInput

type RuleGroupGeneratedRulesTypePtrOutput

type RuleGroupGeneratedRulesTypePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupGeneratedRulesTypePtrOutput) Elem

func (RuleGroupGeneratedRulesTypePtrOutput) ElementType

func (RuleGroupGeneratedRulesTypePtrOutput) ToRuleGroupGeneratedRulesTypePtrOutput

func (o RuleGroupGeneratedRulesTypePtrOutput) ToRuleGroupGeneratedRulesTypePtrOutput() RuleGroupGeneratedRulesTypePtrOutput

func (RuleGroupGeneratedRulesTypePtrOutput) ToRuleGroupGeneratedRulesTypePtrOutputWithContext

func (o RuleGroupGeneratedRulesTypePtrOutput) ToRuleGroupGeneratedRulesTypePtrOutputWithContext(ctx context.Context) RuleGroupGeneratedRulesTypePtrOutput

func (RuleGroupGeneratedRulesTypePtrOutput) ToStringPtrOutput

func (RuleGroupGeneratedRulesTypePtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupGeneratedRulesTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupHeader

type RuleGroupHeader struct {
	// The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .
	//
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	Destination string `pulumi:"destination"`
	// The destination port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .
	DestinationPort string `pulumi:"destinationPort"`
	// The direction of traffic flow to inspect. If set to `ANY` , the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to `FORWARD` , the inspection only matches traffic going from the source to the destination.
	Direction RuleGroupHeaderDirection `pulumi:"direction"`
	// The protocol to inspect for. To specify all, you can use `IP` , because all traffic on AWS and on the internet is IP.
	Protocol RuleGroupHeaderProtocol `pulumi:"protocol"`
	// The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .
	//
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	Source string `pulumi:"source"`
	// The source port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .
	SourcePort string `pulumi:"sourcePort"`
}

type RuleGroupHeaderArgs

type RuleGroupHeaderArgs struct {
	// The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .
	//
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	Destination pulumi.StringInput `pulumi:"destination"`
	// The destination port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .
	DestinationPort pulumi.StringInput `pulumi:"destinationPort"`
	// The direction of traffic flow to inspect. If set to `ANY` , the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to `FORWARD` , the inspection only matches traffic going from the source to the destination.
	Direction RuleGroupHeaderDirectionInput `pulumi:"direction"`
	// The protocol to inspect for. To specify all, you can use `IP` , because all traffic on AWS and on the internet is IP.
	Protocol RuleGroupHeaderProtocolInput `pulumi:"protocol"`
	// The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .
	//
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	Source pulumi.StringInput `pulumi:"source"`
	// The source port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .
	SourcePort pulumi.StringInput `pulumi:"sourcePort"`
}

func (RuleGroupHeaderArgs) ElementType

func (RuleGroupHeaderArgs) ElementType() reflect.Type

func (RuleGroupHeaderArgs) ToRuleGroupHeaderOutput

func (i RuleGroupHeaderArgs) ToRuleGroupHeaderOutput() RuleGroupHeaderOutput

func (RuleGroupHeaderArgs) ToRuleGroupHeaderOutputWithContext

func (i RuleGroupHeaderArgs) ToRuleGroupHeaderOutputWithContext(ctx context.Context) RuleGroupHeaderOutput

type RuleGroupHeaderDirection

type RuleGroupHeaderDirection string

The direction of traffic flow to inspect. If set to `ANY` , the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to `FORWARD` , the inspection only matches traffic going from the source to the destination.

func (RuleGroupHeaderDirection) ElementType

func (RuleGroupHeaderDirection) ElementType() reflect.Type

func (RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionOutput

func (e RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionOutput() RuleGroupHeaderDirectionOutput

func (RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionOutputWithContext

func (e RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionOutputWithContext(ctx context.Context) RuleGroupHeaderDirectionOutput

func (RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionPtrOutput

func (e RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionPtrOutput() RuleGroupHeaderDirectionPtrOutput

func (RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionPtrOutputWithContext

func (e RuleGroupHeaderDirection) ToRuleGroupHeaderDirectionPtrOutputWithContext(ctx context.Context) RuleGroupHeaderDirectionPtrOutput

func (RuleGroupHeaderDirection) ToStringOutput

func (e RuleGroupHeaderDirection) ToStringOutput() pulumi.StringOutput

func (RuleGroupHeaderDirection) ToStringOutputWithContext

func (e RuleGroupHeaderDirection) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupHeaderDirection) ToStringPtrOutput

func (e RuleGroupHeaderDirection) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupHeaderDirection) ToStringPtrOutputWithContext

func (e RuleGroupHeaderDirection) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupHeaderDirectionInput

type RuleGroupHeaderDirectionInput interface {
	pulumi.Input

	ToRuleGroupHeaderDirectionOutput() RuleGroupHeaderDirectionOutput
	ToRuleGroupHeaderDirectionOutputWithContext(context.Context) RuleGroupHeaderDirectionOutput
}

RuleGroupHeaderDirectionInput is an input type that accepts values of the RuleGroupHeaderDirection enum A concrete instance of `RuleGroupHeaderDirectionInput` can be one of the following:

RuleGroupHeaderDirectionForward
RuleGroupHeaderDirectionAny

type RuleGroupHeaderDirectionOutput

type RuleGroupHeaderDirectionOutput struct{ *pulumi.OutputState }

func (RuleGroupHeaderDirectionOutput) ElementType

func (RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionOutput

func (o RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionOutput() RuleGroupHeaderDirectionOutput

func (RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionOutputWithContext

func (o RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionOutputWithContext(ctx context.Context) RuleGroupHeaderDirectionOutput

func (RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionPtrOutput

func (o RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionPtrOutput() RuleGroupHeaderDirectionPtrOutput

func (RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionPtrOutputWithContext

func (o RuleGroupHeaderDirectionOutput) ToRuleGroupHeaderDirectionPtrOutputWithContext(ctx context.Context) RuleGroupHeaderDirectionPtrOutput

func (RuleGroupHeaderDirectionOutput) ToStringOutput

func (RuleGroupHeaderDirectionOutput) ToStringOutputWithContext

func (o RuleGroupHeaderDirectionOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupHeaderDirectionOutput) ToStringPtrOutput

func (RuleGroupHeaderDirectionOutput) ToStringPtrOutputWithContext

func (o RuleGroupHeaderDirectionOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupHeaderDirectionPtrInput

type RuleGroupHeaderDirectionPtrInput interface {
	pulumi.Input

	ToRuleGroupHeaderDirectionPtrOutput() RuleGroupHeaderDirectionPtrOutput
	ToRuleGroupHeaderDirectionPtrOutputWithContext(context.Context) RuleGroupHeaderDirectionPtrOutput
}

func RuleGroupHeaderDirectionPtr

func RuleGroupHeaderDirectionPtr(v string) RuleGroupHeaderDirectionPtrInput

type RuleGroupHeaderDirectionPtrOutput

type RuleGroupHeaderDirectionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupHeaderDirectionPtrOutput) Elem

func (RuleGroupHeaderDirectionPtrOutput) ElementType

func (RuleGroupHeaderDirectionPtrOutput) ToRuleGroupHeaderDirectionPtrOutput

func (o RuleGroupHeaderDirectionPtrOutput) ToRuleGroupHeaderDirectionPtrOutput() RuleGroupHeaderDirectionPtrOutput

func (RuleGroupHeaderDirectionPtrOutput) ToRuleGroupHeaderDirectionPtrOutputWithContext

func (o RuleGroupHeaderDirectionPtrOutput) ToRuleGroupHeaderDirectionPtrOutputWithContext(ctx context.Context) RuleGroupHeaderDirectionPtrOutput

func (RuleGroupHeaderDirectionPtrOutput) ToStringPtrOutput

func (RuleGroupHeaderDirectionPtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupHeaderDirectionPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupHeaderInput

type RuleGroupHeaderInput interface {
	pulumi.Input

	ToRuleGroupHeaderOutput() RuleGroupHeaderOutput
	ToRuleGroupHeaderOutputWithContext(context.Context) RuleGroupHeaderOutput
}

RuleGroupHeaderInput is an input type that accepts RuleGroupHeaderArgs and RuleGroupHeaderOutput values. You can construct a concrete instance of `RuleGroupHeaderInput` via:

RuleGroupHeaderArgs{...}

type RuleGroupHeaderOutput

type RuleGroupHeaderOutput struct{ *pulumi.OutputState }

func (RuleGroupHeaderOutput) Destination

func (o RuleGroupHeaderOutput) Destination() pulumi.StringOutput

The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.

Examples:

- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` . - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` . - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` . - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .

For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .

func (RuleGroupHeaderOutput) DestinationPort

func (o RuleGroupHeaderOutput) DestinationPort() pulumi.StringOutput

The destination port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .

func (RuleGroupHeaderOutput) Direction

The direction of traffic flow to inspect. If set to `ANY` , the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to `FORWARD` , the inspection only matches traffic going from the source to the destination.

func (RuleGroupHeaderOutput) ElementType

func (RuleGroupHeaderOutput) ElementType() reflect.Type

func (RuleGroupHeaderOutput) Protocol

The protocol to inspect for. To specify all, you can use `IP` , because all traffic on AWS and on the internet is IP.

func (RuleGroupHeaderOutput) Source

The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.

Examples:

- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` . - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` . - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` . - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .

For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .

func (RuleGroupHeaderOutput) SourcePort

func (o RuleGroupHeaderOutput) SourcePort() pulumi.StringOutput

The source port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .

func (RuleGroupHeaderOutput) ToRuleGroupHeaderOutput

func (o RuleGroupHeaderOutput) ToRuleGroupHeaderOutput() RuleGroupHeaderOutput

func (RuleGroupHeaderOutput) ToRuleGroupHeaderOutputWithContext

func (o RuleGroupHeaderOutput) ToRuleGroupHeaderOutputWithContext(ctx context.Context) RuleGroupHeaderOutput

type RuleGroupHeaderProtocol

type RuleGroupHeaderProtocol string

The protocol to inspect for. To specify all, you can use `IP` , because all traffic on AWS and on the internet is IP.

func (RuleGroupHeaderProtocol) ElementType

func (RuleGroupHeaderProtocol) ElementType() reflect.Type

func (RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolOutput

func (e RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolOutput() RuleGroupHeaderProtocolOutput

func (RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolOutputWithContext

func (e RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolOutputWithContext(ctx context.Context) RuleGroupHeaderProtocolOutput

func (RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolPtrOutput

func (e RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolPtrOutput() RuleGroupHeaderProtocolPtrOutput

func (RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolPtrOutputWithContext

func (e RuleGroupHeaderProtocol) ToRuleGroupHeaderProtocolPtrOutputWithContext(ctx context.Context) RuleGroupHeaderProtocolPtrOutput

func (RuleGroupHeaderProtocol) ToStringOutput

func (e RuleGroupHeaderProtocol) ToStringOutput() pulumi.StringOutput

func (RuleGroupHeaderProtocol) ToStringOutputWithContext

func (e RuleGroupHeaderProtocol) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupHeaderProtocol) ToStringPtrOutput

func (e RuleGroupHeaderProtocol) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupHeaderProtocol) ToStringPtrOutputWithContext

func (e RuleGroupHeaderProtocol) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupHeaderProtocolInput

type RuleGroupHeaderProtocolInput interface {
	pulumi.Input

	ToRuleGroupHeaderProtocolOutput() RuleGroupHeaderProtocolOutput
	ToRuleGroupHeaderProtocolOutputWithContext(context.Context) RuleGroupHeaderProtocolOutput
}

RuleGroupHeaderProtocolInput is an input type that accepts values of the RuleGroupHeaderProtocol enum A concrete instance of `RuleGroupHeaderProtocolInput` can be one of the following:

RuleGroupHeaderProtocolIp
RuleGroupHeaderProtocolTcp
RuleGroupHeaderProtocolUdp
RuleGroupHeaderProtocolIcmp
RuleGroupHeaderProtocolHttp
RuleGroupHeaderProtocolFtp
RuleGroupHeaderProtocolTls
RuleGroupHeaderProtocolSmb
RuleGroupHeaderProtocolDns
RuleGroupHeaderProtocolDcerpc
RuleGroupHeaderProtocolSsh
RuleGroupHeaderProtocolSmtp
RuleGroupHeaderProtocolImap
RuleGroupHeaderProtocolMsn
RuleGroupHeaderProtocolKrb5
RuleGroupHeaderProtocolIkev2
RuleGroupHeaderProtocolTftp
RuleGroupHeaderProtocolNtp
RuleGroupHeaderProtocolDhcp

type RuleGroupHeaderProtocolOutput

type RuleGroupHeaderProtocolOutput struct{ *pulumi.OutputState }

func (RuleGroupHeaderProtocolOutput) ElementType

func (RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolOutput

func (o RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolOutput() RuleGroupHeaderProtocolOutput

func (RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolOutputWithContext

func (o RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolOutputWithContext(ctx context.Context) RuleGroupHeaderProtocolOutput

func (RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolPtrOutput

func (o RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolPtrOutput() RuleGroupHeaderProtocolPtrOutput

func (RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolPtrOutputWithContext

func (o RuleGroupHeaderProtocolOutput) ToRuleGroupHeaderProtocolPtrOutputWithContext(ctx context.Context) RuleGroupHeaderProtocolPtrOutput

func (RuleGroupHeaderProtocolOutput) ToStringOutput

func (RuleGroupHeaderProtocolOutput) ToStringOutputWithContext

func (o RuleGroupHeaderProtocolOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupHeaderProtocolOutput) ToStringPtrOutput

func (RuleGroupHeaderProtocolOutput) ToStringPtrOutputWithContext

func (o RuleGroupHeaderProtocolOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupHeaderProtocolPtrInput

type RuleGroupHeaderProtocolPtrInput interface {
	pulumi.Input

	ToRuleGroupHeaderProtocolPtrOutput() RuleGroupHeaderProtocolPtrOutput
	ToRuleGroupHeaderProtocolPtrOutputWithContext(context.Context) RuleGroupHeaderProtocolPtrOutput
}

func RuleGroupHeaderProtocolPtr

func RuleGroupHeaderProtocolPtr(v string) RuleGroupHeaderProtocolPtrInput

type RuleGroupHeaderProtocolPtrOutput

type RuleGroupHeaderProtocolPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupHeaderProtocolPtrOutput) Elem

func (RuleGroupHeaderProtocolPtrOutput) ElementType

func (RuleGroupHeaderProtocolPtrOutput) ToRuleGroupHeaderProtocolPtrOutput

func (o RuleGroupHeaderProtocolPtrOutput) ToRuleGroupHeaderProtocolPtrOutput() RuleGroupHeaderProtocolPtrOutput

func (RuleGroupHeaderProtocolPtrOutput) ToRuleGroupHeaderProtocolPtrOutputWithContext

func (o RuleGroupHeaderProtocolPtrOutput) ToRuleGroupHeaderProtocolPtrOutputWithContext(ctx context.Context) RuleGroupHeaderProtocolPtrOutput

func (RuleGroupHeaderProtocolPtrOutput) ToStringPtrOutput

func (RuleGroupHeaderProtocolPtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupHeaderProtocolPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupInput

type RuleGroupInput interface {
	pulumi.Input

	ToRuleGroupOutput() RuleGroupOutput
	ToRuleGroupOutputWithContext(ctx context.Context) RuleGroupOutput
}

type RuleGroupIpSet added in v0.97.0

type RuleGroupIpSet struct {
	Definition []string `pulumi:"definition"`
}

type RuleGroupIpSetArgs added in v0.97.0

type RuleGroupIpSetArgs struct {
	Definition pulumi.StringArrayInput `pulumi:"definition"`
}

func (RuleGroupIpSetArgs) ElementType added in v0.97.0

func (RuleGroupIpSetArgs) ElementType() reflect.Type

func (RuleGroupIpSetArgs) ToRuleGroupIpSetOutput added in v0.97.0

func (i RuleGroupIpSetArgs) ToRuleGroupIpSetOutput() RuleGroupIpSetOutput

func (RuleGroupIpSetArgs) ToRuleGroupIpSetOutputWithContext added in v0.97.0

func (i RuleGroupIpSetArgs) ToRuleGroupIpSetOutputWithContext(ctx context.Context) RuleGroupIpSetOutput

type RuleGroupIpSetInput added in v0.97.0

type RuleGroupIpSetInput interface {
	pulumi.Input

	ToRuleGroupIpSetOutput() RuleGroupIpSetOutput
	ToRuleGroupIpSetOutputWithContext(context.Context) RuleGroupIpSetOutput
}

RuleGroupIpSetInput is an input type that accepts RuleGroupIpSetArgs and RuleGroupIpSetOutput values. You can construct a concrete instance of `RuleGroupIpSetInput` via:

RuleGroupIpSetArgs{...}

type RuleGroupIpSetMap added in v0.97.0

type RuleGroupIpSetMap map[string]RuleGroupIpSetInput

func (RuleGroupIpSetMap) ElementType added in v0.97.0

func (RuleGroupIpSetMap) ElementType() reflect.Type

func (RuleGroupIpSetMap) ToRuleGroupIpSetMapOutput added in v0.97.0

func (i RuleGroupIpSetMap) ToRuleGroupIpSetMapOutput() RuleGroupIpSetMapOutput

func (RuleGroupIpSetMap) ToRuleGroupIpSetMapOutputWithContext added in v0.97.0

func (i RuleGroupIpSetMap) ToRuleGroupIpSetMapOutputWithContext(ctx context.Context) RuleGroupIpSetMapOutput

type RuleGroupIpSetMapInput added in v0.97.0

type RuleGroupIpSetMapInput interface {
	pulumi.Input

	ToRuleGroupIpSetMapOutput() RuleGroupIpSetMapOutput
	ToRuleGroupIpSetMapOutputWithContext(context.Context) RuleGroupIpSetMapOutput
}

RuleGroupIpSetMapInput is an input type that accepts RuleGroupIpSetMap and RuleGroupIpSetMapOutput values. You can construct a concrete instance of `RuleGroupIpSetMapInput` via:

RuleGroupIpSetMap{ "key": RuleGroupIpSetArgs{...} }

type RuleGroupIpSetMapOutput added in v0.97.0

type RuleGroupIpSetMapOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetMapOutput) ElementType added in v0.97.0

func (RuleGroupIpSetMapOutput) ElementType() reflect.Type

func (RuleGroupIpSetMapOutput) MapIndex added in v0.97.0

func (RuleGroupIpSetMapOutput) ToRuleGroupIpSetMapOutput added in v0.97.0

func (o RuleGroupIpSetMapOutput) ToRuleGroupIpSetMapOutput() RuleGroupIpSetMapOutput

func (RuleGroupIpSetMapOutput) ToRuleGroupIpSetMapOutputWithContext added in v0.97.0

func (o RuleGroupIpSetMapOutput) ToRuleGroupIpSetMapOutputWithContext(ctx context.Context) RuleGroupIpSetMapOutput

type RuleGroupIpSetOutput added in v0.97.0

type RuleGroupIpSetOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetOutput) Definition added in v0.97.0

func (RuleGroupIpSetOutput) ElementType added in v0.97.0

func (RuleGroupIpSetOutput) ElementType() reflect.Type

func (RuleGroupIpSetOutput) ToRuleGroupIpSetOutput added in v0.97.0

func (o RuleGroupIpSetOutput) ToRuleGroupIpSetOutput() RuleGroupIpSetOutput

func (RuleGroupIpSetOutput) ToRuleGroupIpSetOutputWithContext added in v0.97.0

func (o RuleGroupIpSetOutput) ToRuleGroupIpSetOutputWithContext(ctx context.Context) RuleGroupIpSetOutput

type RuleGroupIpSetReference added in v0.97.0

type RuleGroupIpSetReference struct {
	ReferenceArn *string `pulumi:"referenceArn"`
}

type RuleGroupIpSetReferenceArgs added in v0.97.0

type RuleGroupIpSetReferenceArgs struct {
	ReferenceArn pulumi.StringPtrInput `pulumi:"referenceArn"`
}

func (RuleGroupIpSetReferenceArgs) ElementType added in v0.97.0

func (RuleGroupIpSetReferenceArgs) ToRuleGroupIpSetReferenceOutput added in v0.97.0

func (i RuleGroupIpSetReferenceArgs) ToRuleGroupIpSetReferenceOutput() RuleGroupIpSetReferenceOutput

func (RuleGroupIpSetReferenceArgs) ToRuleGroupIpSetReferenceOutputWithContext added in v0.97.0

func (i RuleGroupIpSetReferenceArgs) ToRuleGroupIpSetReferenceOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceOutput

type RuleGroupIpSetReferenceInput added in v0.97.0

type RuleGroupIpSetReferenceInput interface {
	pulumi.Input

	ToRuleGroupIpSetReferenceOutput() RuleGroupIpSetReferenceOutput
	ToRuleGroupIpSetReferenceOutputWithContext(context.Context) RuleGroupIpSetReferenceOutput
}

RuleGroupIpSetReferenceInput is an input type that accepts RuleGroupIpSetReferenceArgs and RuleGroupIpSetReferenceOutput values. You can construct a concrete instance of `RuleGroupIpSetReferenceInput` via:

RuleGroupIpSetReferenceArgs{...}

type RuleGroupIpSetReferenceMap added in v0.97.0

type RuleGroupIpSetReferenceMap map[string]RuleGroupIpSetReferenceInput

func (RuleGroupIpSetReferenceMap) ElementType added in v0.97.0

func (RuleGroupIpSetReferenceMap) ElementType() reflect.Type

func (RuleGroupIpSetReferenceMap) ToRuleGroupIpSetReferenceMapOutput added in v0.97.0

func (i RuleGroupIpSetReferenceMap) ToRuleGroupIpSetReferenceMapOutput() RuleGroupIpSetReferenceMapOutput

func (RuleGroupIpSetReferenceMap) ToRuleGroupIpSetReferenceMapOutputWithContext added in v0.97.0

func (i RuleGroupIpSetReferenceMap) ToRuleGroupIpSetReferenceMapOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceMapOutput

type RuleGroupIpSetReferenceMapInput added in v0.97.0

type RuleGroupIpSetReferenceMapInput interface {
	pulumi.Input

	ToRuleGroupIpSetReferenceMapOutput() RuleGroupIpSetReferenceMapOutput
	ToRuleGroupIpSetReferenceMapOutputWithContext(context.Context) RuleGroupIpSetReferenceMapOutput
}

RuleGroupIpSetReferenceMapInput is an input type that accepts RuleGroupIpSetReferenceMap and RuleGroupIpSetReferenceMapOutput values. You can construct a concrete instance of `RuleGroupIpSetReferenceMapInput` via:

RuleGroupIpSetReferenceMap{ "key": RuleGroupIpSetReferenceArgs{...} }

type RuleGroupIpSetReferenceMapOutput added in v0.97.0

type RuleGroupIpSetReferenceMapOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetReferenceMapOutput) ElementType added in v0.97.0

func (RuleGroupIpSetReferenceMapOutput) MapIndex added in v0.97.0

func (RuleGroupIpSetReferenceMapOutput) ToRuleGroupIpSetReferenceMapOutput added in v0.97.0

func (o RuleGroupIpSetReferenceMapOutput) ToRuleGroupIpSetReferenceMapOutput() RuleGroupIpSetReferenceMapOutput

func (RuleGroupIpSetReferenceMapOutput) ToRuleGroupIpSetReferenceMapOutputWithContext added in v0.97.0

func (o RuleGroupIpSetReferenceMapOutput) ToRuleGroupIpSetReferenceMapOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceMapOutput

type RuleGroupIpSetReferenceOutput added in v0.97.0

type RuleGroupIpSetReferenceOutput struct{ *pulumi.OutputState }

func (RuleGroupIpSetReferenceOutput) ElementType added in v0.97.0

func (RuleGroupIpSetReferenceOutput) ReferenceArn added in v0.97.0

func (RuleGroupIpSetReferenceOutput) ToRuleGroupIpSetReferenceOutput added in v0.97.0

func (o RuleGroupIpSetReferenceOutput) ToRuleGroupIpSetReferenceOutput() RuleGroupIpSetReferenceOutput

func (RuleGroupIpSetReferenceOutput) ToRuleGroupIpSetReferenceOutputWithContext added in v0.97.0

func (o RuleGroupIpSetReferenceOutput) ToRuleGroupIpSetReferenceOutputWithContext(ctx context.Context) RuleGroupIpSetReferenceOutput

type RuleGroupMatchAttributes

type RuleGroupMatchAttributes struct {
	// The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
	//
	// You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .
	DestinationPorts []RuleGroupPortRange `pulumi:"destinationPorts"`
	// The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address.
	Destinations []RuleGroupAddress `pulumi:"destinations"`
	// The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.
	Protocols []int `pulumi:"protocols"`
	// The source ports to inspect for. If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
	//
	// You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .
	SourcePorts []RuleGroupPortRange `pulumi:"sourcePorts"`
	// The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address.
	Sources []RuleGroupAddress `pulumi:"sources"`
	// The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP).
	TcpFlags []RuleGroupTcpFlagField `pulumi:"tcpFlags"`
}

type RuleGroupMatchAttributesArgs

type RuleGroupMatchAttributesArgs struct {
	// The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
	//
	// You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .
	DestinationPorts RuleGroupPortRangeArrayInput `pulumi:"destinationPorts"`
	// The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address.
	Destinations RuleGroupAddressArrayInput `pulumi:"destinations"`
	// The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.
	Protocols pulumi.IntArrayInput `pulumi:"protocols"`
	// The source ports to inspect for. If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
	//
	// You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .
	SourcePorts RuleGroupPortRangeArrayInput `pulumi:"sourcePorts"`
	// The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address.
	Sources RuleGroupAddressArrayInput `pulumi:"sources"`
	// The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP).
	TcpFlags RuleGroupTcpFlagFieldArrayInput `pulumi:"tcpFlags"`
}

func (RuleGroupMatchAttributesArgs) ElementType

func (RuleGroupMatchAttributesArgs) ToRuleGroupMatchAttributesOutput

func (i RuleGroupMatchAttributesArgs) ToRuleGroupMatchAttributesOutput() RuleGroupMatchAttributesOutput

func (RuleGroupMatchAttributesArgs) ToRuleGroupMatchAttributesOutputWithContext

func (i RuleGroupMatchAttributesArgs) ToRuleGroupMatchAttributesOutputWithContext(ctx context.Context) RuleGroupMatchAttributesOutput

type RuleGroupMatchAttributesInput

type RuleGroupMatchAttributesInput interface {
	pulumi.Input

	ToRuleGroupMatchAttributesOutput() RuleGroupMatchAttributesOutput
	ToRuleGroupMatchAttributesOutputWithContext(context.Context) RuleGroupMatchAttributesOutput
}

RuleGroupMatchAttributesInput is an input type that accepts RuleGroupMatchAttributesArgs and RuleGroupMatchAttributesOutput values. You can construct a concrete instance of `RuleGroupMatchAttributesInput` via:

RuleGroupMatchAttributesArgs{...}

type RuleGroupMatchAttributesOutput

type RuleGroupMatchAttributesOutput struct{ *pulumi.OutputState }

func (RuleGroupMatchAttributesOutput) DestinationPorts

The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).

You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .

func (RuleGroupMatchAttributesOutput) Destinations

The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address.

func (RuleGroupMatchAttributesOutput) ElementType

func (RuleGroupMatchAttributesOutput) Protocols

The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.

func (RuleGroupMatchAttributesOutput) SourcePorts

The source ports to inspect for. If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).

You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .

func (RuleGroupMatchAttributesOutput) Sources

The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address.

func (RuleGroupMatchAttributesOutput) TcpFlags added in v0.72.0

The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP).

func (RuleGroupMatchAttributesOutput) ToRuleGroupMatchAttributesOutput

func (o RuleGroupMatchAttributesOutput) ToRuleGroupMatchAttributesOutput() RuleGroupMatchAttributesOutput

func (RuleGroupMatchAttributesOutput) ToRuleGroupMatchAttributesOutputWithContext

func (o RuleGroupMatchAttributesOutput) ToRuleGroupMatchAttributesOutputWithContext(ctx context.Context) RuleGroupMatchAttributesOutput

type RuleGroupOutput

type RuleGroupOutput struct{ *pulumi.OutputState }

func (RuleGroupOutput) Capacity added in v0.17.0

func (o RuleGroupOutput) Capacity() pulumi.IntOutput

The maximum operating resources that this rule group can use. You can't change a rule group's capacity setting after you create the rule group. When you update a rule group, you are limited to this capacity. When you reference a rule group from a firewall policy, Network Firewall reserves this capacity for the rule group.

func (RuleGroupOutput) Description added in v0.17.0

func (o RuleGroupOutput) Description() pulumi.StringPtrOutput

A description of the rule group.

func (RuleGroupOutput) ElementType

func (RuleGroupOutput) ElementType() reflect.Type

func (RuleGroupOutput) RuleGroup added in v0.17.0

An object that defines the rule group rules.

func (RuleGroupOutput) RuleGroupArn added in v0.17.0

func (o RuleGroupOutput) RuleGroupArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the `RuleGroup` .

func (RuleGroupOutput) RuleGroupId added in v0.17.0

func (o RuleGroupOutput) RuleGroupId() pulumi.StringOutput

The unique ID of the `RuleGroup` resource.

func (RuleGroupOutput) RuleGroupName added in v0.17.0

func (o RuleGroupOutput) RuleGroupName() pulumi.StringOutput

The descriptive name of the rule group. You can't change the name of a rule group after you create it.

func (RuleGroupOutput) Tags added in v0.17.0

An array of key-value pairs to apply to this resource.

For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .

func (RuleGroupOutput) ToRuleGroupOutput

func (o RuleGroupOutput) ToRuleGroupOutput() RuleGroupOutput

func (RuleGroupOutput) ToRuleGroupOutputWithContext

func (o RuleGroupOutput) ToRuleGroupOutputWithContext(ctx context.Context) RuleGroupOutput

func (RuleGroupOutput) Type added in v0.17.0

Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains stateless rules. If it is stateful, it contains stateful rules.

type RuleGroupPortRange

type RuleGroupPortRange struct {
	// The lower limit of the port range. This must be less than or equal to the `ToPort` specification.
	FromPort int `pulumi:"fromPort"`
	// The upper limit of the port range. This must be greater than or equal to the `FromPort` specification.
	ToPort int `pulumi:"toPort"`
}

type RuleGroupPortRangeArgs

type RuleGroupPortRangeArgs struct {
	// The lower limit of the port range. This must be less than or equal to the `ToPort` specification.
	FromPort pulumi.IntInput `pulumi:"fromPort"`
	// The upper limit of the port range. This must be greater than or equal to the `FromPort` specification.
	ToPort pulumi.IntInput `pulumi:"toPort"`
}

func (RuleGroupPortRangeArgs) ElementType

func (RuleGroupPortRangeArgs) ElementType() reflect.Type

func (RuleGroupPortRangeArgs) ToRuleGroupPortRangeOutput

func (i RuleGroupPortRangeArgs) ToRuleGroupPortRangeOutput() RuleGroupPortRangeOutput

func (RuleGroupPortRangeArgs) ToRuleGroupPortRangeOutputWithContext

func (i RuleGroupPortRangeArgs) ToRuleGroupPortRangeOutputWithContext(ctx context.Context) RuleGroupPortRangeOutput

type RuleGroupPortRangeArray

type RuleGroupPortRangeArray []RuleGroupPortRangeInput

func (RuleGroupPortRangeArray) ElementType

func (RuleGroupPortRangeArray) ElementType() reflect.Type

func (RuleGroupPortRangeArray) ToRuleGroupPortRangeArrayOutput

func (i RuleGroupPortRangeArray) ToRuleGroupPortRangeArrayOutput() RuleGroupPortRangeArrayOutput

func (RuleGroupPortRangeArray) ToRuleGroupPortRangeArrayOutputWithContext

func (i RuleGroupPortRangeArray) ToRuleGroupPortRangeArrayOutputWithContext(ctx context.Context) RuleGroupPortRangeArrayOutput

type RuleGroupPortRangeArrayInput

type RuleGroupPortRangeArrayInput interface {
	pulumi.Input

	ToRuleGroupPortRangeArrayOutput() RuleGroupPortRangeArrayOutput
	ToRuleGroupPortRangeArrayOutputWithContext(context.Context) RuleGroupPortRangeArrayOutput
}

RuleGroupPortRangeArrayInput is an input type that accepts RuleGroupPortRangeArray and RuleGroupPortRangeArrayOutput values. You can construct a concrete instance of `RuleGroupPortRangeArrayInput` via:

RuleGroupPortRangeArray{ RuleGroupPortRangeArgs{...} }

type RuleGroupPortRangeArrayOutput

type RuleGroupPortRangeArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupPortRangeArrayOutput) ElementType

func (RuleGroupPortRangeArrayOutput) Index

func (RuleGroupPortRangeArrayOutput) ToRuleGroupPortRangeArrayOutput

func (o RuleGroupPortRangeArrayOutput) ToRuleGroupPortRangeArrayOutput() RuleGroupPortRangeArrayOutput

func (RuleGroupPortRangeArrayOutput) ToRuleGroupPortRangeArrayOutputWithContext

func (o RuleGroupPortRangeArrayOutput) ToRuleGroupPortRangeArrayOutputWithContext(ctx context.Context) RuleGroupPortRangeArrayOutput

type RuleGroupPortRangeInput

type RuleGroupPortRangeInput interface {
	pulumi.Input

	ToRuleGroupPortRangeOutput() RuleGroupPortRangeOutput
	ToRuleGroupPortRangeOutputWithContext(context.Context) RuleGroupPortRangeOutput
}

RuleGroupPortRangeInput is an input type that accepts RuleGroupPortRangeArgs and RuleGroupPortRangeOutput values. You can construct a concrete instance of `RuleGroupPortRangeInput` via:

RuleGroupPortRangeArgs{...}

type RuleGroupPortRangeOutput

type RuleGroupPortRangeOutput struct{ *pulumi.OutputState }

func (RuleGroupPortRangeOutput) ElementType

func (RuleGroupPortRangeOutput) ElementType() reflect.Type

func (RuleGroupPortRangeOutput) FromPort

The lower limit of the port range. This must be less than or equal to the `ToPort` specification.

func (RuleGroupPortRangeOutput) ToPort

The upper limit of the port range. This must be greater than or equal to the `FromPort` specification.

func (RuleGroupPortRangeOutput) ToRuleGroupPortRangeOutput

func (o RuleGroupPortRangeOutput) ToRuleGroupPortRangeOutput() RuleGroupPortRangeOutput

func (RuleGroupPortRangeOutput) ToRuleGroupPortRangeOutputWithContext

func (o RuleGroupPortRangeOutput) ToRuleGroupPortRangeOutputWithContext(ctx context.Context) RuleGroupPortRangeOutput

type RuleGroupPortSet added in v0.97.0

type RuleGroupPortSet struct {
	Definition []string `pulumi:"definition"`
}

type RuleGroupPortSetArgs added in v0.97.0

type RuleGroupPortSetArgs struct {
	Definition pulumi.StringArrayInput `pulumi:"definition"`
}

func (RuleGroupPortSetArgs) ElementType added in v0.97.0

func (RuleGroupPortSetArgs) ElementType() reflect.Type

func (RuleGroupPortSetArgs) ToRuleGroupPortSetOutput added in v0.97.0

func (i RuleGroupPortSetArgs) ToRuleGroupPortSetOutput() RuleGroupPortSetOutput

func (RuleGroupPortSetArgs) ToRuleGroupPortSetOutputWithContext added in v0.97.0

func (i RuleGroupPortSetArgs) ToRuleGroupPortSetOutputWithContext(ctx context.Context) RuleGroupPortSetOutput

type RuleGroupPortSetInput added in v0.97.0

type RuleGroupPortSetInput interface {
	pulumi.Input

	ToRuleGroupPortSetOutput() RuleGroupPortSetOutput
	ToRuleGroupPortSetOutputWithContext(context.Context) RuleGroupPortSetOutput
}

RuleGroupPortSetInput is an input type that accepts RuleGroupPortSetArgs and RuleGroupPortSetOutput values. You can construct a concrete instance of `RuleGroupPortSetInput` via:

RuleGroupPortSetArgs{...}

type RuleGroupPortSetMap added in v0.97.0

type RuleGroupPortSetMap map[string]RuleGroupPortSetInput

func (RuleGroupPortSetMap) ElementType added in v0.97.0

func (RuleGroupPortSetMap) ElementType() reflect.Type

func (RuleGroupPortSetMap) ToRuleGroupPortSetMapOutput added in v0.97.0

func (i RuleGroupPortSetMap) ToRuleGroupPortSetMapOutput() RuleGroupPortSetMapOutput

func (RuleGroupPortSetMap) ToRuleGroupPortSetMapOutputWithContext added in v0.97.0

func (i RuleGroupPortSetMap) ToRuleGroupPortSetMapOutputWithContext(ctx context.Context) RuleGroupPortSetMapOutput

type RuleGroupPortSetMapInput added in v0.97.0

type RuleGroupPortSetMapInput interface {
	pulumi.Input

	ToRuleGroupPortSetMapOutput() RuleGroupPortSetMapOutput
	ToRuleGroupPortSetMapOutputWithContext(context.Context) RuleGroupPortSetMapOutput
}

RuleGroupPortSetMapInput is an input type that accepts RuleGroupPortSetMap and RuleGroupPortSetMapOutput values. You can construct a concrete instance of `RuleGroupPortSetMapInput` via:

RuleGroupPortSetMap{ "key": RuleGroupPortSetArgs{...} }

type RuleGroupPortSetMapOutput added in v0.97.0

type RuleGroupPortSetMapOutput struct{ *pulumi.OutputState }

func (RuleGroupPortSetMapOutput) ElementType added in v0.97.0

func (RuleGroupPortSetMapOutput) ElementType() reflect.Type

func (RuleGroupPortSetMapOutput) MapIndex added in v0.97.0

func (RuleGroupPortSetMapOutput) ToRuleGroupPortSetMapOutput added in v0.97.0

func (o RuleGroupPortSetMapOutput) ToRuleGroupPortSetMapOutput() RuleGroupPortSetMapOutput

func (RuleGroupPortSetMapOutput) ToRuleGroupPortSetMapOutputWithContext added in v0.97.0

func (o RuleGroupPortSetMapOutput) ToRuleGroupPortSetMapOutputWithContext(ctx context.Context) RuleGroupPortSetMapOutput

type RuleGroupPortSetOutput added in v0.97.0

type RuleGroupPortSetOutput struct{ *pulumi.OutputState }

func (RuleGroupPortSetOutput) Definition added in v0.97.0

func (RuleGroupPortSetOutput) ElementType added in v0.97.0

func (RuleGroupPortSetOutput) ElementType() reflect.Type

func (RuleGroupPortSetOutput) ToRuleGroupPortSetOutput added in v0.97.0

func (o RuleGroupPortSetOutput) ToRuleGroupPortSetOutput() RuleGroupPortSetOutput

func (RuleGroupPortSetOutput) ToRuleGroupPortSetOutputWithContext added in v0.97.0

func (o RuleGroupPortSetOutput) ToRuleGroupPortSetOutputWithContext(ctx context.Context) RuleGroupPortSetOutput

type RuleGroupPublishMetricAction

type RuleGroupPublishMetricAction struct {
	Dimensions []RuleGroupDimension `pulumi:"dimensions"`
}

type RuleGroupPublishMetricActionArgs

type RuleGroupPublishMetricActionArgs struct {
	Dimensions RuleGroupDimensionArrayInput `pulumi:"dimensions"`
}

func (RuleGroupPublishMetricActionArgs) ElementType

func (RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionOutput

func (i RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionOutput() RuleGroupPublishMetricActionOutput

func (RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionOutputWithContext

func (i RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionOutputWithContext(ctx context.Context) RuleGroupPublishMetricActionOutput

func (RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionPtrOutput

func (i RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionPtrOutput() RuleGroupPublishMetricActionPtrOutput

func (RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionPtrOutputWithContext

func (i RuleGroupPublishMetricActionArgs) ToRuleGroupPublishMetricActionPtrOutputWithContext(ctx context.Context) RuleGroupPublishMetricActionPtrOutput

type RuleGroupPublishMetricActionInput

type RuleGroupPublishMetricActionInput interface {
	pulumi.Input

	ToRuleGroupPublishMetricActionOutput() RuleGroupPublishMetricActionOutput
	ToRuleGroupPublishMetricActionOutputWithContext(context.Context) RuleGroupPublishMetricActionOutput
}

RuleGroupPublishMetricActionInput is an input type that accepts RuleGroupPublishMetricActionArgs and RuleGroupPublishMetricActionOutput values. You can construct a concrete instance of `RuleGroupPublishMetricActionInput` via:

RuleGroupPublishMetricActionArgs{...}

type RuleGroupPublishMetricActionOutput

type RuleGroupPublishMetricActionOutput struct{ *pulumi.OutputState }

func (RuleGroupPublishMetricActionOutput) Dimensions

func (RuleGroupPublishMetricActionOutput) ElementType

func (RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionOutput

func (o RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionOutput() RuleGroupPublishMetricActionOutput

func (RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionOutputWithContext

func (o RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionOutputWithContext(ctx context.Context) RuleGroupPublishMetricActionOutput

func (RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionPtrOutput

func (o RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionPtrOutput() RuleGroupPublishMetricActionPtrOutput

func (RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionPtrOutputWithContext

func (o RuleGroupPublishMetricActionOutput) ToRuleGroupPublishMetricActionPtrOutputWithContext(ctx context.Context) RuleGroupPublishMetricActionPtrOutput

type RuleGroupPublishMetricActionPtrInput

type RuleGroupPublishMetricActionPtrInput interface {
	pulumi.Input

	ToRuleGroupPublishMetricActionPtrOutput() RuleGroupPublishMetricActionPtrOutput
	ToRuleGroupPublishMetricActionPtrOutputWithContext(context.Context) RuleGroupPublishMetricActionPtrOutput
}

RuleGroupPublishMetricActionPtrInput is an input type that accepts RuleGroupPublishMetricActionArgs, RuleGroupPublishMetricActionPtr and RuleGroupPublishMetricActionPtrOutput values. You can construct a concrete instance of `RuleGroupPublishMetricActionPtrInput` via:

        RuleGroupPublishMetricActionArgs{...}

or:

        nil

type RuleGroupPublishMetricActionPtrOutput

type RuleGroupPublishMetricActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupPublishMetricActionPtrOutput) Dimensions

func (RuleGroupPublishMetricActionPtrOutput) Elem

func (RuleGroupPublishMetricActionPtrOutput) ElementType

func (RuleGroupPublishMetricActionPtrOutput) ToRuleGroupPublishMetricActionPtrOutput

func (o RuleGroupPublishMetricActionPtrOutput) ToRuleGroupPublishMetricActionPtrOutput() RuleGroupPublishMetricActionPtrOutput

func (RuleGroupPublishMetricActionPtrOutput) ToRuleGroupPublishMetricActionPtrOutputWithContext

func (o RuleGroupPublishMetricActionPtrOutput) ToRuleGroupPublishMetricActionPtrOutputWithContext(ctx context.Context) RuleGroupPublishMetricActionPtrOutput

type RuleGroupReferenceSets added in v0.46.0

type RuleGroupReferenceSets struct {
	// The IP set references to use in the stateful rule group.
	IpSetReferences map[string]RuleGroupIpSetReference `pulumi:"ipSetReferences"`
}

type RuleGroupReferenceSetsArgs added in v0.46.0

type RuleGroupReferenceSetsArgs struct {
	// The IP set references to use in the stateful rule group.
	IpSetReferences RuleGroupIpSetReferenceMapInput `pulumi:"ipSetReferences"`
}

func (RuleGroupReferenceSetsArgs) ElementType added in v0.46.0

func (RuleGroupReferenceSetsArgs) ElementType() reflect.Type

func (RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsOutput added in v0.46.0

func (i RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsOutput() RuleGroupReferenceSetsOutput

func (RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsOutputWithContext added in v0.46.0

func (i RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsOutputWithContext(ctx context.Context) RuleGroupReferenceSetsOutput

func (RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsPtrOutput added in v0.46.0

func (i RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsPtrOutput() RuleGroupReferenceSetsPtrOutput

func (RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsPtrOutputWithContext added in v0.46.0

func (i RuleGroupReferenceSetsArgs) ToRuleGroupReferenceSetsPtrOutputWithContext(ctx context.Context) RuleGroupReferenceSetsPtrOutput

type RuleGroupReferenceSetsInput added in v0.46.0

type RuleGroupReferenceSetsInput interface {
	pulumi.Input

	ToRuleGroupReferenceSetsOutput() RuleGroupReferenceSetsOutput
	ToRuleGroupReferenceSetsOutputWithContext(context.Context) RuleGroupReferenceSetsOutput
}

RuleGroupReferenceSetsInput is an input type that accepts RuleGroupReferenceSetsArgs and RuleGroupReferenceSetsOutput values. You can construct a concrete instance of `RuleGroupReferenceSetsInput` via:

RuleGroupReferenceSetsArgs{...}

type RuleGroupReferenceSetsOutput added in v0.46.0

type RuleGroupReferenceSetsOutput struct{ *pulumi.OutputState }

func (RuleGroupReferenceSetsOutput) ElementType added in v0.46.0

func (RuleGroupReferenceSetsOutput) IpSetReferences added in v0.72.0

The IP set references to use in the stateful rule group.

func (RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsOutput added in v0.46.0

func (o RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsOutput() RuleGroupReferenceSetsOutput

func (RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsOutputWithContext added in v0.46.0

func (o RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsOutputWithContext(ctx context.Context) RuleGroupReferenceSetsOutput

func (RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsPtrOutput added in v0.46.0

func (o RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsPtrOutput() RuleGroupReferenceSetsPtrOutput

func (RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsPtrOutputWithContext added in v0.46.0

func (o RuleGroupReferenceSetsOutput) ToRuleGroupReferenceSetsPtrOutputWithContext(ctx context.Context) RuleGroupReferenceSetsPtrOutput

type RuleGroupReferenceSetsPtrInput added in v0.46.0

type RuleGroupReferenceSetsPtrInput interface {
	pulumi.Input

	ToRuleGroupReferenceSetsPtrOutput() RuleGroupReferenceSetsPtrOutput
	ToRuleGroupReferenceSetsPtrOutputWithContext(context.Context) RuleGroupReferenceSetsPtrOutput
}

RuleGroupReferenceSetsPtrInput is an input type that accepts RuleGroupReferenceSetsArgs, RuleGroupReferenceSetsPtr and RuleGroupReferenceSetsPtrOutput values. You can construct a concrete instance of `RuleGroupReferenceSetsPtrInput` via:

        RuleGroupReferenceSetsArgs{...}

or:

        nil

func RuleGroupReferenceSetsPtr added in v0.46.0

func RuleGroupReferenceSetsPtr(v *RuleGroupReferenceSetsArgs) RuleGroupReferenceSetsPtrInput

type RuleGroupReferenceSetsPtrOutput added in v0.46.0

type RuleGroupReferenceSetsPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupReferenceSetsPtrOutput) Elem added in v0.46.0

func (RuleGroupReferenceSetsPtrOutput) ElementType added in v0.46.0

func (RuleGroupReferenceSetsPtrOutput) IpSetReferences added in v0.72.0

The IP set references to use in the stateful rule group.

func (RuleGroupReferenceSetsPtrOutput) ToRuleGroupReferenceSetsPtrOutput added in v0.46.0

func (o RuleGroupReferenceSetsPtrOutput) ToRuleGroupReferenceSetsPtrOutput() RuleGroupReferenceSetsPtrOutput

func (RuleGroupReferenceSetsPtrOutput) ToRuleGroupReferenceSetsPtrOutputWithContext added in v0.46.0

func (o RuleGroupReferenceSetsPtrOutput) ToRuleGroupReferenceSetsPtrOutputWithContext(ctx context.Context) RuleGroupReferenceSetsPtrOutput

type RuleGroupRuleDefinition

type RuleGroupRuleDefinition struct {
	// The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.
	//
	// > Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the `FirewallPolicy` .
	//
	// For every rule, you must specify exactly one of the following standard actions.
	//
	// - *aws:pass* - Discontinues all inspection of the packet and permits it to go to its intended destination.
	// - *aws:drop* - Discontinues all inspection of the packet and blocks it from going to its intended destination.
	// - *aws:forward_to_sfe* - Discontinues stateless inspection of the packet and forwards it to the stateful rule engine for inspection.
	//
	// Additionally, you can specify a custom action. To do this, you define a custom action by name and type, then provide the name you've assigned to the action in this `Actions` setting.
	//
	// To provide more than one action in this setting, separate the settings with a comma. For example, if you have a publish metrics custom action that you've named `MyMetricsAction` , then you could specify the standard action `aws:pass` combined with the custom action using `["aws:pass", "MyMetricsAction"]` .
	Actions []string `pulumi:"actions"`
	// Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.
	MatchAttributes RuleGroupMatchAttributes `pulumi:"matchAttributes"`
}

type RuleGroupRuleDefinitionArgs

type RuleGroupRuleDefinitionArgs struct {
	// The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.
	//
	// > Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the `FirewallPolicy` .
	//
	// For every rule, you must specify exactly one of the following standard actions.
	//
	// - *aws:pass* - Discontinues all inspection of the packet and permits it to go to its intended destination.
	// - *aws:drop* - Discontinues all inspection of the packet and blocks it from going to its intended destination.
	// - *aws:forward_to_sfe* - Discontinues stateless inspection of the packet and forwards it to the stateful rule engine for inspection.
	//
	// Additionally, you can specify a custom action. To do this, you define a custom action by name and type, then provide the name you've assigned to the action in this `Actions` setting.
	//
	// To provide more than one action in this setting, separate the settings with a comma. For example, if you have a publish metrics custom action that you've named `MyMetricsAction` , then you could specify the standard action `aws:pass` combined with the custom action using `["aws:pass", "MyMetricsAction"]` .
	Actions pulumi.StringArrayInput `pulumi:"actions"`
	// Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.
	MatchAttributes RuleGroupMatchAttributesInput `pulumi:"matchAttributes"`
}

func (RuleGroupRuleDefinitionArgs) ElementType

func (RuleGroupRuleDefinitionArgs) ToRuleGroupRuleDefinitionOutput

func (i RuleGroupRuleDefinitionArgs) ToRuleGroupRuleDefinitionOutput() RuleGroupRuleDefinitionOutput

func (RuleGroupRuleDefinitionArgs) ToRuleGroupRuleDefinitionOutputWithContext

func (i RuleGroupRuleDefinitionArgs) ToRuleGroupRuleDefinitionOutputWithContext(ctx context.Context) RuleGroupRuleDefinitionOutput

type RuleGroupRuleDefinitionInput

type RuleGroupRuleDefinitionInput interface {
	pulumi.Input

	ToRuleGroupRuleDefinitionOutput() RuleGroupRuleDefinitionOutput
	ToRuleGroupRuleDefinitionOutputWithContext(context.Context) RuleGroupRuleDefinitionOutput
}

RuleGroupRuleDefinitionInput is an input type that accepts RuleGroupRuleDefinitionArgs and RuleGroupRuleDefinitionOutput values. You can construct a concrete instance of `RuleGroupRuleDefinitionInput` via:

RuleGroupRuleDefinitionArgs{...}

type RuleGroupRuleDefinitionOutput

type RuleGroupRuleDefinitionOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleDefinitionOutput) Actions

The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.

> Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the `FirewallPolicy` .

For every rule, you must specify exactly one of the following standard actions.

- *aws:pass* - Discontinues all inspection of the packet and permits it to go to its intended destination. - *aws:drop* - Discontinues all inspection of the packet and blocks it from going to its intended destination. - *aws:forward_to_sfe* - Discontinues stateless inspection of the packet and forwards it to the stateful rule engine for inspection.

Additionally, you can specify a custom action. To do this, you define a custom action by name and type, then provide the name you've assigned to the action in this `Actions` setting.

To provide more than one action in this setting, separate the settings with a comma. For example, if you have a publish metrics custom action that you've named `MyMetricsAction` , then you could specify the standard action `aws:pass` combined with the custom action using `["aws:pass", "MyMetricsAction"]` .

func (RuleGroupRuleDefinitionOutput) ElementType

func (RuleGroupRuleDefinitionOutput) MatchAttributes

Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.

func (RuleGroupRuleDefinitionOutput) ToRuleGroupRuleDefinitionOutput

func (o RuleGroupRuleDefinitionOutput) ToRuleGroupRuleDefinitionOutput() RuleGroupRuleDefinitionOutput

func (RuleGroupRuleDefinitionOutput) ToRuleGroupRuleDefinitionOutputWithContext

func (o RuleGroupRuleDefinitionOutput) ToRuleGroupRuleDefinitionOutputWithContext(ctx context.Context) RuleGroupRuleDefinitionOutput

type RuleGroupRuleOption

type RuleGroupRuleOption struct {
	// The Suricata rule option keywords. For Network Firewall , the keyword signature ID (sid) is required in the format `sid:112233` . The sid must be unique within the rule group. For information about Suricata rule option keywords, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) .
	Keyword string `pulumi:"keyword"`
	// The Suricata rule option settings. Settings have zero or more values, and the number of possible settings and required settings depends on the keyword. The format for Settings is `number` . For information about Suricata rule option settings, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) .
	Settings []string `pulumi:"settings"`
}

type RuleGroupRuleOptionArgs

type RuleGroupRuleOptionArgs struct {
	// The Suricata rule option keywords. For Network Firewall , the keyword signature ID (sid) is required in the format `sid:112233` . The sid must be unique within the rule group. For information about Suricata rule option keywords, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) .
	Keyword pulumi.StringInput `pulumi:"keyword"`
	// The Suricata rule option settings. Settings have zero or more values, and the number of possible settings and required settings depends on the keyword. The format for Settings is `number` . For information about Suricata rule option settings, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) .
	Settings pulumi.StringArrayInput `pulumi:"settings"`
}

func (RuleGroupRuleOptionArgs) ElementType

func (RuleGroupRuleOptionArgs) ElementType() reflect.Type

func (RuleGroupRuleOptionArgs) ToRuleGroupRuleOptionOutput

func (i RuleGroupRuleOptionArgs) ToRuleGroupRuleOptionOutput() RuleGroupRuleOptionOutput

func (RuleGroupRuleOptionArgs) ToRuleGroupRuleOptionOutputWithContext

func (i RuleGroupRuleOptionArgs) ToRuleGroupRuleOptionOutputWithContext(ctx context.Context) RuleGroupRuleOptionOutput

type RuleGroupRuleOptionArray

type RuleGroupRuleOptionArray []RuleGroupRuleOptionInput

func (RuleGroupRuleOptionArray) ElementType

func (RuleGroupRuleOptionArray) ElementType() reflect.Type

func (RuleGroupRuleOptionArray) ToRuleGroupRuleOptionArrayOutput

func (i RuleGroupRuleOptionArray) ToRuleGroupRuleOptionArrayOutput() RuleGroupRuleOptionArrayOutput

func (RuleGroupRuleOptionArray) ToRuleGroupRuleOptionArrayOutputWithContext

func (i RuleGroupRuleOptionArray) ToRuleGroupRuleOptionArrayOutputWithContext(ctx context.Context) RuleGroupRuleOptionArrayOutput

type RuleGroupRuleOptionArrayInput

type RuleGroupRuleOptionArrayInput interface {
	pulumi.Input

	ToRuleGroupRuleOptionArrayOutput() RuleGroupRuleOptionArrayOutput
	ToRuleGroupRuleOptionArrayOutputWithContext(context.Context) RuleGroupRuleOptionArrayOutput
}

RuleGroupRuleOptionArrayInput is an input type that accepts RuleGroupRuleOptionArray and RuleGroupRuleOptionArrayOutput values. You can construct a concrete instance of `RuleGroupRuleOptionArrayInput` via:

RuleGroupRuleOptionArray{ RuleGroupRuleOptionArgs{...} }

type RuleGroupRuleOptionArrayOutput

type RuleGroupRuleOptionArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleOptionArrayOutput) ElementType

func (RuleGroupRuleOptionArrayOutput) Index

func (RuleGroupRuleOptionArrayOutput) ToRuleGroupRuleOptionArrayOutput

func (o RuleGroupRuleOptionArrayOutput) ToRuleGroupRuleOptionArrayOutput() RuleGroupRuleOptionArrayOutput

func (RuleGroupRuleOptionArrayOutput) ToRuleGroupRuleOptionArrayOutputWithContext

func (o RuleGroupRuleOptionArrayOutput) ToRuleGroupRuleOptionArrayOutputWithContext(ctx context.Context) RuleGroupRuleOptionArrayOutput

type RuleGroupRuleOptionInput

type RuleGroupRuleOptionInput interface {
	pulumi.Input

	ToRuleGroupRuleOptionOutput() RuleGroupRuleOptionOutput
	ToRuleGroupRuleOptionOutputWithContext(context.Context) RuleGroupRuleOptionOutput
}

RuleGroupRuleOptionInput is an input type that accepts RuleGroupRuleOptionArgs and RuleGroupRuleOptionOutput values. You can construct a concrete instance of `RuleGroupRuleOptionInput` via:

RuleGroupRuleOptionArgs{...}

type RuleGroupRuleOptionOutput

type RuleGroupRuleOptionOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleOptionOutput) ElementType

func (RuleGroupRuleOptionOutput) ElementType() reflect.Type

func (RuleGroupRuleOptionOutput) Keyword

The Suricata rule option keywords. For Network Firewall , the keyword signature ID (sid) is required in the format `sid:112233` . The sid must be unique within the rule group. For information about Suricata rule option keywords, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) .

func (RuleGroupRuleOptionOutput) Settings

The Suricata rule option settings. Settings have zero or more values, and the number of possible settings and required settings depends on the keyword. The format for Settings is `number` . For information about Suricata rule option settings, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) .

func (RuleGroupRuleOptionOutput) ToRuleGroupRuleOptionOutput

func (o RuleGroupRuleOptionOutput) ToRuleGroupRuleOptionOutput() RuleGroupRuleOptionOutput

func (RuleGroupRuleOptionOutput) ToRuleGroupRuleOptionOutputWithContext

func (o RuleGroupRuleOptionOutput) ToRuleGroupRuleOptionOutputWithContext(ctx context.Context) RuleGroupRuleOptionOutput

type RuleGroupRuleOrder added in v0.3.0

type RuleGroupRuleOrder string

func (RuleGroupRuleOrder) ElementType added in v0.3.0

func (RuleGroupRuleOrder) ElementType() reflect.Type

func (RuleGroupRuleOrder) ToRuleGroupRuleOrderOutput added in v0.3.0

func (e RuleGroupRuleOrder) ToRuleGroupRuleOrderOutput() RuleGroupRuleOrderOutput

func (RuleGroupRuleOrder) ToRuleGroupRuleOrderOutputWithContext added in v0.3.0

func (e RuleGroupRuleOrder) ToRuleGroupRuleOrderOutputWithContext(ctx context.Context) RuleGroupRuleOrderOutput

func (RuleGroupRuleOrder) ToRuleGroupRuleOrderPtrOutput added in v0.3.0

func (e RuleGroupRuleOrder) ToRuleGroupRuleOrderPtrOutput() RuleGroupRuleOrderPtrOutput

func (RuleGroupRuleOrder) ToRuleGroupRuleOrderPtrOutputWithContext added in v0.3.0

func (e RuleGroupRuleOrder) ToRuleGroupRuleOrderPtrOutputWithContext(ctx context.Context) RuleGroupRuleOrderPtrOutput

func (RuleGroupRuleOrder) ToStringOutput added in v0.3.0

func (e RuleGroupRuleOrder) ToStringOutput() pulumi.StringOutput

func (RuleGroupRuleOrder) ToStringOutputWithContext added in v0.3.0

func (e RuleGroupRuleOrder) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupRuleOrder) ToStringPtrOutput added in v0.3.0

func (e RuleGroupRuleOrder) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupRuleOrder) ToStringPtrOutputWithContext added in v0.3.0

func (e RuleGroupRuleOrder) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupRuleOrderInput added in v0.3.0

type RuleGroupRuleOrderInput interface {
	pulumi.Input

	ToRuleGroupRuleOrderOutput() RuleGroupRuleOrderOutput
	ToRuleGroupRuleOrderOutputWithContext(context.Context) RuleGroupRuleOrderOutput
}

RuleGroupRuleOrderInput is an input type that accepts values of the RuleGroupRuleOrder enum A concrete instance of `RuleGroupRuleOrderInput` can be one of the following:

RuleGroupRuleOrderDefaultActionOrder
RuleGroupRuleOrderStrictOrder

type RuleGroupRuleOrderOutput added in v0.3.0

type RuleGroupRuleOrderOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleOrderOutput) ElementType added in v0.3.0

func (RuleGroupRuleOrderOutput) ElementType() reflect.Type

func (RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderOutput added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderOutput() RuleGroupRuleOrderOutput

func (RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderOutputWithContext added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderOutputWithContext(ctx context.Context) RuleGroupRuleOrderOutput

func (RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderPtrOutput added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderPtrOutput() RuleGroupRuleOrderPtrOutput

func (RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderPtrOutputWithContext added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToRuleGroupRuleOrderPtrOutputWithContext(ctx context.Context) RuleGroupRuleOrderPtrOutput

func (RuleGroupRuleOrderOutput) ToStringOutput added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToStringOutput() pulumi.StringOutput

func (RuleGroupRuleOrderOutput) ToStringOutputWithContext added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupRuleOrderOutput) ToStringPtrOutput added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupRuleOrderOutput) ToStringPtrOutputWithContext added in v0.3.0

func (o RuleGroupRuleOrderOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupRuleOrderPtrInput added in v0.3.0

type RuleGroupRuleOrderPtrInput interface {
	pulumi.Input

	ToRuleGroupRuleOrderPtrOutput() RuleGroupRuleOrderPtrOutput
	ToRuleGroupRuleOrderPtrOutputWithContext(context.Context) RuleGroupRuleOrderPtrOutput
}

func RuleGroupRuleOrderPtr added in v0.3.0

func RuleGroupRuleOrderPtr(v string) RuleGroupRuleOrderPtrInput

type RuleGroupRuleOrderPtrOutput added in v0.3.0

type RuleGroupRuleOrderPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleOrderPtrOutput) Elem added in v0.3.0

func (RuleGroupRuleOrderPtrOutput) ElementType added in v0.3.0

func (RuleGroupRuleOrderPtrOutput) ToRuleGroupRuleOrderPtrOutput added in v0.3.0

func (o RuleGroupRuleOrderPtrOutput) ToRuleGroupRuleOrderPtrOutput() RuleGroupRuleOrderPtrOutput

func (RuleGroupRuleOrderPtrOutput) ToRuleGroupRuleOrderPtrOutputWithContext added in v0.3.0

func (o RuleGroupRuleOrderPtrOutput) ToRuleGroupRuleOrderPtrOutputWithContext(ctx context.Context) RuleGroupRuleOrderPtrOutput

func (RuleGroupRuleOrderPtrOutput) ToStringPtrOutput added in v0.3.0

func (o RuleGroupRuleOrderPtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupRuleOrderPtrOutput) ToStringPtrOutputWithContext added in v0.3.0

func (o RuleGroupRuleOrderPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupRuleVariables

type RuleGroupRuleVariables struct {
	// A list of IP addresses and address ranges, in CIDR notation.
	IpSets map[string]RuleGroupIpSet `pulumi:"ipSets"`
	// A list of port ranges.
	PortSets map[string]RuleGroupPortSet `pulumi:"portSets"`
}

type RuleGroupRuleVariablesArgs

type RuleGroupRuleVariablesArgs struct {
	// A list of IP addresses and address ranges, in CIDR notation.
	IpSets RuleGroupIpSetMapInput `pulumi:"ipSets"`
	// A list of port ranges.
	PortSets RuleGroupPortSetMapInput `pulumi:"portSets"`
}

func (RuleGroupRuleVariablesArgs) ElementType

func (RuleGroupRuleVariablesArgs) ElementType() reflect.Type

func (RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesOutput

func (i RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesOutput() RuleGroupRuleVariablesOutput

func (RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesOutputWithContext

func (i RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesOutputWithContext(ctx context.Context) RuleGroupRuleVariablesOutput

func (RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesPtrOutput

func (i RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesPtrOutput() RuleGroupRuleVariablesPtrOutput

func (RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesPtrOutputWithContext

func (i RuleGroupRuleVariablesArgs) ToRuleGroupRuleVariablesPtrOutputWithContext(ctx context.Context) RuleGroupRuleVariablesPtrOutput

type RuleGroupRuleVariablesInput

type RuleGroupRuleVariablesInput interface {
	pulumi.Input

	ToRuleGroupRuleVariablesOutput() RuleGroupRuleVariablesOutput
	ToRuleGroupRuleVariablesOutputWithContext(context.Context) RuleGroupRuleVariablesOutput
}

RuleGroupRuleVariablesInput is an input type that accepts RuleGroupRuleVariablesArgs and RuleGroupRuleVariablesOutput values. You can construct a concrete instance of `RuleGroupRuleVariablesInput` via:

RuleGroupRuleVariablesArgs{...}

type RuleGroupRuleVariablesOutput

type RuleGroupRuleVariablesOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleVariablesOutput) ElementType

func (RuleGroupRuleVariablesOutput) IpSets added in v0.72.0

A list of IP addresses and address ranges, in CIDR notation.

func (RuleGroupRuleVariablesOutput) PortSets

A list of port ranges.

func (RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesOutput

func (o RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesOutput() RuleGroupRuleVariablesOutput

func (RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesOutputWithContext

func (o RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesOutputWithContext(ctx context.Context) RuleGroupRuleVariablesOutput

func (RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesPtrOutput

func (o RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesPtrOutput() RuleGroupRuleVariablesPtrOutput

func (RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesPtrOutputWithContext

func (o RuleGroupRuleVariablesOutput) ToRuleGroupRuleVariablesPtrOutputWithContext(ctx context.Context) RuleGroupRuleVariablesPtrOutput

type RuleGroupRuleVariablesPtrInput

type RuleGroupRuleVariablesPtrInput interface {
	pulumi.Input

	ToRuleGroupRuleVariablesPtrOutput() RuleGroupRuleVariablesPtrOutput
	ToRuleGroupRuleVariablesPtrOutputWithContext(context.Context) RuleGroupRuleVariablesPtrOutput
}

RuleGroupRuleVariablesPtrInput is an input type that accepts RuleGroupRuleVariablesArgs, RuleGroupRuleVariablesPtr and RuleGroupRuleVariablesPtrOutput values. You can construct a concrete instance of `RuleGroupRuleVariablesPtrInput` via:

        RuleGroupRuleVariablesArgs{...}

or:

        nil

type RuleGroupRuleVariablesPtrOutput

type RuleGroupRuleVariablesPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRuleVariablesPtrOutput) Elem

func (RuleGroupRuleVariablesPtrOutput) ElementType

func (RuleGroupRuleVariablesPtrOutput) IpSets added in v0.72.0

A list of IP addresses and address ranges, in CIDR notation.

func (RuleGroupRuleVariablesPtrOutput) PortSets

A list of port ranges.

func (RuleGroupRuleVariablesPtrOutput) ToRuleGroupRuleVariablesPtrOutput

func (o RuleGroupRuleVariablesPtrOutput) ToRuleGroupRuleVariablesPtrOutput() RuleGroupRuleVariablesPtrOutput

func (RuleGroupRuleVariablesPtrOutput) ToRuleGroupRuleVariablesPtrOutputWithContext

func (o RuleGroupRuleVariablesPtrOutput) ToRuleGroupRuleVariablesPtrOutputWithContext(ctx context.Context) RuleGroupRuleVariablesPtrOutput

type RuleGroupRulesSource

type RuleGroupRulesSource struct {
	// Stateful inspection criteria for a domain list rule group.
	RulesSourceList *RuleGroupRulesSourceList `pulumi:"rulesSourceList"`
	// Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection.
	//
	// These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.
	//
	// > You can't use the `priority` keyword if the `RuleOrder` option in `StatefulRuleOptions` is set to `STRICT_ORDER` .
	RulesString *string `pulumi:"rulesString"`
	// An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata `Rules` format, see [Rules Format](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html) .
	StatefulRules []RuleGroupStatefulRule `pulumi:"statefulRules"`
	// Stateless inspection criteria to be used in a stateless rule group.
	StatelessRulesAndCustomActions *RuleGroupStatelessRulesAndCustomActions `pulumi:"statelessRulesAndCustomActions"`
}

type RuleGroupRulesSourceArgs

type RuleGroupRulesSourceArgs struct {
	// Stateful inspection criteria for a domain list rule group.
	RulesSourceList RuleGroupRulesSourceListPtrInput `pulumi:"rulesSourceList"`
	// Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection.
	//
	// These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.
	//
	// > You can't use the `priority` keyword if the `RuleOrder` option in `StatefulRuleOptions` is set to `STRICT_ORDER` .
	RulesString pulumi.StringPtrInput `pulumi:"rulesString"`
	// An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata `Rules` format, see [Rules Format](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html) .
	StatefulRules RuleGroupStatefulRuleArrayInput `pulumi:"statefulRules"`
	// Stateless inspection criteria to be used in a stateless rule group.
	StatelessRulesAndCustomActions RuleGroupStatelessRulesAndCustomActionsPtrInput `pulumi:"statelessRulesAndCustomActions"`
}

func (RuleGroupRulesSourceArgs) ElementType

func (RuleGroupRulesSourceArgs) ElementType() reflect.Type

func (RuleGroupRulesSourceArgs) ToRuleGroupRulesSourceOutput

func (i RuleGroupRulesSourceArgs) ToRuleGroupRulesSourceOutput() RuleGroupRulesSourceOutput

func (RuleGroupRulesSourceArgs) ToRuleGroupRulesSourceOutputWithContext

func (i RuleGroupRulesSourceArgs) ToRuleGroupRulesSourceOutputWithContext(ctx context.Context) RuleGroupRulesSourceOutput

func (RuleGroupRulesSourceArgs) ToRuleGroupRulesSourcePtrOutput

func (i RuleGroupRulesSourceArgs) ToRuleGroupRulesSourcePtrOutput() RuleGroupRulesSourcePtrOutput

func (RuleGroupRulesSourceArgs) ToRuleGroupRulesSourcePtrOutputWithContext

func (i RuleGroupRulesSourceArgs) ToRuleGroupRulesSourcePtrOutputWithContext(ctx context.Context) RuleGroupRulesSourcePtrOutput

type RuleGroupRulesSourceInput

type RuleGroupRulesSourceInput interface {
	pulumi.Input

	ToRuleGroupRulesSourceOutput() RuleGroupRulesSourceOutput
	ToRuleGroupRulesSourceOutputWithContext(context.Context) RuleGroupRulesSourceOutput
}

RuleGroupRulesSourceInput is an input type that accepts RuleGroupRulesSourceArgs and RuleGroupRulesSourceOutput values. You can construct a concrete instance of `RuleGroupRulesSourceInput` via:

RuleGroupRulesSourceArgs{...}

type RuleGroupRulesSourceList

type RuleGroupRulesSourceList struct {
	// Whether you want to allow or deny access to the domains in your target list.
	GeneratedRulesType RuleGroupGeneratedRulesType `pulumi:"generatedRulesType"`
	// The types of targets to inspect for. Valid values are `TLS_SNI` and `HTTP_HOST` .
	TargetTypes []RuleGroupTargetType `pulumi:"targetTypes"`
	// The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:
	//
	// - Explicit names. For example, `abc.example.com` matches only the domain `abc.example.com` .
	// - Names that use a domain wildcard, which you indicate with an initial ' `.` '. For example, `.example.com` matches `example.com` and matches all subdomains of `example.com` , such as `abc.example.com` and `www.example.com` .
	Targets []string `pulumi:"targets"`
}

type RuleGroupRulesSourceListArgs

type RuleGroupRulesSourceListArgs struct {
	// Whether you want to allow or deny access to the domains in your target list.
	GeneratedRulesType RuleGroupGeneratedRulesTypeInput `pulumi:"generatedRulesType"`
	// The types of targets to inspect for. Valid values are `TLS_SNI` and `HTTP_HOST` .
	TargetTypes RuleGroupTargetTypeArrayInput `pulumi:"targetTypes"`
	// The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:
	//
	// - Explicit names. For example, `abc.example.com` matches only the domain `abc.example.com` .
	// - Names that use a domain wildcard, which you indicate with an initial ' `.` '. For example, `.example.com` matches `example.com` and matches all subdomains of `example.com` , such as `abc.example.com` and `www.example.com` .
	Targets pulumi.StringArrayInput `pulumi:"targets"`
}

func (RuleGroupRulesSourceListArgs) ElementType

func (RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListOutput

func (i RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListOutput() RuleGroupRulesSourceListOutput

func (RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListOutputWithContext

func (i RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListOutputWithContext(ctx context.Context) RuleGroupRulesSourceListOutput

func (RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListPtrOutput

func (i RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListPtrOutput() RuleGroupRulesSourceListPtrOutput

func (RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListPtrOutputWithContext

func (i RuleGroupRulesSourceListArgs) ToRuleGroupRulesSourceListPtrOutputWithContext(ctx context.Context) RuleGroupRulesSourceListPtrOutput

type RuleGroupRulesSourceListInput

type RuleGroupRulesSourceListInput interface {
	pulumi.Input

	ToRuleGroupRulesSourceListOutput() RuleGroupRulesSourceListOutput
	ToRuleGroupRulesSourceListOutputWithContext(context.Context) RuleGroupRulesSourceListOutput
}

RuleGroupRulesSourceListInput is an input type that accepts RuleGroupRulesSourceListArgs and RuleGroupRulesSourceListOutput values. You can construct a concrete instance of `RuleGroupRulesSourceListInput` via:

RuleGroupRulesSourceListArgs{...}

type RuleGroupRulesSourceListOutput

type RuleGroupRulesSourceListOutput struct{ *pulumi.OutputState }

func (RuleGroupRulesSourceListOutput) ElementType

func (RuleGroupRulesSourceListOutput) GeneratedRulesType

Whether you want to allow or deny access to the domains in your target list.

func (RuleGroupRulesSourceListOutput) TargetTypes

The types of targets to inspect for. Valid values are `TLS_SNI` and `HTTP_HOST` .

func (RuleGroupRulesSourceListOutput) Targets

The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:

- Explicit names. For example, `abc.example.com` matches only the domain `abc.example.com` . - Names that use a domain wildcard, which you indicate with an initial ' `.` '. For example, `.example.com` matches `example.com` and matches all subdomains of `example.com` , such as `abc.example.com` and `www.example.com` .

func (RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListOutput

func (o RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListOutput() RuleGroupRulesSourceListOutput

func (RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListOutputWithContext

func (o RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListOutputWithContext(ctx context.Context) RuleGroupRulesSourceListOutput

func (RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListPtrOutput

func (o RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListPtrOutput() RuleGroupRulesSourceListPtrOutput

func (RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListPtrOutputWithContext

func (o RuleGroupRulesSourceListOutput) ToRuleGroupRulesSourceListPtrOutputWithContext(ctx context.Context) RuleGroupRulesSourceListPtrOutput

type RuleGroupRulesSourceListPtrInput

type RuleGroupRulesSourceListPtrInput interface {
	pulumi.Input

	ToRuleGroupRulesSourceListPtrOutput() RuleGroupRulesSourceListPtrOutput
	ToRuleGroupRulesSourceListPtrOutputWithContext(context.Context) RuleGroupRulesSourceListPtrOutput
}

RuleGroupRulesSourceListPtrInput is an input type that accepts RuleGroupRulesSourceListArgs, RuleGroupRulesSourceListPtr and RuleGroupRulesSourceListPtrOutput values. You can construct a concrete instance of `RuleGroupRulesSourceListPtrInput` via:

        RuleGroupRulesSourceListArgs{...}

or:

        nil

type RuleGroupRulesSourceListPtrOutput

type RuleGroupRulesSourceListPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRulesSourceListPtrOutput) Elem

func (RuleGroupRulesSourceListPtrOutput) ElementType

func (RuleGroupRulesSourceListPtrOutput) GeneratedRulesType

Whether you want to allow or deny access to the domains in your target list.

func (RuleGroupRulesSourceListPtrOutput) TargetTypes

The types of targets to inspect for. Valid values are `TLS_SNI` and `HTTP_HOST` .

func (RuleGroupRulesSourceListPtrOutput) Targets

The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:

- Explicit names. For example, `abc.example.com` matches only the domain `abc.example.com` . - Names that use a domain wildcard, which you indicate with an initial ' `.` '. For example, `.example.com` matches `example.com` and matches all subdomains of `example.com` , such as `abc.example.com` and `www.example.com` .

func (RuleGroupRulesSourceListPtrOutput) ToRuleGroupRulesSourceListPtrOutput

func (o RuleGroupRulesSourceListPtrOutput) ToRuleGroupRulesSourceListPtrOutput() RuleGroupRulesSourceListPtrOutput

func (RuleGroupRulesSourceListPtrOutput) ToRuleGroupRulesSourceListPtrOutputWithContext

func (o RuleGroupRulesSourceListPtrOutput) ToRuleGroupRulesSourceListPtrOutputWithContext(ctx context.Context) RuleGroupRulesSourceListPtrOutput

type RuleGroupRulesSourceOutput

type RuleGroupRulesSourceOutput struct{ *pulumi.OutputState }

func (RuleGroupRulesSourceOutput) ElementType

func (RuleGroupRulesSourceOutput) ElementType() reflect.Type

func (RuleGroupRulesSourceOutput) RulesSourceList

Stateful inspection criteria for a domain list rule group.

func (RuleGroupRulesSourceOutput) RulesString

Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection.

These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.

> You can't use the `priority` keyword if the `RuleOrder` option in `StatefulRuleOptions` is set to `STRICT_ORDER` .

func (RuleGroupRulesSourceOutput) StatefulRules

An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata `Rules` format, see [Rules Format](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html) .

func (RuleGroupRulesSourceOutput) StatelessRulesAndCustomActions

Stateless inspection criteria to be used in a stateless rule group.

func (RuleGroupRulesSourceOutput) ToRuleGroupRulesSourceOutput

func (o RuleGroupRulesSourceOutput) ToRuleGroupRulesSourceOutput() RuleGroupRulesSourceOutput

func (RuleGroupRulesSourceOutput) ToRuleGroupRulesSourceOutputWithContext

func (o RuleGroupRulesSourceOutput) ToRuleGroupRulesSourceOutputWithContext(ctx context.Context) RuleGroupRulesSourceOutput

func (RuleGroupRulesSourceOutput) ToRuleGroupRulesSourcePtrOutput

func (o RuleGroupRulesSourceOutput) ToRuleGroupRulesSourcePtrOutput() RuleGroupRulesSourcePtrOutput

func (RuleGroupRulesSourceOutput) ToRuleGroupRulesSourcePtrOutputWithContext

func (o RuleGroupRulesSourceOutput) ToRuleGroupRulesSourcePtrOutputWithContext(ctx context.Context) RuleGroupRulesSourcePtrOutput

type RuleGroupRulesSourcePtrInput

type RuleGroupRulesSourcePtrInput interface {
	pulumi.Input

	ToRuleGroupRulesSourcePtrOutput() RuleGroupRulesSourcePtrOutput
	ToRuleGroupRulesSourcePtrOutputWithContext(context.Context) RuleGroupRulesSourcePtrOutput
}

RuleGroupRulesSourcePtrInput is an input type that accepts RuleGroupRulesSourceArgs, RuleGroupRulesSourcePtr and RuleGroupRulesSourcePtrOutput values. You can construct a concrete instance of `RuleGroupRulesSourcePtrInput` via:

        RuleGroupRulesSourceArgs{...}

or:

        nil

type RuleGroupRulesSourcePtrOutput

type RuleGroupRulesSourcePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupRulesSourcePtrOutput) Elem

func (RuleGroupRulesSourcePtrOutput) ElementType

func (RuleGroupRulesSourcePtrOutput) RulesSourceList

Stateful inspection criteria for a domain list rule group.

func (RuleGroupRulesSourcePtrOutput) RulesString

Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection.

These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.

> You can't use the `priority` keyword if the `RuleOrder` option in `StatefulRuleOptions` is set to `STRICT_ORDER` .

func (RuleGroupRulesSourcePtrOutput) StatefulRules

An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata `Rules` format, see [Rules Format](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html) .

func (RuleGroupRulesSourcePtrOutput) StatelessRulesAndCustomActions

Stateless inspection criteria to be used in a stateless rule group.

func (RuleGroupRulesSourcePtrOutput) ToRuleGroupRulesSourcePtrOutput

func (o RuleGroupRulesSourcePtrOutput) ToRuleGroupRulesSourcePtrOutput() RuleGroupRulesSourcePtrOutput

func (RuleGroupRulesSourcePtrOutput) ToRuleGroupRulesSourcePtrOutputWithContext

func (o RuleGroupRulesSourcePtrOutput) ToRuleGroupRulesSourcePtrOutputWithContext(ctx context.Context) RuleGroupRulesSourcePtrOutput

type RuleGroupState

type RuleGroupState struct {
}

func (RuleGroupState) ElementType

func (RuleGroupState) ElementType() reflect.Type

type RuleGroupStatefulRule

type RuleGroupStatefulRule struct {
	// Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
	//
	// The actions for a stateful rule are defined as follows:
	//
	// - *PASS* - Permits the packets to go to the intended destination.
	// - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .
	// - *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic.
	// - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .
	//
	// You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` .
	// - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the `Firewall` `LoggingConfiguration` .
	//
	// `REJECT` isn't currently available for use with IMAP and FTP protocols.
	Action RuleGroupStatefulRuleAction `pulumi:"action"`
	// The stateful inspection criteria for this rule, used to inspect traffic flows.
	Header RuleGroupHeader `pulumi:"header"`
	// Additional settings for a stateful rule, provided as keywords and settings.
	RuleOptions []RuleGroupRuleOption `pulumi:"ruleOptions"`
}

type RuleGroupStatefulRuleAction

type RuleGroupStatefulRuleAction string

Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.

The actions for a stateful rule are defined as follows:

- *PASS* - Permits the packets to go to the intended destination. - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` . - *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic. - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .

You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` . - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the `Firewall` `LoggingConfiguration` .

`REJECT` isn't currently available for use with IMAP and FTP protocols.

func (RuleGroupStatefulRuleAction) ElementType

func (RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionOutput

func (e RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionOutput() RuleGroupStatefulRuleActionOutput

func (RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionOutputWithContext

func (e RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionOutputWithContext(ctx context.Context) RuleGroupStatefulRuleActionOutput

func (RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionPtrOutput

func (e RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionPtrOutput() RuleGroupStatefulRuleActionPtrOutput

func (RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionPtrOutputWithContext

func (e RuleGroupStatefulRuleAction) ToRuleGroupStatefulRuleActionPtrOutputWithContext(ctx context.Context) RuleGroupStatefulRuleActionPtrOutput

func (RuleGroupStatefulRuleAction) ToStringOutput

func (e RuleGroupStatefulRuleAction) ToStringOutput() pulumi.StringOutput

func (RuleGroupStatefulRuleAction) ToStringOutputWithContext

func (e RuleGroupStatefulRuleAction) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupStatefulRuleAction) ToStringPtrOutput

func (e RuleGroupStatefulRuleAction) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupStatefulRuleAction) ToStringPtrOutputWithContext

func (e RuleGroupStatefulRuleAction) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupStatefulRuleActionInput

type RuleGroupStatefulRuleActionInput interface {
	pulumi.Input

	ToRuleGroupStatefulRuleActionOutput() RuleGroupStatefulRuleActionOutput
	ToRuleGroupStatefulRuleActionOutputWithContext(context.Context) RuleGroupStatefulRuleActionOutput
}

RuleGroupStatefulRuleActionInput is an input type that accepts values of the RuleGroupStatefulRuleAction enum A concrete instance of `RuleGroupStatefulRuleActionInput` can be one of the following:

RuleGroupStatefulRuleActionPass
RuleGroupStatefulRuleActionDrop
RuleGroupStatefulRuleActionAlert
RuleGroupStatefulRuleActionReject

type RuleGroupStatefulRuleActionOutput

type RuleGroupStatefulRuleActionOutput struct{ *pulumi.OutputState }

func (RuleGroupStatefulRuleActionOutput) ElementType

func (RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionOutput

func (o RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionOutput() RuleGroupStatefulRuleActionOutput

func (RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionOutputWithContext

func (o RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionOutputWithContext(ctx context.Context) RuleGroupStatefulRuleActionOutput

func (RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionPtrOutput

func (o RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionPtrOutput() RuleGroupStatefulRuleActionPtrOutput

func (RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionPtrOutputWithContext

func (o RuleGroupStatefulRuleActionOutput) ToRuleGroupStatefulRuleActionPtrOutputWithContext(ctx context.Context) RuleGroupStatefulRuleActionPtrOutput

func (RuleGroupStatefulRuleActionOutput) ToStringOutput

func (RuleGroupStatefulRuleActionOutput) ToStringOutputWithContext

func (o RuleGroupStatefulRuleActionOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupStatefulRuleActionOutput) ToStringPtrOutput

func (RuleGroupStatefulRuleActionOutput) ToStringPtrOutputWithContext

func (o RuleGroupStatefulRuleActionOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupStatefulRuleActionPtrInput

type RuleGroupStatefulRuleActionPtrInput interface {
	pulumi.Input

	ToRuleGroupStatefulRuleActionPtrOutput() RuleGroupStatefulRuleActionPtrOutput
	ToRuleGroupStatefulRuleActionPtrOutputWithContext(context.Context) RuleGroupStatefulRuleActionPtrOutput
}

func RuleGroupStatefulRuleActionPtr

func RuleGroupStatefulRuleActionPtr(v string) RuleGroupStatefulRuleActionPtrInput

type RuleGroupStatefulRuleActionPtrOutput

type RuleGroupStatefulRuleActionPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupStatefulRuleActionPtrOutput) Elem

func (RuleGroupStatefulRuleActionPtrOutput) ElementType

func (RuleGroupStatefulRuleActionPtrOutput) ToRuleGroupStatefulRuleActionPtrOutput

func (o RuleGroupStatefulRuleActionPtrOutput) ToRuleGroupStatefulRuleActionPtrOutput() RuleGroupStatefulRuleActionPtrOutput

func (RuleGroupStatefulRuleActionPtrOutput) ToRuleGroupStatefulRuleActionPtrOutputWithContext

func (o RuleGroupStatefulRuleActionPtrOutput) ToRuleGroupStatefulRuleActionPtrOutputWithContext(ctx context.Context) RuleGroupStatefulRuleActionPtrOutput

func (RuleGroupStatefulRuleActionPtrOutput) ToStringPtrOutput

func (RuleGroupStatefulRuleActionPtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupStatefulRuleActionPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupStatefulRuleArgs

type RuleGroupStatefulRuleArgs struct {
	// Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
	//
	// The actions for a stateful rule are defined as follows:
	//
	// - *PASS* - Permits the packets to go to the intended destination.
	// - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .
	// - *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic.
	// - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .
	//
	// You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` .
	// - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the `Firewall` `LoggingConfiguration` .
	//
	// `REJECT` isn't currently available for use with IMAP and FTP protocols.
	Action RuleGroupStatefulRuleActionInput `pulumi:"action"`
	// The stateful inspection criteria for this rule, used to inspect traffic flows.
	Header RuleGroupHeaderInput `pulumi:"header"`
	// Additional settings for a stateful rule, provided as keywords and settings.
	RuleOptions RuleGroupRuleOptionArrayInput `pulumi:"ruleOptions"`
}

func (RuleGroupStatefulRuleArgs) ElementType

func (RuleGroupStatefulRuleArgs) ElementType() reflect.Type

func (RuleGroupStatefulRuleArgs) ToRuleGroupStatefulRuleOutput

func (i RuleGroupStatefulRuleArgs) ToRuleGroupStatefulRuleOutput() RuleGroupStatefulRuleOutput

func (RuleGroupStatefulRuleArgs) ToRuleGroupStatefulRuleOutputWithContext

func (i RuleGroupStatefulRuleArgs) ToRuleGroupStatefulRuleOutputWithContext(ctx context.Context) RuleGroupStatefulRuleOutput

type RuleGroupStatefulRuleArray

type RuleGroupStatefulRuleArray []RuleGroupStatefulRuleInput

func (RuleGroupStatefulRuleArray) ElementType

func (RuleGroupStatefulRuleArray) ElementType() reflect.Type

func (RuleGroupStatefulRuleArray) ToRuleGroupStatefulRuleArrayOutput

func (i RuleGroupStatefulRuleArray) ToRuleGroupStatefulRuleArrayOutput() RuleGroupStatefulRuleArrayOutput

func (RuleGroupStatefulRuleArray) ToRuleGroupStatefulRuleArrayOutputWithContext

func (i RuleGroupStatefulRuleArray) ToRuleGroupStatefulRuleArrayOutputWithContext(ctx context.Context) RuleGroupStatefulRuleArrayOutput

type RuleGroupStatefulRuleArrayInput

type RuleGroupStatefulRuleArrayInput interface {
	pulumi.Input

	ToRuleGroupStatefulRuleArrayOutput() RuleGroupStatefulRuleArrayOutput
	ToRuleGroupStatefulRuleArrayOutputWithContext(context.Context) RuleGroupStatefulRuleArrayOutput
}

RuleGroupStatefulRuleArrayInput is an input type that accepts RuleGroupStatefulRuleArray and RuleGroupStatefulRuleArrayOutput values. You can construct a concrete instance of `RuleGroupStatefulRuleArrayInput` via:

RuleGroupStatefulRuleArray{ RuleGroupStatefulRuleArgs{...} }

type RuleGroupStatefulRuleArrayOutput

type RuleGroupStatefulRuleArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupStatefulRuleArrayOutput) ElementType

func (RuleGroupStatefulRuleArrayOutput) Index

func (RuleGroupStatefulRuleArrayOutput) ToRuleGroupStatefulRuleArrayOutput

func (o RuleGroupStatefulRuleArrayOutput) ToRuleGroupStatefulRuleArrayOutput() RuleGroupStatefulRuleArrayOutput

func (RuleGroupStatefulRuleArrayOutput) ToRuleGroupStatefulRuleArrayOutputWithContext

func (o RuleGroupStatefulRuleArrayOutput) ToRuleGroupStatefulRuleArrayOutputWithContext(ctx context.Context) RuleGroupStatefulRuleArrayOutput

type RuleGroupStatefulRuleInput

type RuleGroupStatefulRuleInput interface {
	pulumi.Input

	ToRuleGroupStatefulRuleOutput() RuleGroupStatefulRuleOutput
	ToRuleGroupStatefulRuleOutputWithContext(context.Context) RuleGroupStatefulRuleOutput
}

RuleGroupStatefulRuleInput is an input type that accepts RuleGroupStatefulRuleArgs and RuleGroupStatefulRuleOutput values. You can construct a concrete instance of `RuleGroupStatefulRuleInput` via:

RuleGroupStatefulRuleArgs{...}

type RuleGroupStatefulRuleOptions added in v0.3.0

type RuleGroupStatefulRuleOptions struct {
	// Indicates how to manage the order of the rule evaluation for the rule group. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .
	RuleOrder *RuleGroupRuleOrder `pulumi:"ruleOrder"`
}

type RuleGroupStatefulRuleOptionsArgs added in v0.3.0

type RuleGroupStatefulRuleOptionsArgs struct {
	// Indicates how to manage the order of the rule evaluation for the rule group. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .
	RuleOrder RuleGroupRuleOrderPtrInput `pulumi:"ruleOrder"`
}

func (RuleGroupStatefulRuleOptionsArgs) ElementType added in v0.3.0

func (RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsOutput added in v0.3.0

func (i RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsOutput() RuleGroupStatefulRuleOptionsOutput

func (RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsOutputWithContext added in v0.3.0

func (i RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsOutputWithContext(ctx context.Context) RuleGroupStatefulRuleOptionsOutput

func (RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsPtrOutput added in v0.3.0

func (i RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsPtrOutput() RuleGroupStatefulRuleOptionsPtrOutput

func (RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsPtrOutputWithContext added in v0.3.0

func (i RuleGroupStatefulRuleOptionsArgs) ToRuleGroupStatefulRuleOptionsPtrOutputWithContext(ctx context.Context) RuleGroupStatefulRuleOptionsPtrOutput

type RuleGroupStatefulRuleOptionsInput added in v0.3.0

type RuleGroupStatefulRuleOptionsInput interface {
	pulumi.Input

	ToRuleGroupStatefulRuleOptionsOutput() RuleGroupStatefulRuleOptionsOutput
	ToRuleGroupStatefulRuleOptionsOutputWithContext(context.Context) RuleGroupStatefulRuleOptionsOutput
}

RuleGroupStatefulRuleOptionsInput is an input type that accepts RuleGroupStatefulRuleOptionsArgs and RuleGroupStatefulRuleOptionsOutput values. You can construct a concrete instance of `RuleGroupStatefulRuleOptionsInput` via:

RuleGroupStatefulRuleOptionsArgs{...}

type RuleGroupStatefulRuleOptionsOutput added in v0.3.0

type RuleGroupStatefulRuleOptionsOutput struct{ *pulumi.OutputState }

func (RuleGroupStatefulRuleOptionsOutput) ElementType added in v0.3.0

func (RuleGroupStatefulRuleOptionsOutput) RuleOrder added in v0.3.0

Indicates how to manage the order of the rule evaluation for the rule group. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .

func (RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsOutput added in v0.3.0

func (o RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsOutput() RuleGroupStatefulRuleOptionsOutput

func (RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsOutputWithContext added in v0.3.0

func (o RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsOutputWithContext(ctx context.Context) RuleGroupStatefulRuleOptionsOutput

func (RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsPtrOutput added in v0.3.0

func (o RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsPtrOutput() RuleGroupStatefulRuleOptionsPtrOutput

func (RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsPtrOutputWithContext added in v0.3.0

func (o RuleGroupStatefulRuleOptionsOutput) ToRuleGroupStatefulRuleOptionsPtrOutputWithContext(ctx context.Context) RuleGroupStatefulRuleOptionsPtrOutput

type RuleGroupStatefulRuleOptionsPtrInput added in v0.3.0

type RuleGroupStatefulRuleOptionsPtrInput interface {
	pulumi.Input

	ToRuleGroupStatefulRuleOptionsPtrOutput() RuleGroupStatefulRuleOptionsPtrOutput
	ToRuleGroupStatefulRuleOptionsPtrOutputWithContext(context.Context) RuleGroupStatefulRuleOptionsPtrOutput
}

RuleGroupStatefulRuleOptionsPtrInput is an input type that accepts RuleGroupStatefulRuleOptionsArgs, RuleGroupStatefulRuleOptionsPtr and RuleGroupStatefulRuleOptionsPtrOutput values. You can construct a concrete instance of `RuleGroupStatefulRuleOptionsPtrInput` via:

        RuleGroupStatefulRuleOptionsArgs{...}

or:

        nil

type RuleGroupStatefulRuleOptionsPtrOutput added in v0.3.0

type RuleGroupStatefulRuleOptionsPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupStatefulRuleOptionsPtrOutput) Elem added in v0.3.0

func (RuleGroupStatefulRuleOptionsPtrOutput) ElementType added in v0.3.0

func (RuleGroupStatefulRuleOptionsPtrOutput) RuleOrder added in v0.3.0

Indicates how to manage the order of the rule evaluation for the rule group. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* .

func (RuleGroupStatefulRuleOptionsPtrOutput) ToRuleGroupStatefulRuleOptionsPtrOutput added in v0.3.0

func (o RuleGroupStatefulRuleOptionsPtrOutput) ToRuleGroupStatefulRuleOptionsPtrOutput() RuleGroupStatefulRuleOptionsPtrOutput

func (RuleGroupStatefulRuleOptionsPtrOutput) ToRuleGroupStatefulRuleOptionsPtrOutputWithContext added in v0.3.0

func (o RuleGroupStatefulRuleOptionsPtrOutput) ToRuleGroupStatefulRuleOptionsPtrOutputWithContext(ctx context.Context) RuleGroupStatefulRuleOptionsPtrOutput

type RuleGroupStatefulRuleOutput

type RuleGroupStatefulRuleOutput struct{ *pulumi.OutputState }

func (RuleGroupStatefulRuleOutput) Action

Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.

The actions for a stateful rule are defined as follows:

- *PASS* - Permits the packets to go to the intended destination. - *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` . - *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic. - *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the `Firewall` `LoggingConfiguration` .

You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` . - *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the `Firewall` `LoggingConfiguration` .

`REJECT` isn't currently available for use with IMAP and FTP protocols.

func (RuleGroupStatefulRuleOutput) ElementType

func (RuleGroupStatefulRuleOutput) Header

The stateful inspection criteria for this rule, used to inspect traffic flows.

func (RuleGroupStatefulRuleOutput) RuleOptions

Additional settings for a stateful rule, provided as keywords and settings.

func (RuleGroupStatefulRuleOutput) ToRuleGroupStatefulRuleOutput

func (o RuleGroupStatefulRuleOutput) ToRuleGroupStatefulRuleOutput() RuleGroupStatefulRuleOutput

func (RuleGroupStatefulRuleOutput) ToRuleGroupStatefulRuleOutputWithContext

func (o RuleGroupStatefulRuleOutput) ToRuleGroupStatefulRuleOutputWithContext(ctx context.Context) RuleGroupStatefulRuleOutput

type RuleGroupStatelessRule

type RuleGroupStatelessRule struct {
	// Indicates the order in which to run this rule relative to all of the rules that are defined for a stateless rule group. Network Firewall evaluates the rules in a rule group starting with the lowest priority setting. You must ensure that the priority settings are unique for the rule group.
	//
	// Each stateless rule group uses exactly one `StatelessRulesAndCustomActions` object, and each `StatelessRulesAndCustomActions` contains exactly one `StatelessRules` object. To ensure unique priority settings for your rule groups, set unique priorities for the stateless rules that you define inside any single `StatelessRules` object.
	//
	// You can change the priority settings of your rules at any time. To make it easier to insert rules later, number them so there's a wide range in between, for example use 100, 200, and so on.
	Priority int `pulumi:"priority"`
	// Defines the stateless 5-tuple packet inspection criteria and the action to take on a packet that matches the criteria.
	RuleDefinition RuleGroupRuleDefinition `pulumi:"ruleDefinition"`
}

type RuleGroupStatelessRuleArgs

type RuleGroupStatelessRuleArgs struct {
	// Indicates the order in which to run this rule relative to all of the rules that are defined for a stateless rule group. Network Firewall evaluates the rules in a rule group starting with the lowest priority setting. You must ensure that the priority settings are unique for the rule group.
	//
	// Each stateless rule group uses exactly one `StatelessRulesAndCustomActions` object, and each `StatelessRulesAndCustomActions` contains exactly one `StatelessRules` object. To ensure unique priority settings for your rule groups, set unique priorities for the stateless rules that you define inside any single `StatelessRules` object.
	//
	// You can change the priority settings of your rules at any time. To make it easier to insert rules later, number them so there's a wide range in between, for example use 100, 200, and so on.
	Priority pulumi.IntInput `pulumi:"priority"`
	// Defines the stateless 5-tuple packet inspection criteria and the action to take on a packet that matches the criteria.
	RuleDefinition RuleGroupRuleDefinitionInput `pulumi:"ruleDefinition"`
}

func (RuleGroupStatelessRuleArgs) ElementType

func (RuleGroupStatelessRuleArgs) ElementType() reflect.Type

func (RuleGroupStatelessRuleArgs) ToRuleGroupStatelessRuleOutput

func (i RuleGroupStatelessRuleArgs) ToRuleGroupStatelessRuleOutput() RuleGroupStatelessRuleOutput

func (RuleGroupStatelessRuleArgs) ToRuleGroupStatelessRuleOutputWithContext

func (i RuleGroupStatelessRuleArgs) ToRuleGroupStatelessRuleOutputWithContext(ctx context.Context) RuleGroupStatelessRuleOutput

type RuleGroupStatelessRuleArray

type RuleGroupStatelessRuleArray []RuleGroupStatelessRuleInput

func (RuleGroupStatelessRuleArray) ElementType

func (RuleGroupStatelessRuleArray) ToRuleGroupStatelessRuleArrayOutput

func (i RuleGroupStatelessRuleArray) ToRuleGroupStatelessRuleArrayOutput() RuleGroupStatelessRuleArrayOutput

func (RuleGroupStatelessRuleArray) ToRuleGroupStatelessRuleArrayOutputWithContext

func (i RuleGroupStatelessRuleArray) ToRuleGroupStatelessRuleArrayOutputWithContext(ctx context.Context) RuleGroupStatelessRuleArrayOutput

type RuleGroupStatelessRuleArrayInput

type RuleGroupStatelessRuleArrayInput interface {
	pulumi.Input

	ToRuleGroupStatelessRuleArrayOutput() RuleGroupStatelessRuleArrayOutput
	ToRuleGroupStatelessRuleArrayOutputWithContext(context.Context) RuleGroupStatelessRuleArrayOutput
}

RuleGroupStatelessRuleArrayInput is an input type that accepts RuleGroupStatelessRuleArray and RuleGroupStatelessRuleArrayOutput values. You can construct a concrete instance of `RuleGroupStatelessRuleArrayInput` via:

RuleGroupStatelessRuleArray{ RuleGroupStatelessRuleArgs{...} }

type RuleGroupStatelessRuleArrayOutput

type RuleGroupStatelessRuleArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupStatelessRuleArrayOutput) ElementType

func (RuleGroupStatelessRuleArrayOutput) Index

func (RuleGroupStatelessRuleArrayOutput) ToRuleGroupStatelessRuleArrayOutput

func (o RuleGroupStatelessRuleArrayOutput) ToRuleGroupStatelessRuleArrayOutput() RuleGroupStatelessRuleArrayOutput

func (RuleGroupStatelessRuleArrayOutput) ToRuleGroupStatelessRuleArrayOutputWithContext

func (o RuleGroupStatelessRuleArrayOutput) ToRuleGroupStatelessRuleArrayOutputWithContext(ctx context.Context) RuleGroupStatelessRuleArrayOutput

type RuleGroupStatelessRuleInput

type RuleGroupStatelessRuleInput interface {
	pulumi.Input

	ToRuleGroupStatelessRuleOutput() RuleGroupStatelessRuleOutput
	ToRuleGroupStatelessRuleOutputWithContext(context.Context) RuleGroupStatelessRuleOutput
}

RuleGroupStatelessRuleInput is an input type that accepts RuleGroupStatelessRuleArgs and RuleGroupStatelessRuleOutput values. You can construct a concrete instance of `RuleGroupStatelessRuleInput` via:

RuleGroupStatelessRuleArgs{...}

type RuleGroupStatelessRuleOutput

type RuleGroupStatelessRuleOutput struct{ *pulumi.OutputState }

func (RuleGroupStatelessRuleOutput) ElementType

func (RuleGroupStatelessRuleOutput) Priority

Indicates the order in which to run this rule relative to all of the rules that are defined for a stateless rule group. Network Firewall evaluates the rules in a rule group starting with the lowest priority setting. You must ensure that the priority settings are unique for the rule group.

Each stateless rule group uses exactly one `StatelessRulesAndCustomActions` object, and each `StatelessRulesAndCustomActions` contains exactly one `StatelessRules` object. To ensure unique priority settings for your rule groups, set unique priorities for the stateless rules that you define inside any single `StatelessRules` object.

You can change the priority settings of your rules at any time. To make it easier to insert rules later, number them so there's a wide range in between, for example use 100, 200, and so on.

func (RuleGroupStatelessRuleOutput) RuleDefinition

Defines the stateless 5-tuple packet inspection criteria and the action to take on a packet that matches the criteria.

func (RuleGroupStatelessRuleOutput) ToRuleGroupStatelessRuleOutput

func (o RuleGroupStatelessRuleOutput) ToRuleGroupStatelessRuleOutput() RuleGroupStatelessRuleOutput

func (RuleGroupStatelessRuleOutput) ToRuleGroupStatelessRuleOutputWithContext

func (o RuleGroupStatelessRuleOutput) ToRuleGroupStatelessRuleOutputWithContext(ctx context.Context) RuleGroupStatelessRuleOutput

type RuleGroupStatelessRulesAndCustomActions

type RuleGroupStatelessRulesAndCustomActions struct {
	// Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule `RuleGroup.RuleDefinition` `Actions` specification.
	CustomActions []RuleGroupCustomAction `pulumi:"customActions"`
	// Defines the set of stateless rules for use in a stateless rule group.
	StatelessRules []RuleGroupStatelessRule `pulumi:"statelessRules"`
}

type RuleGroupStatelessRulesAndCustomActionsArgs

type RuleGroupStatelessRulesAndCustomActionsArgs struct {
	// Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule `RuleGroup.RuleDefinition` `Actions` specification.
	CustomActions RuleGroupCustomActionArrayInput `pulumi:"customActions"`
	// Defines the set of stateless rules for use in a stateless rule group.
	StatelessRules RuleGroupStatelessRuleArrayInput `pulumi:"statelessRules"`
}

func (RuleGroupStatelessRulesAndCustomActionsArgs) ElementType

func (RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsOutput

func (i RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsOutput() RuleGroupStatelessRulesAndCustomActionsOutput

func (RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsOutputWithContext

func (i RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsOutputWithContext(ctx context.Context) RuleGroupStatelessRulesAndCustomActionsOutput

func (RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsPtrOutput

func (i RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsPtrOutput() RuleGroupStatelessRulesAndCustomActionsPtrOutput

func (RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsPtrOutputWithContext

func (i RuleGroupStatelessRulesAndCustomActionsArgs) ToRuleGroupStatelessRulesAndCustomActionsPtrOutputWithContext(ctx context.Context) RuleGroupStatelessRulesAndCustomActionsPtrOutput

type RuleGroupStatelessRulesAndCustomActionsInput

type RuleGroupStatelessRulesAndCustomActionsInput interface {
	pulumi.Input

	ToRuleGroupStatelessRulesAndCustomActionsOutput() RuleGroupStatelessRulesAndCustomActionsOutput
	ToRuleGroupStatelessRulesAndCustomActionsOutputWithContext(context.Context) RuleGroupStatelessRulesAndCustomActionsOutput
}

RuleGroupStatelessRulesAndCustomActionsInput is an input type that accepts RuleGroupStatelessRulesAndCustomActionsArgs and RuleGroupStatelessRulesAndCustomActionsOutput values. You can construct a concrete instance of `RuleGroupStatelessRulesAndCustomActionsInput` via:

RuleGroupStatelessRulesAndCustomActionsArgs{...}

type RuleGroupStatelessRulesAndCustomActionsOutput

type RuleGroupStatelessRulesAndCustomActionsOutput struct{ *pulumi.OutputState }

func (RuleGroupStatelessRulesAndCustomActionsOutput) CustomActions

Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule `RuleGroup.RuleDefinition` `Actions` specification.

func (RuleGroupStatelessRulesAndCustomActionsOutput) ElementType

func (RuleGroupStatelessRulesAndCustomActionsOutput) StatelessRules

Defines the set of stateless rules for use in a stateless rule group.

func (RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsOutput

func (o RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsOutput() RuleGroupStatelessRulesAndCustomActionsOutput

func (RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsOutputWithContext

func (o RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsOutputWithContext(ctx context.Context) RuleGroupStatelessRulesAndCustomActionsOutput

func (RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutput

func (o RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutput() RuleGroupStatelessRulesAndCustomActionsPtrOutput

func (RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutputWithContext

func (o RuleGroupStatelessRulesAndCustomActionsOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutputWithContext(ctx context.Context) RuleGroupStatelessRulesAndCustomActionsPtrOutput

type RuleGroupStatelessRulesAndCustomActionsPtrInput

type RuleGroupStatelessRulesAndCustomActionsPtrInput interface {
	pulumi.Input

	ToRuleGroupStatelessRulesAndCustomActionsPtrOutput() RuleGroupStatelessRulesAndCustomActionsPtrOutput
	ToRuleGroupStatelessRulesAndCustomActionsPtrOutputWithContext(context.Context) RuleGroupStatelessRulesAndCustomActionsPtrOutput
}

RuleGroupStatelessRulesAndCustomActionsPtrInput is an input type that accepts RuleGroupStatelessRulesAndCustomActionsArgs, RuleGroupStatelessRulesAndCustomActionsPtr and RuleGroupStatelessRulesAndCustomActionsPtrOutput values. You can construct a concrete instance of `RuleGroupStatelessRulesAndCustomActionsPtrInput` via:

        RuleGroupStatelessRulesAndCustomActionsArgs{...}

or:

        nil

type RuleGroupStatelessRulesAndCustomActionsPtrOutput

type RuleGroupStatelessRulesAndCustomActionsPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupStatelessRulesAndCustomActionsPtrOutput) CustomActions

Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule `RuleGroup.RuleDefinition` `Actions` specification.

func (RuleGroupStatelessRulesAndCustomActionsPtrOutput) Elem

func (RuleGroupStatelessRulesAndCustomActionsPtrOutput) ElementType

func (RuleGroupStatelessRulesAndCustomActionsPtrOutput) StatelessRules

Defines the set of stateless rules for use in a stateless rule group.

func (RuleGroupStatelessRulesAndCustomActionsPtrOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutput

func (o RuleGroupStatelessRulesAndCustomActionsPtrOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutput() RuleGroupStatelessRulesAndCustomActionsPtrOutput

func (RuleGroupStatelessRulesAndCustomActionsPtrOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutputWithContext

func (o RuleGroupStatelessRulesAndCustomActionsPtrOutput) ToRuleGroupStatelessRulesAndCustomActionsPtrOutputWithContext(ctx context.Context) RuleGroupStatelessRulesAndCustomActionsPtrOutput

type RuleGroupTag

type RuleGroupTag struct {
	// The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key string `pulumi:"key"`
	// The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value string `pulumi:"value"`
}

type RuleGroupTargetType

type RuleGroupTargetType string

func (RuleGroupTargetType) ElementType

func (RuleGroupTargetType) ElementType() reflect.Type

func (RuleGroupTargetType) ToRuleGroupTargetTypeOutput

func (e RuleGroupTargetType) ToRuleGroupTargetTypeOutput() RuleGroupTargetTypeOutput

func (RuleGroupTargetType) ToRuleGroupTargetTypeOutputWithContext

func (e RuleGroupTargetType) ToRuleGroupTargetTypeOutputWithContext(ctx context.Context) RuleGroupTargetTypeOutput

func (RuleGroupTargetType) ToRuleGroupTargetTypePtrOutput

func (e RuleGroupTargetType) ToRuleGroupTargetTypePtrOutput() RuleGroupTargetTypePtrOutput

func (RuleGroupTargetType) ToRuleGroupTargetTypePtrOutputWithContext

func (e RuleGroupTargetType) ToRuleGroupTargetTypePtrOutputWithContext(ctx context.Context) RuleGroupTargetTypePtrOutput

func (RuleGroupTargetType) ToStringOutput

func (e RuleGroupTargetType) ToStringOutput() pulumi.StringOutput

func (RuleGroupTargetType) ToStringOutputWithContext

func (e RuleGroupTargetType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTargetType) ToStringPtrOutput

func (e RuleGroupTargetType) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTargetType) ToStringPtrOutputWithContext

func (e RuleGroupTargetType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTargetTypeArray

type RuleGroupTargetTypeArray []RuleGroupTargetType

func (RuleGroupTargetTypeArray) ElementType

func (RuleGroupTargetTypeArray) ElementType() reflect.Type

func (RuleGroupTargetTypeArray) ToRuleGroupTargetTypeArrayOutput

func (i RuleGroupTargetTypeArray) ToRuleGroupTargetTypeArrayOutput() RuleGroupTargetTypeArrayOutput

func (RuleGroupTargetTypeArray) ToRuleGroupTargetTypeArrayOutputWithContext

func (i RuleGroupTargetTypeArray) ToRuleGroupTargetTypeArrayOutputWithContext(ctx context.Context) RuleGroupTargetTypeArrayOutput

type RuleGroupTargetTypeArrayInput

type RuleGroupTargetTypeArrayInput interface {
	pulumi.Input

	ToRuleGroupTargetTypeArrayOutput() RuleGroupTargetTypeArrayOutput
	ToRuleGroupTargetTypeArrayOutputWithContext(context.Context) RuleGroupTargetTypeArrayOutput
}

RuleGroupTargetTypeArrayInput is an input type that accepts RuleGroupTargetTypeArray and RuleGroupTargetTypeArrayOutput values. You can construct a concrete instance of `RuleGroupTargetTypeArrayInput` via:

RuleGroupTargetTypeArray{ RuleGroupTargetTypeArgs{...} }

type RuleGroupTargetTypeArrayOutput

type RuleGroupTargetTypeArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupTargetTypeArrayOutput) ElementType

func (RuleGroupTargetTypeArrayOutput) Index

func (RuleGroupTargetTypeArrayOutput) ToRuleGroupTargetTypeArrayOutput

func (o RuleGroupTargetTypeArrayOutput) ToRuleGroupTargetTypeArrayOutput() RuleGroupTargetTypeArrayOutput

func (RuleGroupTargetTypeArrayOutput) ToRuleGroupTargetTypeArrayOutputWithContext

func (o RuleGroupTargetTypeArrayOutput) ToRuleGroupTargetTypeArrayOutputWithContext(ctx context.Context) RuleGroupTargetTypeArrayOutput

type RuleGroupTargetTypeInput

type RuleGroupTargetTypeInput interface {
	pulumi.Input

	ToRuleGroupTargetTypeOutput() RuleGroupTargetTypeOutput
	ToRuleGroupTargetTypeOutputWithContext(context.Context) RuleGroupTargetTypeOutput
}

RuleGroupTargetTypeInput is an input type that accepts values of the RuleGroupTargetType enum A concrete instance of `RuleGroupTargetTypeInput` can be one of the following:

RuleGroupTargetTypeTlsSni
RuleGroupTargetTypeHttpHost

type RuleGroupTargetTypeOutput

type RuleGroupTargetTypeOutput struct{ *pulumi.OutputState }

func (RuleGroupTargetTypeOutput) ElementType

func (RuleGroupTargetTypeOutput) ElementType() reflect.Type

func (RuleGroupTargetTypeOutput) ToRuleGroupTargetTypeOutput

func (o RuleGroupTargetTypeOutput) ToRuleGroupTargetTypeOutput() RuleGroupTargetTypeOutput

func (RuleGroupTargetTypeOutput) ToRuleGroupTargetTypeOutputWithContext

func (o RuleGroupTargetTypeOutput) ToRuleGroupTargetTypeOutputWithContext(ctx context.Context) RuleGroupTargetTypeOutput

func (RuleGroupTargetTypeOutput) ToRuleGroupTargetTypePtrOutput

func (o RuleGroupTargetTypeOutput) ToRuleGroupTargetTypePtrOutput() RuleGroupTargetTypePtrOutput

func (RuleGroupTargetTypeOutput) ToRuleGroupTargetTypePtrOutputWithContext

func (o RuleGroupTargetTypeOutput) ToRuleGroupTargetTypePtrOutputWithContext(ctx context.Context) RuleGroupTargetTypePtrOutput

func (RuleGroupTargetTypeOutput) ToStringOutput

func (o RuleGroupTargetTypeOutput) ToStringOutput() pulumi.StringOutput

func (RuleGroupTargetTypeOutput) ToStringOutputWithContext

func (o RuleGroupTargetTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTargetTypeOutput) ToStringPtrOutput

func (o RuleGroupTargetTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTargetTypeOutput) ToStringPtrOutputWithContext

func (o RuleGroupTargetTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTargetTypePtrInput

type RuleGroupTargetTypePtrInput interface {
	pulumi.Input

	ToRuleGroupTargetTypePtrOutput() RuleGroupTargetTypePtrOutput
	ToRuleGroupTargetTypePtrOutputWithContext(context.Context) RuleGroupTargetTypePtrOutput
}

func RuleGroupTargetTypePtr

func RuleGroupTargetTypePtr(v string) RuleGroupTargetTypePtrInput

type RuleGroupTargetTypePtrOutput

type RuleGroupTargetTypePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupTargetTypePtrOutput) Elem

func (RuleGroupTargetTypePtrOutput) ElementType

func (RuleGroupTargetTypePtrOutput) ToRuleGroupTargetTypePtrOutput

func (o RuleGroupTargetTypePtrOutput) ToRuleGroupTargetTypePtrOutput() RuleGroupTargetTypePtrOutput

func (RuleGroupTargetTypePtrOutput) ToRuleGroupTargetTypePtrOutputWithContext

func (o RuleGroupTargetTypePtrOutput) ToRuleGroupTargetTypePtrOutputWithContext(ctx context.Context) RuleGroupTargetTypePtrOutput

func (RuleGroupTargetTypePtrOutput) ToStringPtrOutput

func (o RuleGroupTargetTypePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTargetTypePtrOutput) ToStringPtrOutputWithContext

func (o RuleGroupTargetTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTcpFlag added in v0.72.0

type RuleGroupTcpFlag string

func (RuleGroupTcpFlag) ElementType added in v0.72.0

func (RuleGroupTcpFlag) ElementType() reflect.Type

func (RuleGroupTcpFlag) ToRuleGroupTcpFlagOutput added in v0.72.0

func (e RuleGroupTcpFlag) ToRuleGroupTcpFlagOutput() RuleGroupTcpFlagOutput

func (RuleGroupTcpFlag) ToRuleGroupTcpFlagOutputWithContext added in v0.72.0

func (e RuleGroupTcpFlag) ToRuleGroupTcpFlagOutputWithContext(ctx context.Context) RuleGroupTcpFlagOutput

func (RuleGroupTcpFlag) ToRuleGroupTcpFlagPtrOutput added in v0.72.0

func (e RuleGroupTcpFlag) ToRuleGroupTcpFlagPtrOutput() RuleGroupTcpFlagPtrOutput

func (RuleGroupTcpFlag) ToRuleGroupTcpFlagPtrOutputWithContext added in v0.72.0

func (e RuleGroupTcpFlag) ToRuleGroupTcpFlagPtrOutputWithContext(ctx context.Context) RuleGroupTcpFlagPtrOutput

func (RuleGroupTcpFlag) ToStringOutput added in v0.72.0

func (e RuleGroupTcpFlag) ToStringOutput() pulumi.StringOutput

func (RuleGroupTcpFlag) ToStringOutputWithContext added in v0.72.0

func (e RuleGroupTcpFlag) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTcpFlag) ToStringPtrOutput added in v0.72.0

func (e RuleGroupTcpFlag) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTcpFlag) ToStringPtrOutputWithContext added in v0.72.0

func (e RuleGroupTcpFlag) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTcpFlagArray added in v0.72.0

type RuleGroupTcpFlagArray []RuleGroupTcpFlag

func (RuleGroupTcpFlagArray) ElementType added in v0.72.0

func (RuleGroupTcpFlagArray) ElementType() reflect.Type

func (RuleGroupTcpFlagArray) ToRuleGroupTcpFlagArrayOutput added in v0.72.0

func (i RuleGroupTcpFlagArray) ToRuleGroupTcpFlagArrayOutput() RuleGroupTcpFlagArrayOutput

func (RuleGroupTcpFlagArray) ToRuleGroupTcpFlagArrayOutputWithContext added in v0.72.0

func (i RuleGroupTcpFlagArray) ToRuleGroupTcpFlagArrayOutputWithContext(ctx context.Context) RuleGroupTcpFlagArrayOutput

type RuleGroupTcpFlagArrayInput added in v0.72.0

type RuleGroupTcpFlagArrayInput interface {
	pulumi.Input

	ToRuleGroupTcpFlagArrayOutput() RuleGroupTcpFlagArrayOutput
	ToRuleGroupTcpFlagArrayOutputWithContext(context.Context) RuleGroupTcpFlagArrayOutput
}

RuleGroupTcpFlagArrayInput is an input type that accepts RuleGroupTcpFlagArray and RuleGroupTcpFlagArrayOutput values. You can construct a concrete instance of `RuleGroupTcpFlagArrayInput` via:

RuleGroupTcpFlagArray{ RuleGroupTcpFlagArgs{...} }

type RuleGroupTcpFlagArrayOutput added in v0.72.0

type RuleGroupTcpFlagArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupTcpFlagArrayOutput) ElementType added in v0.72.0

func (RuleGroupTcpFlagArrayOutput) Index added in v0.72.0

func (RuleGroupTcpFlagArrayOutput) ToRuleGroupTcpFlagArrayOutput added in v0.72.0

func (o RuleGroupTcpFlagArrayOutput) ToRuleGroupTcpFlagArrayOutput() RuleGroupTcpFlagArrayOutput

func (RuleGroupTcpFlagArrayOutput) ToRuleGroupTcpFlagArrayOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagArrayOutput) ToRuleGroupTcpFlagArrayOutputWithContext(ctx context.Context) RuleGroupTcpFlagArrayOutput

type RuleGroupTcpFlagField added in v0.72.0

type RuleGroupTcpFlagField struct {
	// Used in conjunction with the `Masks` setting to define the flags that must be set and flags that must not be set in order for the packet to match. This setting can only specify values that are also specified in the `Masks` setting.
	//
	// For the flags that are specified in the masks setting, the following must be true for the packet to match:
	//
	// - The ones that are set in this flags setting must be set in the packet.
	// - The ones that are not set in this flags setting must also not be set in the packet.
	Flags []RuleGroupTcpFlag `pulumi:"flags"`
	// The set of flags to consider in the inspection. To inspect all flags in the valid values list, leave this with no setting.
	Masks []RuleGroupTcpFlag `pulumi:"masks"`
}

type RuleGroupTcpFlagFieldArgs added in v0.72.0

type RuleGroupTcpFlagFieldArgs struct {
	// Used in conjunction with the `Masks` setting to define the flags that must be set and flags that must not be set in order for the packet to match. This setting can only specify values that are also specified in the `Masks` setting.
	//
	// For the flags that are specified in the masks setting, the following must be true for the packet to match:
	//
	// - The ones that are set in this flags setting must be set in the packet.
	// - The ones that are not set in this flags setting must also not be set in the packet.
	Flags RuleGroupTcpFlagArrayInput `pulumi:"flags"`
	// The set of flags to consider in the inspection. To inspect all flags in the valid values list, leave this with no setting.
	Masks RuleGroupTcpFlagArrayInput `pulumi:"masks"`
}

func (RuleGroupTcpFlagFieldArgs) ElementType added in v0.72.0

func (RuleGroupTcpFlagFieldArgs) ElementType() reflect.Type

func (RuleGroupTcpFlagFieldArgs) ToRuleGroupTcpFlagFieldOutput added in v0.72.0

func (i RuleGroupTcpFlagFieldArgs) ToRuleGroupTcpFlagFieldOutput() RuleGroupTcpFlagFieldOutput

func (RuleGroupTcpFlagFieldArgs) ToRuleGroupTcpFlagFieldOutputWithContext added in v0.72.0

func (i RuleGroupTcpFlagFieldArgs) ToRuleGroupTcpFlagFieldOutputWithContext(ctx context.Context) RuleGroupTcpFlagFieldOutput

type RuleGroupTcpFlagFieldArray added in v0.72.0

type RuleGroupTcpFlagFieldArray []RuleGroupTcpFlagFieldInput

func (RuleGroupTcpFlagFieldArray) ElementType added in v0.72.0

func (RuleGroupTcpFlagFieldArray) ElementType() reflect.Type

func (RuleGroupTcpFlagFieldArray) ToRuleGroupTcpFlagFieldArrayOutput added in v0.72.0

func (i RuleGroupTcpFlagFieldArray) ToRuleGroupTcpFlagFieldArrayOutput() RuleGroupTcpFlagFieldArrayOutput

func (RuleGroupTcpFlagFieldArray) ToRuleGroupTcpFlagFieldArrayOutputWithContext added in v0.72.0

func (i RuleGroupTcpFlagFieldArray) ToRuleGroupTcpFlagFieldArrayOutputWithContext(ctx context.Context) RuleGroupTcpFlagFieldArrayOutput

type RuleGroupTcpFlagFieldArrayInput added in v0.72.0

type RuleGroupTcpFlagFieldArrayInput interface {
	pulumi.Input

	ToRuleGroupTcpFlagFieldArrayOutput() RuleGroupTcpFlagFieldArrayOutput
	ToRuleGroupTcpFlagFieldArrayOutputWithContext(context.Context) RuleGroupTcpFlagFieldArrayOutput
}

RuleGroupTcpFlagFieldArrayInput is an input type that accepts RuleGroupTcpFlagFieldArray and RuleGroupTcpFlagFieldArrayOutput values. You can construct a concrete instance of `RuleGroupTcpFlagFieldArrayInput` via:

RuleGroupTcpFlagFieldArray{ RuleGroupTcpFlagFieldArgs{...} }

type RuleGroupTcpFlagFieldArrayOutput added in v0.72.0

type RuleGroupTcpFlagFieldArrayOutput struct{ *pulumi.OutputState }

func (RuleGroupTcpFlagFieldArrayOutput) ElementType added in v0.72.0

func (RuleGroupTcpFlagFieldArrayOutput) Index added in v0.72.0

func (RuleGroupTcpFlagFieldArrayOutput) ToRuleGroupTcpFlagFieldArrayOutput added in v0.72.0

func (o RuleGroupTcpFlagFieldArrayOutput) ToRuleGroupTcpFlagFieldArrayOutput() RuleGroupTcpFlagFieldArrayOutput

func (RuleGroupTcpFlagFieldArrayOutput) ToRuleGroupTcpFlagFieldArrayOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagFieldArrayOutput) ToRuleGroupTcpFlagFieldArrayOutputWithContext(ctx context.Context) RuleGroupTcpFlagFieldArrayOutput

type RuleGroupTcpFlagFieldInput added in v0.72.0

type RuleGroupTcpFlagFieldInput interface {
	pulumi.Input

	ToRuleGroupTcpFlagFieldOutput() RuleGroupTcpFlagFieldOutput
	ToRuleGroupTcpFlagFieldOutputWithContext(context.Context) RuleGroupTcpFlagFieldOutput
}

RuleGroupTcpFlagFieldInput is an input type that accepts RuleGroupTcpFlagFieldArgs and RuleGroupTcpFlagFieldOutput values. You can construct a concrete instance of `RuleGroupTcpFlagFieldInput` via:

RuleGroupTcpFlagFieldArgs{...}

type RuleGroupTcpFlagFieldOutput added in v0.72.0

type RuleGroupTcpFlagFieldOutput struct{ *pulumi.OutputState }

func (RuleGroupTcpFlagFieldOutput) ElementType added in v0.72.0

func (RuleGroupTcpFlagFieldOutput) Flags added in v0.72.0

Used in conjunction with the `Masks` setting to define the flags that must be set and flags that must not be set in order for the packet to match. This setting can only specify values that are also specified in the `Masks` setting.

For the flags that are specified in the masks setting, the following must be true for the packet to match:

- The ones that are set in this flags setting must be set in the packet. - The ones that are not set in this flags setting must also not be set in the packet.

func (RuleGroupTcpFlagFieldOutput) Masks added in v0.72.0

The set of flags to consider in the inspection. To inspect all flags in the valid values list, leave this with no setting.

func (RuleGroupTcpFlagFieldOutput) ToRuleGroupTcpFlagFieldOutput added in v0.72.0

func (o RuleGroupTcpFlagFieldOutput) ToRuleGroupTcpFlagFieldOutput() RuleGroupTcpFlagFieldOutput

func (RuleGroupTcpFlagFieldOutput) ToRuleGroupTcpFlagFieldOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagFieldOutput) ToRuleGroupTcpFlagFieldOutputWithContext(ctx context.Context) RuleGroupTcpFlagFieldOutput

type RuleGroupTcpFlagInput added in v0.72.0

type RuleGroupTcpFlagInput interface {
	pulumi.Input

	ToRuleGroupTcpFlagOutput() RuleGroupTcpFlagOutput
	ToRuleGroupTcpFlagOutputWithContext(context.Context) RuleGroupTcpFlagOutput
}

RuleGroupTcpFlagInput is an input type that accepts values of the RuleGroupTcpFlag enum A concrete instance of `RuleGroupTcpFlagInput` can be one of the following:

RuleGroupTcpFlagFin
RuleGroupTcpFlagSyn
RuleGroupTcpFlagRst
RuleGroupTcpFlagPsh
RuleGroupTcpFlagAck
RuleGroupTcpFlagUrg
RuleGroupTcpFlagEce
RuleGroupTcpFlagCwr

type RuleGroupTcpFlagOutput added in v0.72.0

type RuleGroupTcpFlagOutput struct{ *pulumi.OutputState }

func (RuleGroupTcpFlagOutput) ElementType added in v0.72.0

func (RuleGroupTcpFlagOutput) ElementType() reflect.Type

func (RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagOutput added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagOutput() RuleGroupTcpFlagOutput

func (RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagOutputWithContext(ctx context.Context) RuleGroupTcpFlagOutput

func (RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagPtrOutput added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagPtrOutput() RuleGroupTcpFlagPtrOutput

func (RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagPtrOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToRuleGroupTcpFlagPtrOutputWithContext(ctx context.Context) RuleGroupTcpFlagPtrOutput

func (RuleGroupTcpFlagOutput) ToStringOutput added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToStringOutput() pulumi.StringOutput

func (RuleGroupTcpFlagOutput) ToStringOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTcpFlagOutput) ToStringPtrOutput added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTcpFlagOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTcpFlagPtrInput added in v0.72.0

type RuleGroupTcpFlagPtrInput interface {
	pulumi.Input

	ToRuleGroupTcpFlagPtrOutput() RuleGroupTcpFlagPtrOutput
	ToRuleGroupTcpFlagPtrOutputWithContext(context.Context) RuleGroupTcpFlagPtrOutput
}

func RuleGroupTcpFlagPtr added in v0.72.0

func RuleGroupTcpFlagPtr(v string) RuleGroupTcpFlagPtrInput

type RuleGroupTcpFlagPtrOutput added in v0.72.0

type RuleGroupTcpFlagPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupTcpFlagPtrOutput) Elem added in v0.72.0

func (RuleGroupTcpFlagPtrOutput) ElementType added in v0.72.0

func (RuleGroupTcpFlagPtrOutput) ElementType() reflect.Type

func (RuleGroupTcpFlagPtrOutput) ToRuleGroupTcpFlagPtrOutput added in v0.72.0

func (o RuleGroupTcpFlagPtrOutput) ToRuleGroupTcpFlagPtrOutput() RuleGroupTcpFlagPtrOutput

func (RuleGroupTcpFlagPtrOutput) ToRuleGroupTcpFlagPtrOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagPtrOutput) ToRuleGroupTcpFlagPtrOutputWithContext(ctx context.Context) RuleGroupTcpFlagPtrOutput

func (RuleGroupTcpFlagPtrOutput) ToStringPtrOutput added in v0.72.0

func (o RuleGroupTcpFlagPtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTcpFlagPtrOutput) ToStringPtrOutputWithContext added in v0.72.0

func (o RuleGroupTcpFlagPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupType

type RuleGroupType struct {
	// The reference sets for the stateful rule group.
	ReferenceSets *RuleGroupReferenceSets `pulumi:"referenceSets"`
	// Settings that are available for use in the rules in the rule group. You can only use these for stateful rule groups.
	RuleVariables *RuleGroupRuleVariables `pulumi:"ruleVariables"`
	// The stateful rules or stateless rules for the rule group.
	RulesSource RuleGroupRulesSource `pulumi:"rulesSource"`
	// Additional options governing how Network Firewall handles stateful rules. The policies where you use your stateful rule group must have stateful rule options settings that are compatible with these settings. Some limitations apply; for more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-limitations-caveats.html) in the *AWS Network Firewall Developer Guide* .
	StatefulRuleOptions *RuleGroupStatefulRuleOptions `pulumi:"statefulRuleOptions"`
}

type RuleGroupTypeArgs added in v0.2.0

type RuleGroupTypeArgs struct {
	// The reference sets for the stateful rule group.
	ReferenceSets RuleGroupReferenceSetsPtrInput `pulumi:"referenceSets"`
	// Settings that are available for use in the rules in the rule group. You can only use these for stateful rule groups.
	RuleVariables RuleGroupRuleVariablesPtrInput `pulumi:"ruleVariables"`
	// The stateful rules or stateless rules for the rule group.
	RulesSource RuleGroupRulesSourceInput `pulumi:"rulesSource"`
	// Additional options governing how Network Firewall handles stateful rules. The policies where you use your stateful rule group must have stateful rule options settings that are compatible with these settings. Some limitations apply; for more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-limitations-caveats.html) in the *AWS Network Firewall Developer Guide* .
	StatefulRuleOptions RuleGroupStatefulRuleOptionsPtrInput `pulumi:"statefulRuleOptions"`
}

func (RuleGroupTypeArgs) ElementType added in v0.2.0

func (RuleGroupTypeArgs) ElementType() reflect.Type

func (RuleGroupTypeArgs) ToRuleGroupTypeOutput added in v0.2.0

func (i RuleGroupTypeArgs) ToRuleGroupTypeOutput() RuleGroupTypeOutput

func (RuleGroupTypeArgs) ToRuleGroupTypeOutputWithContext added in v0.2.0

func (i RuleGroupTypeArgs) ToRuleGroupTypeOutputWithContext(ctx context.Context) RuleGroupTypeOutput

func (RuleGroupTypeArgs) ToRuleGroupTypePtrOutput added in v0.2.0

func (i RuleGroupTypeArgs) ToRuleGroupTypePtrOutput() RuleGroupTypePtrOutput

func (RuleGroupTypeArgs) ToRuleGroupTypePtrOutputWithContext added in v0.2.0

func (i RuleGroupTypeArgs) ToRuleGroupTypePtrOutputWithContext(ctx context.Context) RuleGroupTypePtrOutput

type RuleGroupTypeEnum added in v0.2.0

type RuleGroupTypeEnum string

Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains stateless rules. If it is stateful, it contains stateful rules.

func (RuleGroupTypeEnum) ElementType added in v0.2.0

func (RuleGroupTypeEnum) ElementType() reflect.Type

func (RuleGroupTypeEnum) ToRuleGroupTypeEnumOutput added in v0.2.0

func (e RuleGroupTypeEnum) ToRuleGroupTypeEnumOutput() RuleGroupTypeEnumOutput

func (RuleGroupTypeEnum) ToRuleGroupTypeEnumOutputWithContext added in v0.2.0

func (e RuleGroupTypeEnum) ToRuleGroupTypeEnumOutputWithContext(ctx context.Context) RuleGroupTypeEnumOutput

func (RuleGroupTypeEnum) ToRuleGroupTypeEnumPtrOutput added in v0.2.0

func (e RuleGroupTypeEnum) ToRuleGroupTypeEnumPtrOutput() RuleGroupTypeEnumPtrOutput

func (RuleGroupTypeEnum) ToRuleGroupTypeEnumPtrOutputWithContext added in v0.2.0

func (e RuleGroupTypeEnum) ToRuleGroupTypeEnumPtrOutputWithContext(ctx context.Context) RuleGroupTypeEnumPtrOutput

func (RuleGroupTypeEnum) ToStringOutput added in v0.2.0

func (e RuleGroupTypeEnum) ToStringOutput() pulumi.StringOutput

func (RuleGroupTypeEnum) ToStringOutputWithContext added in v0.2.0

func (e RuleGroupTypeEnum) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTypeEnum) ToStringPtrOutput added in v0.2.0

func (e RuleGroupTypeEnum) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTypeEnum) ToStringPtrOutputWithContext added in v0.2.0

func (e RuleGroupTypeEnum) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTypeEnumInput added in v0.2.0

type RuleGroupTypeEnumInput interface {
	pulumi.Input

	ToRuleGroupTypeEnumOutput() RuleGroupTypeEnumOutput
	ToRuleGroupTypeEnumOutputWithContext(context.Context) RuleGroupTypeEnumOutput
}

RuleGroupTypeEnumInput is an input type that accepts values of the RuleGroupTypeEnum enum A concrete instance of `RuleGroupTypeEnumInput` can be one of the following:

RuleGroupTypeEnumStateless
RuleGroupTypeEnumStateful

type RuleGroupTypeEnumOutput added in v0.2.0

type RuleGroupTypeEnumOutput struct{ *pulumi.OutputState }

func (RuleGroupTypeEnumOutput) ElementType added in v0.2.0

func (RuleGroupTypeEnumOutput) ElementType() reflect.Type

func (RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumOutput added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumOutput() RuleGroupTypeEnumOutput

func (RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumOutputWithContext added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumOutputWithContext(ctx context.Context) RuleGroupTypeEnumOutput

func (RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumPtrOutput added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumPtrOutput() RuleGroupTypeEnumPtrOutput

func (RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumPtrOutputWithContext added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToRuleGroupTypeEnumPtrOutputWithContext(ctx context.Context) RuleGroupTypeEnumPtrOutput

func (RuleGroupTypeEnumOutput) ToStringOutput added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToStringOutput() pulumi.StringOutput

func (RuleGroupTypeEnumOutput) ToStringOutputWithContext added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleGroupTypeEnumOutput) ToStringPtrOutput added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTypeEnumOutput) ToStringPtrOutputWithContext added in v0.2.0

func (o RuleGroupTypeEnumOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTypeEnumPtrInput added in v0.2.0

type RuleGroupTypeEnumPtrInput interface {
	pulumi.Input

	ToRuleGroupTypeEnumPtrOutput() RuleGroupTypeEnumPtrOutput
	ToRuleGroupTypeEnumPtrOutputWithContext(context.Context) RuleGroupTypeEnumPtrOutput
}

func RuleGroupTypeEnumPtr added in v0.2.0

func RuleGroupTypeEnumPtr(v string) RuleGroupTypeEnumPtrInput

type RuleGroupTypeEnumPtrOutput added in v0.2.0

type RuleGroupTypeEnumPtrOutput struct{ *pulumi.OutputState }

func (RuleGroupTypeEnumPtrOutput) Elem added in v0.2.0

func (RuleGroupTypeEnumPtrOutput) ElementType added in v0.2.0

func (RuleGroupTypeEnumPtrOutput) ElementType() reflect.Type

func (RuleGroupTypeEnumPtrOutput) ToRuleGroupTypeEnumPtrOutput added in v0.2.0

func (o RuleGroupTypeEnumPtrOutput) ToRuleGroupTypeEnumPtrOutput() RuleGroupTypeEnumPtrOutput

func (RuleGroupTypeEnumPtrOutput) ToRuleGroupTypeEnumPtrOutputWithContext added in v0.2.0

func (o RuleGroupTypeEnumPtrOutput) ToRuleGroupTypeEnumPtrOutputWithContext(ctx context.Context) RuleGroupTypeEnumPtrOutput

func (RuleGroupTypeEnumPtrOutput) ToStringPtrOutput added in v0.2.0

func (o RuleGroupTypeEnumPtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleGroupTypeEnumPtrOutput) ToStringPtrOutputWithContext added in v0.2.0

func (o RuleGroupTypeEnumPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleGroupTypeInput

type RuleGroupTypeInput interface {
	pulumi.Input

	ToRuleGroupTypeOutput() RuleGroupTypeOutput
	ToRuleGroupTypeOutputWithContext(context.Context) RuleGroupTypeOutput
}

RuleGroupTypeInput is an input type that accepts RuleGroupTypeArgs and RuleGroupTypeOutput values. You can construct a concrete instance of `RuleGroupTypeInput` via:

RuleGroupTypeArgs{...}

type RuleGroupTypeOutput

type RuleGroupTypeOutput struct{ *pulumi.OutputState }

func (RuleGroupTypeOutput) ElementType

func (RuleGroupTypeOutput) ElementType() reflect.Type

func (RuleGroupTypeOutput) ReferenceSets added in v0.46.0

The reference sets for the stateful rule group.

func (RuleGroupTypeOutput) RuleVariables added in v0.2.0

Settings that are available for use in the rules in the rule group. You can only use these for stateful rule groups.

func (RuleGroupTypeOutput) RulesSource added in v0.2.0

The stateful rules or stateless rules for the rule group.

func (RuleGroupTypeOutput) StatefulRuleOptions added in v0.3.0

Additional options governing how Network Firewall handles stateful rules. The policies where you use your stateful rule group must have stateful rule options settings that are compatible with these settings. Some limitations apply; for more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-limitations-caveats.html) in the *AWS Network Firewall Developer Guide* .

func (RuleGroupTypeOutput) ToRuleGroupTypeOutput

func (o RuleGroupTypeOutput) ToRuleGroupTypeOutput() RuleGroupTypeOutput

func (RuleGroupTypeOutput) ToRuleGroupTypeOutputWithContext

func (o RuleGroupTypeOutput) ToRuleGroupTypeOutputWithContext(ctx context.Context) RuleGroupTypeOutput

func (RuleGroupTypeOutput) ToRuleGroupTypePtrOutput

func (o RuleGroupTypeOutput) ToRuleGroupTypePtrOutput() RuleGroupTypePtrOutput

func (RuleGroupTypeOutput) ToRuleGroupTypePtrOutputWithContext

func (o RuleGroupTypeOutput) ToRuleGroupTypePtrOutputWithContext(ctx context.Context) RuleGroupTypePtrOutput

type RuleGroupTypePtrInput

type RuleGroupTypePtrInput interface {
	pulumi.Input

	ToRuleGroupTypePtrOutput() RuleGroupTypePtrOutput
	ToRuleGroupTypePtrOutputWithContext(context.Context) RuleGroupTypePtrOutput
}

RuleGroupTypePtrInput is an input type that accepts RuleGroupTypeArgs, RuleGroupTypePtr and RuleGroupTypePtrOutput values. You can construct a concrete instance of `RuleGroupTypePtrInput` via:

        RuleGroupTypeArgs{...}

or:

        nil

type RuleGroupTypePtrOutput

type RuleGroupTypePtrOutput struct{ *pulumi.OutputState }

func (RuleGroupTypePtrOutput) Elem

func (RuleGroupTypePtrOutput) ElementType

func (RuleGroupTypePtrOutput) ElementType() reflect.Type

func (RuleGroupTypePtrOutput) ReferenceSets added in v0.46.0

The reference sets for the stateful rule group.

func (RuleGroupTypePtrOutput) RuleVariables added in v0.2.0

Settings that are available for use in the rules in the rule group. You can only use these for stateful rule groups.

func (RuleGroupTypePtrOutput) RulesSource added in v0.2.0

The stateful rules or stateless rules for the rule group.

func (RuleGroupTypePtrOutput) StatefulRuleOptions added in v0.3.0

Additional options governing how Network Firewall handles stateful rules. The policies where you use your stateful rule group must have stateful rule options settings that are compatible with these settings. Some limitations apply; for more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-limitations-caveats.html) in the *AWS Network Firewall Developer Guide* .

func (RuleGroupTypePtrOutput) ToRuleGroupTypePtrOutput

func (o RuleGroupTypePtrOutput) ToRuleGroupTypePtrOutput() RuleGroupTypePtrOutput

func (RuleGroupTypePtrOutput) ToRuleGroupTypePtrOutputWithContext

func (o RuleGroupTypePtrOutput) ToRuleGroupTypePtrOutputWithContext(ctx context.Context) RuleGroupTypePtrOutput

type TlsInspectionConfiguration added in v0.92.0

type TlsInspectionConfiguration struct {
	pulumi.CustomResourceState

	// A description of the TLS inspection configuration.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The key:value pairs to associate with the resource.
	Tags aws.TagArrayOutput `pulumi:"tags"`
	// The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .
	TlsInspectionConfiguration TlsInspectionConfigurationTlsInspectionConfigurationOutput `pulumi:"tlsInspectionConfiguration"`
	// The Amazon Resource Name (ARN) of the TLS inspection configuration.
	TlsInspectionConfigurationArn pulumi.StringOutput `pulumi:"tlsInspectionConfigurationArn"`
	// A unique identifier for the TLS inspection configuration. This ID is returned in the responses to create and list commands. You provide it to operations such as update and delete.
	TlsInspectionConfigurationId pulumi.StringOutput `pulumi:"tlsInspectionConfigurationId"`
	// The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it.
	TlsInspectionConfigurationName pulumi.StringOutput `pulumi:"tlsInspectionConfigurationName"`
}

Resource type definition for AWS::NetworkFirewall::TLSInspectionConfiguration

func GetTlsInspectionConfiguration added in v0.92.0

func GetTlsInspectionConfiguration(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *TlsInspectionConfigurationState, opts ...pulumi.ResourceOption) (*TlsInspectionConfiguration, error)

GetTlsInspectionConfiguration gets an existing TlsInspectionConfiguration resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewTlsInspectionConfiguration added in v0.92.0

func NewTlsInspectionConfiguration(ctx *pulumi.Context,
	name string, args *TlsInspectionConfigurationArgs, opts ...pulumi.ResourceOption) (*TlsInspectionConfiguration, error)

NewTlsInspectionConfiguration registers a new resource with the given unique name, arguments, and options.

func (*TlsInspectionConfiguration) ElementType added in v0.92.0

func (*TlsInspectionConfiguration) ElementType() reflect.Type

func (*TlsInspectionConfiguration) ToTlsInspectionConfigurationOutput added in v0.92.0

func (i *TlsInspectionConfiguration) ToTlsInspectionConfigurationOutput() TlsInspectionConfigurationOutput

func (*TlsInspectionConfiguration) ToTlsInspectionConfigurationOutputWithContext added in v0.92.0

func (i *TlsInspectionConfiguration) ToTlsInspectionConfigurationOutputWithContext(ctx context.Context) TlsInspectionConfigurationOutput

type TlsInspectionConfigurationAddress added in v0.92.0

type TlsInspectionConfigurationAddress struct {
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	AddressDefinition string `pulumi:"addressDefinition"`
}

type TlsInspectionConfigurationAddressArgs added in v0.92.0

type TlsInspectionConfigurationAddressArgs struct {
	// Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.
	//
	// Examples:
	//
	// - To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .
	// - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .
	// - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .
	// - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .
	//
	// For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .
	AddressDefinition pulumi.StringInput `pulumi:"addressDefinition"`
}

func (TlsInspectionConfigurationAddressArgs) ElementType added in v0.92.0

func (TlsInspectionConfigurationAddressArgs) ToTlsInspectionConfigurationAddressOutput added in v0.92.0

func (i TlsInspectionConfigurationAddressArgs) ToTlsInspectionConfigurationAddressOutput() TlsInspectionConfigurationAddressOutput

func (TlsInspectionConfigurationAddressArgs) ToTlsInspectionConfigurationAddressOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationAddressArgs) ToTlsInspectionConfigurationAddressOutputWithContext(ctx context.Context) TlsInspectionConfigurationAddressOutput

type TlsInspectionConfigurationAddressArray added in v0.92.0

type TlsInspectionConfigurationAddressArray []TlsInspectionConfigurationAddressInput

func (TlsInspectionConfigurationAddressArray) ElementType added in v0.92.0

func (TlsInspectionConfigurationAddressArray) ToTlsInspectionConfigurationAddressArrayOutput added in v0.92.0

func (i TlsInspectionConfigurationAddressArray) ToTlsInspectionConfigurationAddressArrayOutput() TlsInspectionConfigurationAddressArrayOutput

func (TlsInspectionConfigurationAddressArray) ToTlsInspectionConfigurationAddressArrayOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationAddressArray) ToTlsInspectionConfigurationAddressArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationAddressArrayOutput

type TlsInspectionConfigurationAddressArrayInput added in v0.92.0

type TlsInspectionConfigurationAddressArrayInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationAddressArrayOutput() TlsInspectionConfigurationAddressArrayOutput
	ToTlsInspectionConfigurationAddressArrayOutputWithContext(context.Context) TlsInspectionConfigurationAddressArrayOutput
}

TlsInspectionConfigurationAddressArrayInput is an input type that accepts TlsInspectionConfigurationAddressArray and TlsInspectionConfigurationAddressArrayOutput values. You can construct a concrete instance of `TlsInspectionConfigurationAddressArrayInput` via:

TlsInspectionConfigurationAddressArray{ TlsInspectionConfigurationAddressArgs{...} }

type TlsInspectionConfigurationAddressArrayOutput added in v0.92.0

type TlsInspectionConfigurationAddressArrayOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationAddressArrayOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationAddressArrayOutput) Index added in v0.92.0

func (TlsInspectionConfigurationAddressArrayOutput) ToTlsInspectionConfigurationAddressArrayOutput added in v0.92.0

func (o TlsInspectionConfigurationAddressArrayOutput) ToTlsInspectionConfigurationAddressArrayOutput() TlsInspectionConfigurationAddressArrayOutput

func (TlsInspectionConfigurationAddressArrayOutput) ToTlsInspectionConfigurationAddressArrayOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationAddressArrayOutput) ToTlsInspectionConfigurationAddressArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationAddressArrayOutput

type TlsInspectionConfigurationAddressInput added in v0.92.0

type TlsInspectionConfigurationAddressInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationAddressOutput() TlsInspectionConfigurationAddressOutput
	ToTlsInspectionConfigurationAddressOutputWithContext(context.Context) TlsInspectionConfigurationAddressOutput
}

TlsInspectionConfigurationAddressInput is an input type that accepts TlsInspectionConfigurationAddressArgs and TlsInspectionConfigurationAddressOutput values. You can construct a concrete instance of `TlsInspectionConfigurationAddressInput` via:

TlsInspectionConfigurationAddressArgs{...}

type TlsInspectionConfigurationAddressOutput added in v0.92.0

type TlsInspectionConfigurationAddressOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationAddressOutput) AddressDefinition added in v0.92.0

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.

Examples:

- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` . - To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` . - To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` . - To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .

For more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) .

func (TlsInspectionConfigurationAddressOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationAddressOutput) ToTlsInspectionConfigurationAddressOutput added in v0.92.0

func (o TlsInspectionConfigurationAddressOutput) ToTlsInspectionConfigurationAddressOutput() TlsInspectionConfigurationAddressOutput

func (TlsInspectionConfigurationAddressOutput) ToTlsInspectionConfigurationAddressOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationAddressOutput) ToTlsInspectionConfigurationAddressOutputWithContext(ctx context.Context) TlsInspectionConfigurationAddressOutput

type TlsInspectionConfigurationArgs added in v0.92.0

type TlsInspectionConfigurationArgs struct {
	// A description of the TLS inspection configuration.
	Description pulumi.StringPtrInput
	// The key:value pairs to associate with the resource.
	Tags aws.TagArrayInput
	// The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .
	TlsInspectionConfiguration TlsInspectionConfigurationTlsInspectionConfigurationInput
	// The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it.
	TlsInspectionConfigurationName pulumi.StringPtrInput
}

The set of arguments for constructing a TlsInspectionConfiguration resource.

func (TlsInspectionConfigurationArgs) ElementType added in v0.92.0

type TlsInspectionConfigurationInput added in v0.92.0

type TlsInspectionConfigurationInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationOutput() TlsInspectionConfigurationOutput
	ToTlsInspectionConfigurationOutputWithContext(ctx context.Context) TlsInspectionConfigurationOutput
}

type TlsInspectionConfigurationOutput added in v0.92.0

type TlsInspectionConfigurationOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationOutput) Description added in v0.92.0

A description of the TLS inspection configuration.

func (TlsInspectionConfigurationOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationOutput) Tags added in v0.92.0

The key:value pairs to associate with the resource.

func (TlsInspectionConfigurationOutput) TlsInspectionConfiguration added in v0.92.0

The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using AWS Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .

func (TlsInspectionConfigurationOutput) TlsInspectionConfigurationArn added in v0.92.0

func (o TlsInspectionConfigurationOutput) TlsInspectionConfigurationArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the TLS inspection configuration.

func (TlsInspectionConfigurationOutput) TlsInspectionConfigurationId added in v0.92.0

func (o TlsInspectionConfigurationOutput) TlsInspectionConfigurationId() pulumi.StringOutput

A unique identifier for the TLS inspection configuration. This ID is returned in the responses to create and list commands. You provide it to operations such as update and delete.

func (TlsInspectionConfigurationOutput) TlsInspectionConfigurationName added in v0.92.0

func (o TlsInspectionConfigurationOutput) TlsInspectionConfigurationName() pulumi.StringOutput

The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it.

func (TlsInspectionConfigurationOutput) ToTlsInspectionConfigurationOutput added in v0.92.0

func (o TlsInspectionConfigurationOutput) ToTlsInspectionConfigurationOutput() TlsInspectionConfigurationOutput

func (TlsInspectionConfigurationOutput) ToTlsInspectionConfigurationOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationOutput) ToTlsInspectionConfigurationOutputWithContext(ctx context.Context) TlsInspectionConfigurationOutput

type TlsInspectionConfigurationPortRange added in v0.92.0

type TlsInspectionConfigurationPortRange struct {
	// The lower limit of the port range. This must be less than or equal to the `ToPort` specification.
	FromPort int `pulumi:"fromPort"`
	// The upper limit of the port range. This must be greater than or equal to the `FromPort` specification.
	ToPort int `pulumi:"toPort"`
}

type TlsInspectionConfigurationPortRangeArgs added in v0.92.0

type TlsInspectionConfigurationPortRangeArgs struct {
	// The lower limit of the port range. This must be less than or equal to the `ToPort` specification.
	FromPort pulumi.IntInput `pulumi:"fromPort"`
	// The upper limit of the port range. This must be greater than or equal to the `FromPort` specification.
	ToPort pulumi.IntInput `pulumi:"toPort"`
}

func (TlsInspectionConfigurationPortRangeArgs) ElementType added in v0.92.0

func (TlsInspectionConfigurationPortRangeArgs) ToTlsInspectionConfigurationPortRangeOutput added in v0.92.0

func (i TlsInspectionConfigurationPortRangeArgs) ToTlsInspectionConfigurationPortRangeOutput() TlsInspectionConfigurationPortRangeOutput

func (TlsInspectionConfigurationPortRangeArgs) ToTlsInspectionConfigurationPortRangeOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationPortRangeArgs) ToTlsInspectionConfigurationPortRangeOutputWithContext(ctx context.Context) TlsInspectionConfigurationPortRangeOutput

type TlsInspectionConfigurationPortRangeArray added in v0.92.0

type TlsInspectionConfigurationPortRangeArray []TlsInspectionConfigurationPortRangeInput

func (TlsInspectionConfigurationPortRangeArray) ElementType added in v0.92.0

func (TlsInspectionConfigurationPortRangeArray) ToTlsInspectionConfigurationPortRangeArrayOutput added in v0.92.0

func (i TlsInspectionConfigurationPortRangeArray) ToTlsInspectionConfigurationPortRangeArrayOutput() TlsInspectionConfigurationPortRangeArrayOutput

func (TlsInspectionConfigurationPortRangeArray) ToTlsInspectionConfigurationPortRangeArrayOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationPortRangeArray) ToTlsInspectionConfigurationPortRangeArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationPortRangeArrayOutput

type TlsInspectionConfigurationPortRangeArrayInput added in v0.92.0

type TlsInspectionConfigurationPortRangeArrayInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationPortRangeArrayOutput() TlsInspectionConfigurationPortRangeArrayOutput
	ToTlsInspectionConfigurationPortRangeArrayOutputWithContext(context.Context) TlsInspectionConfigurationPortRangeArrayOutput
}

TlsInspectionConfigurationPortRangeArrayInput is an input type that accepts TlsInspectionConfigurationPortRangeArray and TlsInspectionConfigurationPortRangeArrayOutput values. You can construct a concrete instance of `TlsInspectionConfigurationPortRangeArrayInput` via:

TlsInspectionConfigurationPortRangeArray{ TlsInspectionConfigurationPortRangeArgs{...} }

type TlsInspectionConfigurationPortRangeArrayOutput added in v0.92.0

type TlsInspectionConfigurationPortRangeArrayOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationPortRangeArrayOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationPortRangeArrayOutput) Index added in v0.92.0

func (TlsInspectionConfigurationPortRangeArrayOutput) ToTlsInspectionConfigurationPortRangeArrayOutput added in v0.92.0

func (o TlsInspectionConfigurationPortRangeArrayOutput) ToTlsInspectionConfigurationPortRangeArrayOutput() TlsInspectionConfigurationPortRangeArrayOutput

func (TlsInspectionConfigurationPortRangeArrayOutput) ToTlsInspectionConfigurationPortRangeArrayOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationPortRangeArrayOutput) ToTlsInspectionConfigurationPortRangeArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationPortRangeArrayOutput

type TlsInspectionConfigurationPortRangeInput added in v0.92.0

type TlsInspectionConfigurationPortRangeInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationPortRangeOutput() TlsInspectionConfigurationPortRangeOutput
	ToTlsInspectionConfigurationPortRangeOutputWithContext(context.Context) TlsInspectionConfigurationPortRangeOutput
}

TlsInspectionConfigurationPortRangeInput is an input type that accepts TlsInspectionConfigurationPortRangeArgs and TlsInspectionConfigurationPortRangeOutput values. You can construct a concrete instance of `TlsInspectionConfigurationPortRangeInput` via:

TlsInspectionConfigurationPortRangeArgs{...}

type TlsInspectionConfigurationPortRangeOutput added in v0.92.0

type TlsInspectionConfigurationPortRangeOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationPortRangeOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationPortRangeOutput) FromPort added in v0.92.0

The lower limit of the port range. This must be less than or equal to the `ToPort` specification.

func (TlsInspectionConfigurationPortRangeOutput) ToPort added in v0.92.0

The upper limit of the port range. This must be greater than or equal to the `FromPort` specification.

func (TlsInspectionConfigurationPortRangeOutput) ToTlsInspectionConfigurationPortRangeOutput added in v0.92.0

func (o TlsInspectionConfigurationPortRangeOutput) ToTlsInspectionConfigurationPortRangeOutput() TlsInspectionConfigurationPortRangeOutput

func (TlsInspectionConfigurationPortRangeOutput) ToTlsInspectionConfigurationPortRangeOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationPortRangeOutput) ToTlsInspectionConfigurationPortRangeOutputWithContext(ctx context.Context) TlsInspectionConfigurationPortRangeOutput

type TlsInspectionConfigurationRevokedStatusAction added in v0.92.0

type TlsInspectionConfigurationRevokedStatusAction string

func (TlsInspectionConfigurationRevokedStatusAction) ElementType added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusAction) ToStringOutput added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusAction) ToStringOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusAction) ToStringPtrOutput added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusAction) ToStringPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionOutput added in v0.92.0

func (e TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionOutput() TlsInspectionConfigurationRevokedStatusActionOutput

func (TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionOutputWithContext added in v0.92.0

func (e TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionOutputWithContext(ctx context.Context) TlsInspectionConfigurationRevokedStatusActionOutput

func (TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionPtrOutput added in v0.92.0

func (e TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionPtrOutput() TlsInspectionConfigurationRevokedStatusActionPtrOutput

func (TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionPtrOutputWithContext added in v0.92.0

func (e TlsInspectionConfigurationRevokedStatusAction) ToTlsInspectionConfigurationRevokedStatusActionPtrOutputWithContext(ctx context.Context) TlsInspectionConfigurationRevokedStatusActionPtrOutput

type TlsInspectionConfigurationRevokedStatusActionInput added in v0.92.0

type TlsInspectionConfigurationRevokedStatusActionInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationRevokedStatusActionOutput() TlsInspectionConfigurationRevokedStatusActionOutput
	ToTlsInspectionConfigurationRevokedStatusActionOutputWithContext(context.Context) TlsInspectionConfigurationRevokedStatusActionOutput
}

TlsInspectionConfigurationRevokedStatusActionInput is an input type that accepts values of the TlsInspectionConfigurationRevokedStatusAction enum A concrete instance of `TlsInspectionConfigurationRevokedStatusActionInput` can be one of the following:

TlsInspectionConfigurationRevokedStatusActionPass
TlsInspectionConfigurationRevokedStatusActionDrop
TlsInspectionConfigurationRevokedStatusActionReject

type TlsInspectionConfigurationRevokedStatusActionOutput added in v0.92.0

type TlsInspectionConfigurationRevokedStatusActionOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationRevokedStatusActionOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToStringOutput added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToStringOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToStringPtrOutput added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToStringPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionOutput added in v0.92.0

func (o TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionOutput() TlsInspectionConfigurationRevokedStatusActionOutput

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionOutputWithContext(ctx context.Context) TlsInspectionConfigurationRevokedStatusActionOutput

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionPtrOutput added in v0.92.0

func (o TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionPtrOutput() TlsInspectionConfigurationRevokedStatusActionPtrOutput

func (TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionPtrOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationRevokedStatusActionOutput) ToTlsInspectionConfigurationRevokedStatusActionPtrOutputWithContext(ctx context.Context) TlsInspectionConfigurationRevokedStatusActionPtrOutput

type TlsInspectionConfigurationRevokedStatusActionPtrInput added in v0.92.0

type TlsInspectionConfigurationRevokedStatusActionPtrInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationRevokedStatusActionPtrOutput() TlsInspectionConfigurationRevokedStatusActionPtrOutput
	ToTlsInspectionConfigurationRevokedStatusActionPtrOutputWithContext(context.Context) TlsInspectionConfigurationRevokedStatusActionPtrOutput
}

func TlsInspectionConfigurationRevokedStatusActionPtr added in v0.92.0

func TlsInspectionConfigurationRevokedStatusActionPtr(v string) TlsInspectionConfigurationRevokedStatusActionPtrInput

type TlsInspectionConfigurationRevokedStatusActionPtrOutput added in v0.92.0

type TlsInspectionConfigurationRevokedStatusActionPtrOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationRevokedStatusActionPtrOutput) Elem added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionPtrOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionPtrOutput) ToStringPtrOutput added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionPtrOutput) ToStringPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionPtrOutput) ToTlsInspectionConfigurationRevokedStatusActionPtrOutput added in v0.92.0

func (TlsInspectionConfigurationRevokedStatusActionPtrOutput) ToTlsInspectionConfigurationRevokedStatusActionPtrOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationRevokedStatusActionPtrOutput) ToTlsInspectionConfigurationRevokedStatusActionPtrOutputWithContext(ctx context.Context) TlsInspectionConfigurationRevokedStatusActionPtrOutput

type TlsInspectionConfigurationServerCertificate added in v0.92.0

type TlsInspectionConfigurationServerCertificate struct {
	// The Amazon Resource Name (ARN) of the AWS Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection.
	ResourceArn *string `pulumi:"resourceArn"`
}

type TlsInspectionConfigurationServerCertificateArgs added in v0.92.0

type TlsInspectionConfigurationServerCertificateArgs struct {
	// The Amazon Resource Name (ARN) of the AWS Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection.
	ResourceArn pulumi.StringPtrInput `pulumi:"resourceArn"`
}

func (TlsInspectionConfigurationServerCertificateArgs) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateArgs) ToTlsInspectionConfigurationServerCertificateOutput added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateArgs) ToTlsInspectionConfigurationServerCertificateOutput() TlsInspectionConfigurationServerCertificateOutput

func (TlsInspectionConfigurationServerCertificateArgs) ToTlsInspectionConfigurationServerCertificateOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateArgs) ToTlsInspectionConfigurationServerCertificateOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateOutput

type TlsInspectionConfigurationServerCertificateArray added in v0.92.0

type TlsInspectionConfigurationServerCertificateArray []TlsInspectionConfigurationServerCertificateInput

func (TlsInspectionConfigurationServerCertificateArray) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateArray) ToTlsInspectionConfigurationServerCertificateArrayOutput added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateArray) ToTlsInspectionConfigurationServerCertificateArrayOutput() TlsInspectionConfigurationServerCertificateArrayOutput

func (TlsInspectionConfigurationServerCertificateArray) ToTlsInspectionConfigurationServerCertificateArrayOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateArray) ToTlsInspectionConfigurationServerCertificateArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateArrayOutput

type TlsInspectionConfigurationServerCertificateArrayInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateArrayInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateArrayOutput() TlsInspectionConfigurationServerCertificateArrayOutput
	ToTlsInspectionConfigurationServerCertificateArrayOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateArrayOutput
}

TlsInspectionConfigurationServerCertificateArrayInput is an input type that accepts TlsInspectionConfigurationServerCertificateArray and TlsInspectionConfigurationServerCertificateArrayOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateArrayInput` via:

TlsInspectionConfigurationServerCertificateArray{ TlsInspectionConfigurationServerCertificateArgs{...} }

type TlsInspectionConfigurationServerCertificateArrayOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateArrayOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationServerCertificateArrayOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateArrayOutput) Index added in v0.92.0

func (TlsInspectionConfigurationServerCertificateArrayOutput) ToTlsInspectionConfigurationServerCertificateArrayOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateArrayOutput) ToTlsInspectionConfigurationServerCertificateArrayOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationServerCertificateArrayOutput) ToTlsInspectionConfigurationServerCertificateArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateArrayOutput

type TlsInspectionConfigurationServerCertificateConfiguration added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfiguration struct {
	// The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within AWS Certificate Manager (ACM) to use for outbound SSL/TLS inspection.
	//
	// The following limitations apply:
	//
	// - You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM.
	// - You can't use certificates issued by AWS Private Certificate Authority .
	//
	// For more information about configuring certificates for outbound inspection, see [Using SSL/TLS certificates with certificates with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html) in the *AWS Network Firewall Developer Guide* .
	//
	// For information about working with certificates in ACM, see [Importing certificates](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *AWS Certificate Manager User Guide* .
	CertificateAuthorityArn *string `pulumi:"certificateAuthorityArn"`
	// When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-servercertificateconfiguration.html) .
	CheckCertificateRevocationStatus *TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusProperties `pulumi:"checkCertificateRevocationStatus"`
	// A list of scopes.
	Scopes []TlsInspectionConfigurationServerCertificateScope `pulumi:"scopes"`
	// The list of server certificates to use for inbound SSL/TLS inspection.
	ServerCertificates []TlsInspectionConfigurationServerCertificate `pulumi:"serverCertificates"`
}

type TlsInspectionConfigurationServerCertificateConfigurationArgs added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationArgs struct {
	// The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within AWS Certificate Manager (ACM) to use for outbound SSL/TLS inspection.
	//
	// The following limitations apply:
	//
	// - You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM.
	// - You can't use certificates issued by AWS Private Certificate Authority .
	//
	// For more information about configuring certificates for outbound inspection, see [Using SSL/TLS certificates with certificates with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html) in the *AWS Network Firewall Developer Guide* .
	//
	// For information about working with certificates in ACM, see [Importing certificates](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *AWS Certificate Manager User Guide* .
	CertificateAuthorityArn pulumi.StringPtrInput `pulumi:"certificateAuthorityArn"`
	// When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-servercertificateconfiguration.html) .
	CheckCertificateRevocationStatus TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrInput `pulumi:"checkCertificateRevocationStatus"`
	// A list of scopes.
	Scopes TlsInspectionConfigurationServerCertificateScopeArrayInput `pulumi:"scopes"`
	// The list of server certificates to use for inbound SSL/TLS inspection.
	ServerCertificates TlsInspectionConfigurationServerCertificateArrayInput `pulumi:"serverCertificates"`
}

func (TlsInspectionConfigurationServerCertificateConfigurationArgs) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationArgs) ToTlsInspectionConfigurationServerCertificateConfigurationOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationArgs) ToTlsInspectionConfigurationServerCertificateConfigurationOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateConfigurationArgs) ToTlsInspectionConfigurationServerCertificateConfigurationOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateConfigurationOutput

type TlsInspectionConfigurationServerCertificateConfigurationArray added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationArray []TlsInspectionConfigurationServerCertificateConfigurationInput

func (TlsInspectionConfigurationServerCertificateConfigurationArray) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationArray) ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationArray) ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateConfigurationArray) ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateConfigurationArrayOutput

type TlsInspectionConfigurationServerCertificateConfigurationArrayInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationArrayInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutput() TlsInspectionConfigurationServerCertificateConfigurationArrayOutput
	ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateConfigurationArrayOutput
}

TlsInspectionConfigurationServerCertificateConfigurationArrayInput is an input type that accepts TlsInspectionConfigurationServerCertificateConfigurationArray and TlsInspectionConfigurationServerCertificateConfigurationArrayOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateConfigurationArrayInput` via:

TlsInspectionConfigurationServerCertificateConfigurationArray{ TlsInspectionConfigurationServerCertificateConfigurationArgs{...} }

type TlsInspectionConfigurationServerCertificateConfigurationArrayOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationArrayOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationServerCertificateConfigurationArrayOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationArrayOutput) Index added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationArrayOutput) ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationArrayOutput) ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationServerCertificateConfigurationArrayOutput) ToTlsInspectionConfigurationServerCertificateConfigurationArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateConfigurationArrayOutput

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusProperties added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusProperties struct {
	RevokedStatusAction *TlsInspectionConfigurationRevokedStatusAction `pulumi:"revokedStatusAction"`
	UnknownStatusAction *TlsInspectionConfigurationUnknownStatusAction `pulumi:"unknownStatusAction"`
}

When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-servercertificateconfiguration.html) .

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs struct {
	RevokedStatusAction TlsInspectionConfigurationRevokedStatusActionPtrInput `pulumi:"revokedStatusAction"`
	UnknownStatusAction TlsInspectionConfigurationUnknownStatusActionPtrInput `pulumi:"unknownStatusAction"`
}

When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-servercertificateconfiguration.html) .

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutputWithContext added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput() TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput
	ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput
}

TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesInput is an input type that accepts TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs and TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesInput` via:

TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs{...}

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput struct{ *pulumi.OutputState }

When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-servercertificateconfiguration.html) .

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput) RevokedStatusAction added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesOutput) UnknownStatusAction added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput() TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput
	ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput
}

TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrInput is an input type that accepts TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs, TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtr and TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrInput` via:

        TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs{...}

or:

        nil

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput) Elem added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput) RevokedStatusAction added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput) ToTlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesPtrOutput) UnknownStatusAction added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateConfigurationOutput() TlsInspectionConfigurationServerCertificateConfigurationOutput
	ToTlsInspectionConfigurationServerCertificateConfigurationOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateConfigurationOutput
}

TlsInspectionConfigurationServerCertificateConfigurationInput is an input type that accepts TlsInspectionConfigurationServerCertificateConfigurationArgs and TlsInspectionConfigurationServerCertificateConfigurationOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateConfigurationInput` via:

TlsInspectionConfigurationServerCertificateConfigurationArgs{...}

type TlsInspectionConfigurationServerCertificateConfigurationOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateConfigurationOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationServerCertificateConfigurationOutput) CertificateAuthorityArn added in v0.92.0

The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within AWS Certificate Manager (ACM) to use for outbound SSL/TLS inspection.

The following limitations apply:

- You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM. - You can't use certificates issued by AWS Private Certificate Authority .

For more information about configuring certificates for outbound inspection, see [Using SSL/TLS certificates with certificates with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html) in the *AWS Network Firewall Developer Guide* .

For information about working with certificates in ACM, see [Importing certificates](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *AWS Certificate Manager User Guide* .

func (TlsInspectionConfigurationServerCertificateConfigurationOutput) CheckCertificateRevocationStatus added in v0.92.0

When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-servercertificateconfiguration.html) .

func (TlsInspectionConfigurationServerCertificateConfigurationOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationOutput) Scopes added in v0.92.0

A list of scopes.

func (TlsInspectionConfigurationServerCertificateConfigurationOutput) ServerCertificates added in v0.92.0

The list of server certificates to use for inbound SSL/TLS inspection.

func (TlsInspectionConfigurationServerCertificateConfigurationOutput) ToTlsInspectionConfigurationServerCertificateConfigurationOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateConfigurationOutput) ToTlsInspectionConfigurationServerCertificateConfigurationOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationServerCertificateConfigurationOutput) ToTlsInspectionConfigurationServerCertificateConfigurationOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateConfigurationOutput

type TlsInspectionConfigurationServerCertificateInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateOutput() TlsInspectionConfigurationServerCertificateOutput
	ToTlsInspectionConfigurationServerCertificateOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateOutput
}

TlsInspectionConfigurationServerCertificateInput is an input type that accepts TlsInspectionConfigurationServerCertificateArgs and TlsInspectionConfigurationServerCertificateOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateInput` via:

TlsInspectionConfigurationServerCertificateArgs{...}

type TlsInspectionConfigurationServerCertificateOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationServerCertificateOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateOutput) ResourceArn added in v0.92.0

The Amazon Resource Name (ARN) of the AWS Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection.

func (TlsInspectionConfigurationServerCertificateOutput) ToTlsInspectionConfigurationServerCertificateOutput added in v0.92.0

func (o TlsInspectionConfigurationServerCertificateOutput) ToTlsInspectionConfigurationServerCertificateOutput() TlsInspectionConfigurationServerCertificateOutput

func (TlsInspectionConfigurationServerCertificateOutput) ToTlsInspectionConfigurationServerCertificateOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationServerCertificateOutput) ToTlsInspectionConfigurationServerCertificateOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateOutput

type TlsInspectionConfigurationServerCertificateScope added in v0.92.0

type TlsInspectionConfigurationServerCertificateScope struct {
	// The destination ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any destination port.
	//
	// You can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` .
	DestinationPorts []TlsInspectionConfigurationPortRange `pulumi:"destinationPorts"`
	// The destination IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this
	// matches with any destination address.
	Destinations []TlsInspectionConfigurationAddress `pulumi:"destinations"`
	// The protocols to decrypt for inspection, specified using each protocol's assigned internet protocol number
	// (IANA). Network Firewall currently supports only TCP.
	Protocols []int `pulumi:"protocols"`
	// The source ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any source port.
	//
	// You can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` .
	SourcePorts []TlsInspectionConfigurationPortRange `pulumi:"sourcePorts"`
	// The source IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this
	// matches with any source address.
	Sources []TlsInspectionConfigurationAddress `pulumi:"sources"`
}

type TlsInspectionConfigurationServerCertificateScopeArgs added in v0.92.0

type TlsInspectionConfigurationServerCertificateScopeArgs struct {
	// The destination ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any destination port.
	//
	// You can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` .
	DestinationPorts TlsInspectionConfigurationPortRangeArrayInput `pulumi:"destinationPorts"`
	// The destination IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this
	// matches with any destination address.
	Destinations TlsInspectionConfigurationAddressArrayInput `pulumi:"destinations"`
	// The protocols to decrypt for inspection, specified using each protocol's assigned internet protocol number
	// (IANA). Network Firewall currently supports only TCP.
	Protocols pulumi.IntArrayInput `pulumi:"protocols"`
	// The source ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any source port.
	//
	// You can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` .
	SourcePorts TlsInspectionConfigurationPortRangeArrayInput `pulumi:"sourcePorts"`
	// The source IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this
	// matches with any source address.
	Sources TlsInspectionConfigurationAddressArrayInput `pulumi:"sources"`
}

func (TlsInspectionConfigurationServerCertificateScopeArgs) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateScopeArgs) ToTlsInspectionConfigurationServerCertificateScopeOutput added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateScopeArgs) ToTlsInspectionConfigurationServerCertificateScopeOutput() TlsInspectionConfigurationServerCertificateScopeOutput

func (TlsInspectionConfigurationServerCertificateScopeArgs) ToTlsInspectionConfigurationServerCertificateScopeOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateScopeArgs) ToTlsInspectionConfigurationServerCertificateScopeOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateScopeOutput

type TlsInspectionConfigurationServerCertificateScopeArray added in v0.92.0

type TlsInspectionConfigurationServerCertificateScopeArray []TlsInspectionConfigurationServerCertificateScopeInput

func (TlsInspectionConfigurationServerCertificateScopeArray) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateScopeArray) ToTlsInspectionConfigurationServerCertificateScopeArrayOutput added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateScopeArray) ToTlsInspectionConfigurationServerCertificateScopeArrayOutput() TlsInspectionConfigurationServerCertificateScopeArrayOutput

func (TlsInspectionConfigurationServerCertificateScopeArray) ToTlsInspectionConfigurationServerCertificateScopeArrayOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationServerCertificateScopeArray) ToTlsInspectionConfigurationServerCertificateScopeArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateScopeArrayOutput

type TlsInspectionConfigurationServerCertificateScopeArrayInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateScopeArrayInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateScopeArrayOutput() TlsInspectionConfigurationServerCertificateScopeArrayOutput
	ToTlsInspectionConfigurationServerCertificateScopeArrayOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateScopeArrayOutput
}

TlsInspectionConfigurationServerCertificateScopeArrayInput is an input type that accepts TlsInspectionConfigurationServerCertificateScopeArray and TlsInspectionConfigurationServerCertificateScopeArrayOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateScopeArrayInput` via:

TlsInspectionConfigurationServerCertificateScopeArray{ TlsInspectionConfigurationServerCertificateScopeArgs{...} }

type TlsInspectionConfigurationServerCertificateScopeArrayOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateScopeArrayOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationServerCertificateScopeArrayOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateScopeArrayOutput) Index added in v0.92.0

func (TlsInspectionConfigurationServerCertificateScopeArrayOutput) ToTlsInspectionConfigurationServerCertificateScopeArrayOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateScopeArrayOutput) ToTlsInspectionConfigurationServerCertificateScopeArrayOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationServerCertificateScopeArrayOutput) ToTlsInspectionConfigurationServerCertificateScopeArrayOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateScopeArrayOutput

type TlsInspectionConfigurationServerCertificateScopeInput added in v0.92.0

type TlsInspectionConfigurationServerCertificateScopeInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationServerCertificateScopeOutput() TlsInspectionConfigurationServerCertificateScopeOutput
	ToTlsInspectionConfigurationServerCertificateScopeOutputWithContext(context.Context) TlsInspectionConfigurationServerCertificateScopeOutput
}

TlsInspectionConfigurationServerCertificateScopeInput is an input type that accepts TlsInspectionConfigurationServerCertificateScopeArgs and TlsInspectionConfigurationServerCertificateScopeOutput values. You can construct a concrete instance of `TlsInspectionConfigurationServerCertificateScopeInput` via:

TlsInspectionConfigurationServerCertificateScopeArgs{...}

type TlsInspectionConfigurationServerCertificateScopeOutput added in v0.92.0

type TlsInspectionConfigurationServerCertificateScopeOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationServerCertificateScopeOutput) DestinationPorts added in v0.92.0

The destination ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any destination port.

You can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` .

func (TlsInspectionConfigurationServerCertificateScopeOutput) Destinations added in v0.92.0

The destination IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this matches with any destination address.

func (TlsInspectionConfigurationServerCertificateScopeOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationServerCertificateScopeOutput) Protocols added in v0.92.0

The protocols to decrypt for inspection, specified using each protocol's assigned internet protocol number (IANA). Network Firewall currently supports only TCP.

func (TlsInspectionConfigurationServerCertificateScopeOutput) SourcePorts added in v0.92.0

The source ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any source port.

You can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` .

func (TlsInspectionConfigurationServerCertificateScopeOutput) Sources added in v0.92.0

The source IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this matches with any source address.

func (TlsInspectionConfigurationServerCertificateScopeOutput) ToTlsInspectionConfigurationServerCertificateScopeOutput added in v0.92.0

func (TlsInspectionConfigurationServerCertificateScopeOutput) ToTlsInspectionConfigurationServerCertificateScopeOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationServerCertificateScopeOutput) ToTlsInspectionConfigurationServerCertificateScopeOutputWithContext(ctx context.Context) TlsInspectionConfigurationServerCertificateScopeOutput

type TlsInspectionConfigurationState added in v0.92.0

type TlsInspectionConfigurationState struct {
}

func (TlsInspectionConfigurationState) ElementType added in v0.92.0

type TlsInspectionConfigurationTag added in v0.92.0

type TlsInspectionConfigurationTag struct {
	// The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive.
	Key string `pulumi:"key"`
	// The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive.
	Value string `pulumi:"value"`
}

type TlsInspectionConfigurationTlsInspectionConfiguration added in v0.92.0

type TlsInspectionConfigurationTlsInspectionConfiguration struct {
	// Lists the server certificate configurations that are associated with the TLS configuration.
	ServerCertificateConfigurations []TlsInspectionConfigurationServerCertificateConfiguration `pulumi:"serverCertificateConfigurations"`
}

type TlsInspectionConfigurationTlsInspectionConfigurationArgs added in v0.92.0

type TlsInspectionConfigurationTlsInspectionConfigurationArgs struct {
	// Lists the server certificate configurations that are associated with the TLS configuration.
	ServerCertificateConfigurations TlsInspectionConfigurationServerCertificateConfigurationArrayInput `pulumi:"serverCertificateConfigurations"`
}

func (TlsInspectionConfigurationTlsInspectionConfigurationArgs) ElementType added in v0.92.0

func (TlsInspectionConfigurationTlsInspectionConfigurationArgs) ToTlsInspectionConfigurationTlsInspectionConfigurationOutput added in v0.92.0

func (TlsInspectionConfigurationTlsInspectionConfigurationArgs) ToTlsInspectionConfigurationTlsInspectionConfigurationOutputWithContext added in v0.92.0

func (i TlsInspectionConfigurationTlsInspectionConfigurationArgs) ToTlsInspectionConfigurationTlsInspectionConfigurationOutputWithContext(ctx context.Context) TlsInspectionConfigurationTlsInspectionConfigurationOutput

type TlsInspectionConfigurationTlsInspectionConfigurationInput added in v0.92.0

type TlsInspectionConfigurationTlsInspectionConfigurationInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationTlsInspectionConfigurationOutput() TlsInspectionConfigurationTlsInspectionConfigurationOutput
	ToTlsInspectionConfigurationTlsInspectionConfigurationOutputWithContext(context.Context) TlsInspectionConfigurationTlsInspectionConfigurationOutput
}

TlsInspectionConfigurationTlsInspectionConfigurationInput is an input type that accepts TlsInspectionConfigurationTlsInspectionConfigurationArgs and TlsInspectionConfigurationTlsInspectionConfigurationOutput values. You can construct a concrete instance of `TlsInspectionConfigurationTlsInspectionConfigurationInput` via:

TlsInspectionConfigurationTlsInspectionConfigurationArgs{...}

type TlsInspectionConfigurationTlsInspectionConfigurationOutput added in v0.92.0

type TlsInspectionConfigurationTlsInspectionConfigurationOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationTlsInspectionConfigurationOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationTlsInspectionConfigurationOutput) ServerCertificateConfigurations added in v0.92.0

Lists the server certificate configurations that are associated with the TLS configuration.

func (TlsInspectionConfigurationTlsInspectionConfigurationOutput) ToTlsInspectionConfigurationTlsInspectionConfigurationOutput added in v0.92.0

func (TlsInspectionConfigurationTlsInspectionConfigurationOutput) ToTlsInspectionConfigurationTlsInspectionConfigurationOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationTlsInspectionConfigurationOutput) ToTlsInspectionConfigurationTlsInspectionConfigurationOutputWithContext(ctx context.Context) TlsInspectionConfigurationTlsInspectionConfigurationOutput

type TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput added in v0.92.0

type TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput) Elem added in v0.92.0

func (TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput) ServerCertificateConfigurations added in v0.92.0

Lists the server certificate configurations that are associated with the TLS configuration.

func (TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput) ToTlsInspectionConfigurationTlsInspectionConfigurationPtrOutput added in v0.92.0

func (TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput) ToTlsInspectionConfigurationTlsInspectionConfigurationPtrOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput) ToTlsInspectionConfigurationTlsInspectionConfigurationPtrOutputWithContext(ctx context.Context) TlsInspectionConfigurationTlsInspectionConfigurationPtrOutput

type TlsInspectionConfigurationUnknownStatusAction added in v0.92.0

type TlsInspectionConfigurationUnknownStatusAction string

func (TlsInspectionConfigurationUnknownStatusAction) ElementType added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusAction) ToStringOutput added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusAction) ToStringOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusAction) ToStringPtrOutput added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusAction) ToStringPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionOutput added in v0.92.0

func (e TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionOutput() TlsInspectionConfigurationUnknownStatusActionOutput

func (TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionOutputWithContext added in v0.92.0

func (e TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionOutputWithContext(ctx context.Context) TlsInspectionConfigurationUnknownStatusActionOutput

func (TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionPtrOutput added in v0.92.0

func (e TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionPtrOutput() TlsInspectionConfigurationUnknownStatusActionPtrOutput

func (TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionPtrOutputWithContext added in v0.92.0

func (e TlsInspectionConfigurationUnknownStatusAction) ToTlsInspectionConfigurationUnknownStatusActionPtrOutputWithContext(ctx context.Context) TlsInspectionConfigurationUnknownStatusActionPtrOutput

type TlsInspectionConfigurationUnknownStatusActionInput added in v0.92.0

type TlsInspectionConfigurationUnknownStatusActionInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationUnknownStatusActionOutput() TlsInspectionConfigurationUnknownStatusActionOutput
	ToTlsInspectionConfigurationUnknownStatusActionOutputWithContext(context.Context) TlsInspectionConfigurationUnknownStatusActionOutput
}

TlsInspectionConfigurationUnknownStatusActionInput is an input type that accepts values of the TlsInspectionConfigurationUnknownStatusAction enum A concrete instance of `TlsInspectionConfigurationUnknownStatusActionInput` can be one of the following:

TlsInspectionConfigurationUnknownStatusActionPass
TlsInspectionConfigurationUnknownStatusActionDrop
TlsInspectionConfigurationUnknownStatusActionReject

type TlsInspectionConfigurationUnknownStatusActionOutput added in v0.92.0

type TlsInspectionConfigurationUnknownStatusActionOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationUnknownStatusActionOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToStringOutput added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToStringOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToStringPtrOutput added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToStringPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionOutput added in v0.92.0

func (o TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionOutput() TlsInspectionConfigurationUnknownStatusActionOutput

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionOutputWithContext(ctx context.Context) TlsInspectionConfigurationUnknownStatusActionOutput

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionPtrOutput added in v0.92.0

func (o TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionPtrOutput() TlsInspectionConfigurationUnknownStatusActionPtrOutput

func (TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionPtrOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationUnknownStatusActionOutput) ToTlsInspectionConfigurationUnknownStatusActionPtrOutputWithContext(ctx context.Context) TlsInspectionConfigurationUnknownStatusActionPtrOutput

type TlsInspectionConfigurationUnknownStatusActionPtrInput added in v0.92.0

type TlsInspectionConfigurationUnknownStatusActionPtrInput interface {
	pulumi.Input

	ToTlsInspectionConfigurationUnknownStatusActionPtrOutput() TlsInspectionConfigurationUnknownStatusActionPtrOutput
	ToTlsInspectionConfigurationUnknownStatusActionPtrOutputWithContext(context.Context) TlsInspectionConfigurationUnknownStatusActionPtrOutput
}

func TlsInspectionConfigurationUnknownStatusActionPtr added in v0.92.0

func TlsInspectionConfigurationUnknownStatusActionPtr(v string) TlsInspectionConfigurationUnknownStatusActionPtrInput

type TlsInspectionConfigurationUnknownStatusActionPtrOutput added in v0.92.0

type TlsInspectionConfigurationUnknownStatusActionPtrOutput struct{ *pulumi.OutputState }

func (TlsInspectionConfigurationUnknownStatusActionPtrOutput) Elem added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionPtrOutput) ElementType added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionPtrOutput) ToStringPtrOutput added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionPtrOutput) ToStringPtrOutputWithContext added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionPtrOutput) ToTlsInspectionConfigurationUnknownStatusActionPtrOutput added in v0.92.0

func (TlsInspectionConfigurationUnknownStatusActionPtrOutput) ToTlsInspectionConfigurationUnknownStatusActionPtrOutputWithContext added in v0.92.0

func (o TlsInspectionConfigurationUnknownStatusActionPtrOutput) ToTlsInspectionConfigurationUnknownStatusActionPtrOutputWithContext(ctx context.Context) TlsInspectionConfigurationUnknownStatusActionPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL