Interface StatefulRule.Builder
- All Superinterfaces:
Buildable
,CopyableBuilder<StatefulRule.Builder,
,StatefulRule> SdkBuilder<StatefulRule.Builder,
,StatefulRule> SdkPojo
- Enclosing class:
StatefulRule
-
Method Summary
Modifier and TypeMethodDescriptionDefines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria.action
(StatefulAction action) Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria.default StatefulRule.Builder
header
(Consumer<Header.Builder> header) The stateful inspection criteria for this rule, used to inspect traffic flows.The stateful inspection criteria for this rule, used to inspect traffic flows.ruleOptions
(Collection<RuleOption> ruleOptions) Additional options for the rule.ruleOptions
(Consumer<RuleOption.Builder>... ruleOptions) Additional options for the rule.ruleOptions
(RuleOption... ruleOptions) Additional options for the rule.Methods inherited from interface software.amazon.awssdk.utils.builder.CopyableBuilder
copy
Methods inherited from interface software.amazon.awssdk.utils.builder.SdkBuilder
applyMutation, build
Methods inherited from interface software.amazon.awssdk.core.SdkPojo
equalsBySdkFields, sdkFields
-
Method Details
-
action
Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
The actions for a stateful rule are defined as follows:
-
PASS - Permits the packets to go to the intended destination.
-
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
-
ALERT - Sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with
ALERT
action, verify in the logs that the rule is filtering as you want, then change the action toDROP
.
- Parameters:
action
- Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.The actions for a stateful rule are defined as follows:
-
PASS - Permits the packets to go to the intended destination.
-
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
-
ALERT - Sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with
ALERT
action, verify in the logs that the rule is filtering as you want, then change the action toDROP
.
-
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
-
action
Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
The actions for a stateful rule are defined as follows:
-
PASS - Permits the packets to go to the intended destination.
-
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
-
ALERT - Sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with
ALERT
action, verify in the logs that the rule is filtering as you want, then change the action toDROP
.
- Parameters:
action
- Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.The actions for a stateful rule are defined as follows:
-
PASS - Permits the packets to go to the intended destination.
-
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
-
ALERT - Sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with
ALERT
action, verify in the logs that the rule is filtering as you want, then change the action toDROP
.
-
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
-
header
The stateful inspection criteria for this rule, used to inspect traffic flows.
- Parameters:
header
- The stateful inspection criteria for this rule, used to inspect traffic flows.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
header
The stateful inspection criteria for this rule, used to inspect traffic flows.
This is a convenience method that creates an instance of theHeader.Builder
avoiding the need to create one manually viaHeader.builder()
.When the
Consumer
completes,SdkBuilder.build()
is called immediately and its result is passed toheader(Header)
.- Parameters:
header
- a consumer that will call methods onHeader.Builder
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
ruleOptions
Additional options for the rule. These are the Suricata
RuleOptions
settings.- Parameters:
ruleOptions
- Additional options for the rule. These are the SuricataRuleOptions
settings.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
ruleOptions
Additional options for the rule. These are the Suricata
RuleOptions
settings.- Parameters:
ruleOptions
- Additional options for the rule. These are the SuricataRuleOptions
settings.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
ruleOptions
Additional options for the rule. These are the Suricata
This is a convenience method that creates an instance of theRuleOptions
settings.RuleOption.Builder
avoiding the need to create one manually viaRuleOption.builder()
.When the
Consumer
completes,SdkBuilder.build()
is called immediately and its result is passed toruleOptions(List<RuleOption>)
.- Parameters:
ruleOptions
- a consumer that will call methods onRuleOption.Builder
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-