Package com.pulumi.aws.fms

Class PolicyArgs

  • public final class PolicyArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • deleteAllPolicyResources

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> deleteAllPolicyResources()
        Returns:
        If true, the request will also perform a clean-up process. Defaults to `true`. More information can be found here [AWS Firewall Manager delete policy](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_DeletePolicy.html)

      • deleteUnusedFmManagedResources

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> deleteUnusedFmManagedResources()
        Returns:
        If true, Firewall Manager will automatically remove protections from resources that leave the policy scope. Defaults to `false`. More information can be found here [AWS Firewall Manager policy contents](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_Policy.html)

      • description

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> description()
        Returns:
        Description of the AWS Network Firewall firewall policy.

      • excludeMap

        public java.util.Optional<com.pulumi.core.Output<PolicyExcludeMapArgs>> excludeMap()
        Returns:
        Map of lists of accounts and OUs to exclude from the policy. See the `excludeMap` block.

      • excludeResourceTags

        public com.pulumi.core.Output<java.lang.Boolean> excludeResourceTags()
        Returns:
        Whether resources with the tags specified in `resourceTags` are excluded from protection. If `true`, tagged resources are not protected by this policy. If `false` and `resourceTags` are populated, resources that contain those tags are protected by this policy.

      • includeMap

        public java.util.Optional<com.pulumi.core.Output<PolicyIncludeMapArgs>> includeMap()
        Returns:
        Map of lists of accounts and OUs to include in the policy. See the `includeMap` block.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        Friendly name of the AWS Firewall Manager Policy.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • remediationEnabled

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> remediationEnabled()
        Returns:
        Whether the policy is automatically applied to resources that already exist in the account.

      • resourceSetIds

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> resourceSetIds()
        Returns:
        Set of resource set IDs associated with the policy.

      • resourceTagLogicalOperator

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> resourceTagLogicalOperator()
        Returns:
        Controls how multiple resource tags are combined: with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag. The valid values are `AND` and `OR`.

      • resourceTags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> resourceTags()
        Returns:
        Map of resource tags that, if present, filter protections on resources based on `excludeResourceTags`.

      • resourceType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> resourceType()
        Returns:
        Resource type to protect. Conflicts with `resourceTypeList`. See the [FMS API Reference](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_Policy.html#fms-Type-Policy-ResourceType) for more information about supported values.

      • resourceTypeLists

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> resourceTypeLists()
        Returns:
        List of resource types to protect. Conflicts with `resourceType`. See the [FMS API Reference](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_Policy.html#fms-Type-Policy-ResourceType) for more information about supported values. Lists with only one element are not supported, instead use `resourceType`.

      • securityServicePolicyData

        public com.pulumi.core.Output<PolicySecurityServicePolicyDataArgs> securityServicePolicyData()
        Returns:
        Objects to include in Security Service Policy Data. See the `securityServicePolicyData` block.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level