Package com.pulumi.aws.networkfirewall

Class FirewallArgs

  • public final class FirewallArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • availabilityZoneChangeProtection

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> availabilityZoneChangeProtection()
        Returns:
        A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set to `true`, you must first disable this protection before adding or removing Availability Zones.

      • availabilityZoneMappings

        public java.util.Optional<com.pulumi.core.Output<java.util.List<FirewallAvailabilityZoneMappingArgs>>> availabilityZoneMappings()
        Returns:
        Required when creating a transit gateway-attached firewall. Set of configuration blocks describing the availability availability where you want to create firewall endpoints for a transit gateway-attached firewall.

      • deleteProtection

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> deleteProtection()
        Returns:
        A flag indicating whether the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. Defaults to `false`.

      • description

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> description()
        Returns:
        A friendly description of the firewall.

      • enabledAnalysisTypes

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> enabledAnalysisTypes()
        Returns:
        Set of types for which to collect analysis metrics. See [Reporting on network traffic in Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/reporting.html) for details on how to use the data. Valid values: `TLS_SNI`, `HTTP_HOST`. Defaults to `[]`.

      • encryptionConfiguration

        public java.util.Optional<com.pulumi.core.Output<FirewallEncryptionConfigurationArgs>> encryptionConfiguration()
        Returns:
        KMS encryption configuration settings. See Encryption Configuration below for details.

      • firewallPolicyArn

        public com.pulumi.core.Output<java.lang.String> firewallPolicyArn()
        Returns:
        ARN of the VPC Firewall policy.

      • firewallPolicyChangeProtection

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> firewallPolicyChangeProtection()
        Returns:
        A flag indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. Defaults to `false`.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        A friendly name of the firewall.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • subnetChangeProtection

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> subnetChangeProtection()
        Returns:
        A flag indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. Defaults to `false`.

      • subnetMappings

        public java.util.Optional<com.pulumi.core.Output<java.util.List<FirewallSubnetMappingArgs>>> subnetMappings()
        Returns:
        Required when creating a VPC attached firewall. Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Map of resource tags to associate with the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • transitGatewayId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> transitGatewayId()
        Returns:
        . Required when creating a transit gateway-attached firewall. The unique identifier of the transit gateway to attach to this firewall. You can provide either a transit gateway from your account or one that has been shared with you through AWS Resource Access Manager

      • vpcId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> vpcId()
        Returns:
        Required when creating a VPC attached firewall. The unique identifier of the VPC where AWS Network Firewall should create the firewall.