Package com.pulumi.aws.networkmanager.inputs

Class GetCoreNetworkPolicyDocumentSegment.Builder

    • Method Detail

      • allowFilters

        public GetCoreNetworkPolicyDocumentSegment.Builder allowFilters​(@Nullable
                                                                java.util.List<java.lang.String> allowFilters)
        Parameters:
        allowFilters - List of strings of segment names that explicitly allows only routes from the segments that are listed in the array. Use the `allowFilter` setting if a segment has a well-defined group of other segments that connectivity should be restricted to. It is applied after routes have been shared in `segmentActions`. If a segment is listed in `allowFilter`, attachments between the two segments will have routes if they are also shared in the segment-actions area. For example, you might have a segment named "video-producer" that should only ever share routes with a "video-distributor" segment, no matter how many other share statements are created.
        Returns:
        builder

      • allowFilters

        public GetCoreNetworkPolicyDocumentSegment.Builder allowFilters​(java.lang.String... allowFilters)
        Parameters:
        allowFilters - List of strings of segment names that explicitly allows only routes from the segments that are listed in the array. Use the `allowFilter` setting if a segment has a well-defined group of other segments that connectivity should be restricted to. It is applied after routes have been shared in `segmentActions`. If a segment is listed in `allowFilter`, attachments between the two segments will have routes if they are also shared in the segment-actions area. For example, you might have a segment named "video-producer" that should only ever share routes with a "video-distributor" segment, no matter how many other share statements are created.
        Returns:
        builder

      • denyFilters

        public GetCoreNetworkPolicyDocumentSegment.Builder denyFilters​(@Nullable
                                                               java.util.List<java.lang.String> denyFilters)
        Parameters:
        denyFilters - An array of segments that disallows routes from the segments listed in the array. It is applied only after routes have been shared in `segmentActions`. If a segment is listed in the `denyFilter`, attachments between the two segments will never have routes shared across them. For example, you might have a "financial" payment segment that should never share routes with a "development" segment, regardless of how many other share statements are created. Adding the payments segment to the deny-filter parameter prevents any shared routes from being created with other segments.
        Returns:
        builder

      • denyFilters

        public GetCoreNetworkPolicyDocumentSegment.Builder denyFilters​(java.lang.String... denyFilters)
        Parameters:
        denyFilters - An array of segments that disallows routes from the segments listed in the array. It is applied only after routes have been shared in `segmentActions`. If a segment is listed in the `denyFilter`, attachments between the two segments will never have routes shared across them. For example, you might have a "financial" payment segment that should never share routes with a "development" segment, regardless of how many other share statements are created. Adding the payments segment to the deny-filter parameter prevents any shared routes from being created with other segments.
        Returns:
        builder

      • edgeLocations

        public GetCoreNetworkPolicyDocumentSegment.Builder edgeLocations​(@Nullable
                                                                 java.util.List<java.lang.String> edgeLocations)
        Parameters:
        edgeLocations - A list of strings of AWS Region names. Allows you to define a more restrictive set of Regions for a segment. The edge location must be a subset of the locations that are defined for `edgeLocations` in the `coreNetworkConfiguration`.
        Returns:
        builder

      • edgeLocations

        public GetCoreNetworkPolicyDocumentSegment.Builder edgeLocations​(java.lang.String... edgeLocations)
        Parameters:
        edgeLocations - A list of strings of AWS Region names. Allows you to define a more restrictive set of Regions for a segment. The edge location must be a subset of the locations that are defined for `edgeLocations` in the `coreNetworkConfiguration`.
        Returns:
        builder

      • isolateAttachments

        public GetCoreNetworkPolicyDocumentSegment.Builder isolateAttachments​(@Nullable
                                                                      java.lang.Boolean isolateAttachments)
        Parameters:
        isolateAttachments - This Boolean setting determines whether attachments on the same segment can communicate with each other. If set to `true`, the only routes available will be either shared routes through the share actions, which are attachments in other segments, or static routes. The default value is `false`. For example, you might have a segment dedicated to "development" that should never allow VPCs to talk to each other, even if they’re on the same segment. In this example, you would keep the default parameter of `false`.
        Returns:
        builder

      • name

        public GetCoreNetworkPolicyDocumentSegment.Builder name​(java.lang.String name)
        Parameters:
        name - Unique name for a segment. The name is a string used in other parts of the policy document, as well as in the console for metrics and other reference points. Valid characters are a–z, and 0–9.
        Returns:
        builder

      • requireAttachmentAcceptance

        public GetCoreNetworkPolicyDocumentSegment.Builder requireAttachmentAcceptance​(@Nullable
                                                                               java.lang.Boolean requireAttachmentAcceptance)
        Parameters:
        requireAttachmentAcceptance - This Boolean setting determines whether attachment requests are automatically approved or require acceptance. The default is `true`, indicating that attachment requests require acceptance. For example, you might use this setting to allow a "sandbox" segment to allow any attachment request so that a core network or attachment administrator does not need to review and approve attachment requests. In this example, `requireAttachmentAcceptance` is set to `false`.
        Returns:
        builder