Package com.pulumi.aws.networkmanager.inputs

Class GetCoreNetworkPolicyDocumentSegment

  • public final class GetCoreNetworkPolicyDocumentSegment
extends com.pulumi.resources.InvokeArgs

    • Method Detail

      • allowFilters

        public java.util.Optional<java.util.List<java.lang.String>> allowFilters()
        Returns:
        List of strings of segment names that explicitly allows only routes from the segments that are listed in the array. Use the `allowFilter` setting if a segment has a well-defined group of other segments that connectivity should be restricted to. It is applied after routes have been shared in `segmentActions`. If a segment is listed in `allowFilter`, attachments between the two segments will have routes if they are also shared in the segment-actions area. For example, you might have a segment named "video-producer" that should only ever share routes with a "video-distributor" segment, no matter how many other share statements are created.

      • denyFilters

        public java.util.Optional<java.util.List<java.lang.String>> denyFilters()
        Returns:
        An array of segments that disallows routes from the segments listed in the array. It is applied only after routes have been shared in `segmentActions`. If a segment is listed in the `denyFilter`, attachments between the two segments will never have routes shared across them. For example, you might have a "financial" payment segment that should never share routes with a "development" segment, regardless of how many other share statements are created. Adding the payments segment to the deny-filter parameter prevents any shared routes from being created with other segments.

      • description

        public java.util.Optional<java.lang.String> description()
        Returns:
        A user-defined string describing the segment.

      • edgeLocations

        public java.util.Optional<java.util.List<java.lang.String>> edgeLocations()
        Returns:
        A list of strings of AWS Region names. Allows you to define a more restrictive set of Regions for a segment. The edge location must be a subset of the locations that are defined for `edgeLocations` in the `coreNetworkConfiguration`.

      • isolateAttachments

        public java.util.Optional<java.lang.Boolean> isolateAttachments()
        Returns:
        This Boolean setting determines whether attachments on the same segment can communicate with each other. If set to `true`, the only routes available will be either shared routes through the share actions, which are attachments in other segments, or static routes. The default value is `false`. For example, you might have a segment dedicated to "development" that should never allow VPCs to talk to each other, even if they’re on the same segment. In this example, you would keep the default parameter of `false`.

      • name

        public java.lang.String name()
        Returns:
        Unique name for a segment. The name is a string used in other parts of the policy document, as well as in the console for metrics and other reference points. Valid characters are a–z, and 0–9.

      • requireAttachmentAcceptance

        public java.util.Optional<java.lang.Boolean> requireAttachmentAcceptance()
        Returns:
        This Boolean setting determines whether attachment requests are automatically approved or require acceptance. The default is `true`, indicating that attachment requests require acceptance. For example, you might use this setting to allow a "sandbox" segment to allow any attachment request so that a core network or attachment administrator does not need to review and approve attachment requests. In this example, `requireAttachmentAcceptance` is set to `false`.