Interface Firewall.Builder
- All Superinterfaces:
Buildable
,CopyableBuilder<Firewall.Builder,
,Firewall> SdkBuilder<Firewall.Builder,
,Firewall> SdkPojo
- Enclosing class:
Firewall
-
Method Summary
Modifier and TypeMethodDescriptionavailabilityZoneChangeProtection
(Boolean availabilityZoneChangeProtection) A setting indicating whether the firewall is protected against changes to its Availability Zone configuration.availabilityZoneMappings
(Collection<AvailabilityZoneMapping> availabilityZoneMappings) The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall.availabilityZoneMappings
(Consumer<AvailabilityZoneMapping.Builder>... availabilityZoneMappings) The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall.availabilityZoneMappings
(AvailabilityZoneMapping... availabilityZoneMappings) The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall.deleteProtection
(Boolean deleteProtection) A flag indicating whether it is possible to delete the firewall.description
(String description) A description of the firewall.enabledAnalysisTypes
(Collection<EnabledAnalysisType> enabledAnalysisTypes) An optional setting indicating the specific traffic analysis types to enable on the firewall.enabledAnalysisTypes
(EnabledAnalysisType... enabledAnalysisTypes) An optional setting indicating the specific traffic analysis types to enable on the firewall.enabledAnalysisTypesWithStrings
(String... enabledAnalysisTypes) An optional setting indicating the specific traffic analysis types to enable on the firewall.enabledAnalysisTypesWithStrings
(Collection<String> enabledAnalysisTypes) An optional setting indicating the specific traffic analysis types to enable on the firewall.default Firewall.Builder
encryptionConfiguration
(Consumer<EncryptionConfiguration.Builder> encryptionConfiguration) A complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall.encryptionConfiguration
(EncryptionConfiguration encryptionConfiguration) A complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall.firewallArn
(String firewallArn) The Amazon Resource Name (ARN) of the firewall.firewallId
(String firewallId) The unique identifier for the firewall.firewallName
(String firewallName) The descriptive name of the firewall.firewallPolicyArn
(String firewallPolicyArn) The Amazon Resource Name (ARN) of the firewall policy.firewallPolicyChangeProtection
(Boolean firewallPolicyChangeProtection) A setting indicating whether the firewall is protected against a change to the firewall policy association.numberOfAssociations
(Integer numberOfAssociations) The number ofVpcEndpointAssociation
resources that use this firewall.subnetChangeProtection
(Boolean subnetChangeProtection) A setting indicating whether the firewall is protected against changes to the subnet associations.subnetMappings
(Collection<SubnetMapping> subnetMappings) The primary public subnets that Network Firewall is using for the firewall.subnetMappings
(Consumer<SubnetMapping.Builder>... subnetMappings) The primary public subnets that Network Firewall is using for the firewall.subnetMappings
(SubnetMapping... subnetMappings) The primary public subnets that Network Firewall is using for the firewall.tags
(Collection<Tag> tags) tags
(Consumer<Tag.Builder>... tags) This is a convenience method that creates an instance of theTag.Builder
avoiding the need to create one manually viaTag.builder()
.transitGatewayId
(String transitGatewayId) The unique identifier of the transit gateway associated with this firewall.transitGatewayOwnerAccountId
(String transitGatewayOwnerAccountId) The Amazon Web Services account ID that owns the transit gateway.The unique identifier of the VPC where the firewall is in use.Methods inherited from interface software.amazon.awssdk.utils.builder.CopyableBuilder
copy
Methods inherited from interface software.amazon.awssdk.utils.builder.SdkBuilder
applyMutation, build
Methods inherited from interface software.amazon.awssdk.core.SdkPojo
equalsBySdkFields, sdkFieldNameToField, sdkFields
-
Method Details
-
firewallName
The descriptive name of the firewall. You can't change the name of a firewall after you create it.
- Parameters:
firewallName
- The descriptive name of the firewall. You can't change the name of a firewall after you create it.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
firewallArn
The Amazon Resource Name (ARN) of the firewall.
- Parameters:
firewallArn
- The Amazon Resource Name (ARN) of the firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
firewallPolicyArn
The Amazon Resource Name (ARN) of the firewall policy.
The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.
- Parameters:
firewallPolicyArn
- The Amazon Resource Name (ARN) of the firewall policy.The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.
- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
vpcId
The unique identifier of the VPC where the firewall is in use.
- Parameters:
vpcId
- The unique identifier of the VPC where the firewall is in use.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
subnetMappings
The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.
These subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.
In addition to these subnets, you can define other endpoints for the firewall in
VpcEndpointAssociation
resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.- Parameters:
subnetMappings
- The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.These subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.
In addition to these subnets, you can define other endpoints for the firewall in
VpcEndpointAssociation
resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
subnetMappings
The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.
These subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.
In addition to these subnets, you can define other endpoints for the firewall in
VpcEndpointAssociation
resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.- Parameters:
subnetMappings
- The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.These subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.
In addition to these subnets, you can define other endpoints for the firewall in
VpcEndpointAssociation
resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
subnetMappings
The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.
These subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.
In addition to these subnets, you can define other endpoints for the firewall in
This is a convenience method that creates an instance of theVpcEndpointAssociation
resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.SubnetMapping.Builder
avoiding the need to create one manually viaSubnetMapping.builder()
.When the
Consumer
completes,SdkBuilder.build()
is called immediately and its result is passed tosubnetMappings(List<SubnetMapping>)
.- Parameters:
subnetMappings
- a consumer that will call methods onSubnetMapping.Builder
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
deleteProtection
A flag indicating whether it is possible to delete the firewall. A setting of
TRUE
indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag toTRUE
.- Parameters:
deleteProtection
- A flag indicating whether it is possible to delete the firewall. A setting ofTRUE
indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag toTRUE
.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
subnetChangeProtection
A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to
TRUE
.- Parameters:
subnetChangeProtection
- A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting toTRUE
.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
firewallPolicyChangeProtection
A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to
TRUE
.- Parameters:
firewallPolicyChangeProtection
- A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting toTRUE
.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
description
A description of the firewall.
- Parameters:
description
- A description of the firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
firewallId
The unique identifier for the firewall.
- Parameters:
firewallId
- The unique identifier for the firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
tags
- Parameters:
tags
-- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
tags
- Parameters:
tags
-- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
tags
This is a convenience method that creates an instance of theTag.Builder
avoiding the need to create one manually viaTag.builder()
.When the
Consumer
completes,SdkBuilder.build()
is called immediately and its result is passed totags(List<Tag>)
.- Parameters:
tags
- a consumer that will call methods onTag.Builder
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
encryptionConfiguration
A complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall.
- Parameters:
encryptionConfiguration
- A complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
encryptionConfiguration
default Firewall.Builder encryptionConfiguration(Consumer<EncryptionConfiguration.Builder> encryptionConfiguration) A complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall.
This is a convenience method that creates an instance of theEncryptionConfiguration.Builder
avoiding the need to create one manually viaEncryptionConfiguration.builder()
.When the
Consumer
completes,SdkBuilder.build()
is called immediately and its result is passed toencryptionConfiguration(EncryptionConfiguration)
.- Parameters:
encryptionConfiguration
- a consumer that will call methods onEncryptionConfiguration.Builder
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
numberOfAssociations
The number of
VpcEndpointAssociation
resources that use this firewall.- Parameters:
numberOfAssociations
- The number ofVpcEndpointAssociation
resources that use this firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
enabledAnalysisTypesWithStrings
An optional setting indicating the specific traffic analysis types to enable on the firewall.
- Parameters:
enabledAnalysisTypes
- An optional setting indicating the specific traffic analysis types to enable on the firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
enabledAnalysisTypesWithStrings
An optional setting indicating the specific traffic analysis types to enable on the firewall.
- Parameters:
enabledAnalysisTypes
- An optional setting indicating the specific traffic analysis types to enable on the firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
enabledAnalysisTypes
An optional setting indicating the specific traffic analysis types to enable on the firewall.
- Parameters:
enabledAnalysisTypes
- An optional setting indicating the specific traffic analysis types to enable on the firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
enabledAnalysisTypes
An optional setting indicating the specific traffic analysis types to enable on the firewall.
- Parameters:
enabledAnalysisTypes
- An optional setting indicating the specific traffic analysis types to enable on the firewall.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
transitGatewayId
The unique identifier of the transit gateway associated with this firewall. This field is only present for transit gateway-attached firewalls.
- Parameters:
transitGatewayId
- The unique identifier of the transit gateway associated with this firewall. This field is only present for transit gateway-attached firewalls.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
transitGatewayOwnerAccountId
The Amazon Web Services account ID that owns the transit gateway. This may be different from the firewall owner's account ID when using a shared transit gateway.
- Parameters:
transitGatewayOwnerAccountId
- The Amazon Web Services account ID that owns the transit gateway. This may be different from the firewall owner's account ID when using a shared transit gateway.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
availabilityZoneMappings
Firewall.Builder availabilityZoneMappings(Collection<AvailabilityZoneMapping> availabilityZoneMappings) The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.
- Parameters:
availabilityZoneMappings
- The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
availabilityZoneMappings
The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.
- Parameters:
availabilityZoneMappings
- The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
availabilityZoneMappings
Firewall.Builder availabilityZoneMappings(Consumer<AvailabilityZoneMapping.Builder>... availabilityZoneMappings) The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.
This is a convenience method that creates an instance of theAvailabilityZoneMapping.Builder
avoiding the need to create one manually viaAvailabilityZoneMapping.builder()
.When the
Consumer
completes,SdkBuilder.build()
is called immediately and its result is passed toavailabilityZoneMappings(List<AvailabilityZoneMapping>)
.- Parameters:
availabilityZoneMappings
- a consumer that will call methods onAvailabilityZoneMapping.Builder
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
availabilityZoneChangeProtection
A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set to
TRUE
, you must first disable this protection before adding or removing Availability Zones.- Parameters:
availabilityZoneChangeProtection
- A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set toTRUE
, you must first disable this protection before adding or removing Availability Zones.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-