Package com.pulumi.aws.fms

Class PolicyArgs

  • public final class PolicyArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • deleteAllPolicyResources

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> deleteAllPolicyResources()
        Returns:
        If true, the request will also perform a clean-up process. Defaults to `true`. More information can be found here [AWS Firewall Manager delete policy](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_DeletePolicy.html)

      • deleteUnusedFmManagedResources

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> deleteUnusedFmManagedResources()
        Returns:
        If true, Firewall Manager will automatically remove protections from resources that leave the policy scope. Defaults to `false`. More information can be found here [AWS Firewall Manager policy contents](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_Policy.html)

      • description

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> description()
        Returns:
        The description of the AWS Network Firewall firewall policy.

      • excludeMap

        public java.util.Optional<com.pulumi.core.Output<PolicyExcludeMapArgs>> excludeMap()
        Returns:
        A map of lists of accounts and OU's to exclude from the policy.

      • excludeResourceTags

        public com.pulumi.core.Output<java.lang.Boolean> excludeResourceTags()
        Returns:
        A boolean value, if true the tags that are specified in the `resource_tags` are not protected by this policy. If set to false and resource_tags are populated, resources that contain tags will be protected by this policy.

      • includeMap

        public java.util.Optional<com.pulumi.core.Output<PolicyIncludeMapArgs>> includeMap()
        Returns:
        A map of lists of accounts and OU's to include in the policy.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        The friendly name of the AWS Firewall Manager Policy.

      • remediationEnabled

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> remediationEnabled()
        Returns:
        A boolean value, indicates if the policy should automatically applied to resources that already exist in the account.

      • resourceSetIds

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> resourceSetIds()

      • resourceTags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> resourceTags()
        Returns:
        A map of resource tags, that if present will filter protections on resources based on the exclude_resource_tags.

      • resourceType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> resourceType()
        Returns:
        A resource type to protect. Conflicts with `resource_type_list`. See the [FMS API Reference](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_Policy.html#fms-Type-Policy-ResourceType) for more information about supported values.

      • resourceTypeLists

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> resourceTypeLists()
        Returns:
        A list of resource types to protect. Conflicts with `resource_type`. See the [FMS API Reference](https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_Policy.html#fms-Type-Policy-ResourceType) for more information about supported values. Lists with only one element are not supported, instead use `resource_type`.

      • securityServicePolicyData

        public com.pulumi.core.Output<PolicySecurityServicePolicyDataArgs> securityServicePolicyData()
        Returns:
        The objects to include in Security Service Policy Data. Documented below.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Key-value mapping of resource tags. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level