Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
Documentation
data StatefulEngineOptions Source #
Configuration settings for the handling of the stateful rule groups in a firewall policy.
See: newStatefulEngineOptions
smart constructor.
StatefulEngineOptions' | |
|
Instances
newStatefulEngineOptions :: StatefulEngineOptions Source #
Create a value of StatefulEngineOptions
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ruleOrder:StatefulEngineOptions'
, statefulEngineOptions_ruleOrder
- Indicates how to manage the order of stateful rule evaluation for the
policy. By default, Network Firewall leaves the rule evaluation order up
to the Suricata rule processing engine. If you set this to
STRICT_ORDER
, your rules are evaluated in the exact order that you
provide them in the policy. With strict ordering, the rule groups are
evaluated by order of priority, starting from the lowest number, and the
rules in each rule group are processed in the order that they're
defined.
statefulEngineOptions_ruleOrder :: Lens' StatefulEngineOptions (Maybe RuleOrder) Source #
Indicates how to manage the order of stateful rule evaluation for the
policy. By default, Network Firewall leaves the rule evaluation order up
to the Suricata rule processing engine. If you set this to
STRICT_ORDER
, your rules are evaluated in the exact order that you
provide them in the policy. With strict ordering, the rule groups are
evaluated by order of priority, starting from the lowest number, and the
rules in each rule group are processed in the order that they're
defined.