PolicySummary
import type { PolicySummary } from "https://aws-api.deno.dev/v0.3/services/fms.ts?docs=full";
Details of the Firewall Manager policy.
§Properties
Indicates whether Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope.
By default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources.
This option is not available for Shield Advanced or WAF Classic policies.
Indicates if the policy should be automatically applied to new resources.
The type of resource protected by or in scope of the policy.
This is in the format shown in the Amazon Web Services Resource Types Reference.
For WAF and Shield Advanced, examples include AWS::ElasticLoadBalancingV2::LoadBalancer
and AWS::CloudFront::Distribution
.
For a security group common policy, valid values are AWS::EC2::NetworkInterface
and AWS::EC2::Instance
.
For a security group content audit policy, valid values are AWS::EC2::SecurityGroup
, AWS::EC2::NetworkInterface
, and AWS::EC2::Instance
.
For a security group usage audit policy, the value is AWS::EC2::SecurityGroup
.
For an Network Firewall policy or DNS Firewall policy, the value is AWS::EC2::VPC
.
The service that the policy is using to protect the resources. This specifies the type of policy that is created, either an WAF policy, a Shield Advanced policy, or a security group policy.