GetCoreNetworkPolicyDocumentSegment constructor

const GetCoreNetworkPolicyDocumentSegment({
  1. Input<List<String>?>? allowFilters,
  2. Input<List<String>?>? denyFilters,
  3. Input<String?>? description,
  4. Input<List<String>?>? edgeLocations,
  5. Input<bool?>? isolateAttachments,
  6. required Input<String> name,
  7. Input<bool?>? requireAttachmentAcceptance,
})

Creates a new GetCoreNetworkPolicyDocumentSegment. allowFilters List of strings of segment names that explicitly allows only routes from the segments that are listed in the array. Use the allowFilter setting if a segment has a well-defined group of other segments that connectivity should be restricted to. It is applied after routes have been shared in segmentActions. If a segment is listed in allowFilter, attachments between the two segments will have routes if they are also shared in the segment-actions area. For example, you might have a segment named "video-producer" that should only ever share routes with a "video-distributor" segment, no matter how many other share statements are created. denyFilters An array of segments that disallows routes from the segments listed in the array. It is applied only after routes have been shared in segmentActions. If a segment is listed in the denyFilter, attachments between the two segments will never have routes shared across them. For example, you might have a "financial" payment segment that should never share routes with a "development" segment, regardless of how many other share statements are created. Adding the payments segment to the deny-filter parameter prevents any shared routes from being created with other segments. description A user-defined string describing the segment. edgeLocations A list of strings of AWS Region names. Allows you to define a more restrictive set of Regions for a segment. The edge location must be a subset of the locations that are defined for edgeLocations in the coreNetworkConfiguration. isolateAttachments This Boolean setting determines whether attachments on the same segment can communicate with each other. If set to true, the only routes available will be either shared routes through the share actions, which are attachments in other segments, or static routes. The default value is false. For example, you might have a segment dedicated to "development" that should never allow VPCs to talk to each other, even if they’re on the same segment. In this example, you would keep the default parameter of false. name Unique name for a segment. The name is a string used in other parts of the policy document, as well as in the console for metrics and other reference points. Valid characters are a–z, and 0–9. requireAttachmentAcceptance This Boolean setting determines whether attachment requests are automatically approved or require acceptance. The default is true, indicating that attachment requests require acceptance. For example, you might use this setting to allow a "sandbox" segment to allow any attachment request so that a core network or attachment administrator does not need to review and approve attachment requests. In this example, requireAttachmentAcceptance is set to false.

Implementation

const GetCoreNetworkPolicyDocumentSegment({
  this.allowFilters,
  this.denyFilters,
  this.description,
  this.edgeLocations,
  this.isolateAttachments,
  required this.name,
  this.requireAttachmentAcceptance,
});