GetCoreNetworkPolicyDocumentSegment

data class GetCoreNetworkPolicyDocumentSegment(val allowFilters: List<String>? = null, val denyFilters: List<String>? = null, val description: String? = null, val edgeLocations: List<String>? = null, val isolateAttachments: Boolean? = null, val name: String, val requireAttachmentAcceptance: Boolean? = null) : ConvertibleToJava<GetCoreNetworkPolicyDocumentSegment>

Constructors

Link copied to clipboard
constructor(allowFilters: List<String>? = null, denyFilters: List<String>? = null, description: String? = null, edgeLocations: List<String>? = null, isolateAttachments: Boolean? = null, name: String, requireAttachmentAcceptance: Boolean? = null)

Properties

Link copied to clipboard
val allowFilters: List<String>? = null

List of strings of segment names that explicitly allows only routes from the segments that are listed in the array. Use the allow_filter setting if a segment has a well-defined group of other segments that connectivity should be restricted to. It is applied after routes have been shared in segment_actions. If a segment is listed in allow_filter, attachments between the two segments will have routes if they are also shared in the segment-actions area. For example, you might have a segment named "video-producer" that should only ever share routes with a "video-distributor" segment, no matter how many other share statements are created.

Link copied to clipboard
val denyFilters: List<String>? = null

An array of segments that disallows routes from the segments listed in the array. It is applied only after routes have been shared in segment_actions. If a segment is listed in the deny_filter, attachments between the two segments will never have routes shared across them. For example, you might have a "financial" payment segment that should never share routes with a "development" segment, regardless of how many other share statements are created. Adding the payments segment to the deny-filter parameter prevents any shared routes from being created with other segments.

Link copied to clipboard
val description: String? = null

A user-defined string describing the segment.

Link copied to clipboard
val edgeLocations: List<String>? = null

A list of strings of AWS Region names. Allows you to define a more restrictive set of Regions for a segment. The edge location must be a subset of the locations that are defined for edge_locations in the core_network_configuration.

Link copied to clipboard

This Boolean setting determines whether attachments on the same segment can communicate with each other. If set to true, the only routes available will be either shared routes through the share actions, which are attachments in other segments, or static routes. The default value is false. For example, you might have a segment dedicated to "development" that should never allow VPCs to talk to each other, even if they’re on the same segment. In this example, you would keep the default parameter of false.

Link copied to clipboard

Unique name for a segment. The name is a string used in other parts of the policy document, as well as in the console for metrics and other reference points. Valid characters are a–z, and 0–9.

Link copied to clipboard

This Boolean setting determines whether attachment requests are automatically approved or require acceptance. The default is true, indicating that attachment requests require acceptance. For example, you might use this setting to allow a "sandbox" segment to allow any attachment request so that a core network or attachment administrator does not need to review and approve attachment requests. In this example, require_attachment_acceptance is set to false.

Functions

Link copied to clipboard
open override fun toJava(): GetCoreNetworkPolicyDocumentSegment