FirewallPolicyWithRulesRuleMatchArgs

Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.

Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.

Destination IP address range in CIDR format. Required for EGRESS rules.

Network scope of the traffic destination. Possible values are: INTERNET, INTRA_VPC, NON_INTERNET, VPC_NETWORKS.

Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of destination region codes allowed is 5000.

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.

Pairs of IP protocols and ports that the rule should match. Structure is documented below. The layer4_config block supports:

Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.

Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.

Source IP address range in CIDR format. Required for INGRESS rules.

Networks of the traffic source. It can be either a full or partial url.

Network scope of the traffic source. Possible values are: INTERNET, INTRA_VPC, NON_INTERNET, VPC_NETWORKS.

Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.