RuleGroupSourceListDetails - AWS Security Hub CSPM
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

RuleGroupSourceListDetails

Stateful inspection criteria for a domain list rule group.

Contents

GeneratedRulesType

Indicates whether to allow or deny access to the domains listed in Targets.

Type: String

Pattern: .*\S.*

Required: No

Targets

The domains that you want to inspect for in your traffic flows. You can provide full domain names, or use the '.' prefix as a wildcard. For example, .example.com matches all domains that end with example.com.

Type: Array of strings

Pattern: .*\S.*

Required: No

TargetTypes

The protocols that you want to inspect. Specify LS_SNI for HTTPS. Specify HTTP_HOST for HTTP. You can specify either or both.

Type: Array of strings

Pattern: .*\S.*

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: