software.amazon.awscdk.services.cloudfront

Interface CfnResponseHeadersPolicy.SecurityHeadersConfigProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnResponseHeadersPolicy.SecurityHeadersConfigProperty.Jsii$Proxy

Enclosing class:

CfnResponseHeadersPolicy

@Stability(value=Stable)
public static interface CfnResponseHeadersPolicy.SecurityHeadersConfigProperty
extends software.amazon.jsii.JsiiSerializable

A configuration for a set of security-related HTTP response headers.

CloudFront adds these headers to HTTP responses that it sends for requests that match a cache behavior associated with this response headers policy.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.cloudfront.*;
 SecurityHeadersConfigProperty securityHeadersConfigProperty = SecurityHeadersConfigProperty.builder()
         .contentSecurityPolicy(ContentSecurityPolicyProperty.builder()
                 .contentSecurityPolicy("contentSecurityPolicy")
                 .override(false)
                 .build())
         .contentTypeOptions(ContentTypeOptionsProperty.builder()
                 .override(false)
                 .build())
         .frameOptions(FrameOptionsProperty.builder()
                 .frameOption("frameOption")
                 .override(false)
                 .build())
         .referrerPolicy(ReferrerPolicyProperty.builder()
                 .override(false)
                 .referrerPolicy("referrerPolicy")
                 .build())
         .strictTransportSecurity(StrictTransportSecurityProperty.builder()
                 .accessControlMaxAgeSec(123)
                 .override(false)
                 // the properties below are optional
                 .includeSubdomains(false)
                 .preload(false)
                 .build())
         .xssProtection(XSSProtectionProperty.builder()
                 .override(false)
                 .protection(false)
                 // the properties below are optional
                 .modeBlock(false)
                 .reportUri("reportUri")
                 .build())
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	CfnResponseHeadersPolicy.SecurityHeadersConfigProperty.Builder A builder for CfnResponseHeadersPolicy.SecurityHeadersConfigProperty
static class	CfnResponseHeadersPolicy.SecurityHeadersConfigProperty.Jsii$Proxy An implementation for CfnResponseHeadersPolicy.SecurityHeadersConfigProperty

Method Summary

Modifier and Type	Method and Description
static CfnResponseHeadersPolicy.SecurityHeadersConfigProperty.Builder	builder()
default Object	getContentSecurityPolicy() The policy directives and their values that CloudFront includes as values for the `Content-Security-Policy` HTTP response header.
default Object	getContentTypeOptions() Determines whether CloudFront includes the `X-Content-Type-Options` HTTP response header with its value set to `nosniff` .
default Object	getFrameOptions() Determines whether CloudFront includes the `X-Frame-Options` HTTP response header and the header’s value.
default Object	getReferrerPolicy() Determines whether CloudFront includes the `Referrer-Policy` HTTP response header and the header’s value.
default Object	getStrictTransportSecurity() Determines whether CloudFront includes the `Strict-Transport-Security` HTTP response header and the header’s value.
default Object	getXssProtection() Determines whether CloudFront includes the `X-XSS-Protection` HTTP response header and the header’s value.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getContentSecurityPolicy

@Stability(value=Stable)
 @Nullable
default Object getContentSecurityPolicy()

The policy directives and their values that CloudFront includes as values for the `Content-Security-Policy` HTTP response header.

For more information about the Content-Security-Policy HTTP response header, see Content-Security-Policy in the MDN Web Docs.

getContentTypeOptions

@Stability(value=Stable)
 @Nullable
default Object getContentTypeOptions()

Determines whether CloudFront includes the `X-Content-Type-Options` HTTP response header with its value set to `nosniff` .

For more information about the X-Content-Type-Options HTTP response header, see X-Content-Type-Options in the MDN Web Docs.

getFrameOptions

@Stability(value=Stable)
 @Nullable
default Object getFrameOptions()

Determines whether CloudFront includes the `X-Frame-Options` HTTP response header and the header’s value.

For more information about the X-Frame-Options HTTP response header, see X-Frame-Options in the MDN Web Docs.

getReferrerPolicy

@Stability(value=Stable)
 @Nullable
default Object getReferrerPolicy()

Determines whether CloudFront includes the `Referrer-Policy` HTTP response header and the header’s value.

For more information about the Referrer-Policy HTTP response header, see Referrer-Policy in the MDN Web Docs.

getStrictTransportSecurity

@Stability(value=Stable)
 @Nullable
default Object getStrictTransportSecurity()

Determines whether CloudFront includes the `Strict-Transport-Security` HTTP response header and the header’s value.

For more information about the Strict-Transport-Security HTTP response header, see Strict-Transport-Security in the MDN Web Docs.

getXssProtection

@Stability(value=Stable)
 @Nullable
default Object getXssProtection()

Determines whether CloudFront includes the `X-XSS-Protection` HTTP response header and the header’s value.

For more information about the X-XSS-Protection HTTP response header, see X-XSS-Protection in the MDN Web Docs.

builder

@Stability(value=Stable)
static CfnResponseHeadersPolicy.SecurityHeadersConfigProperty.Builder builder()

Returns:

a CfnResponseHeadersPolicy.SecurityHeadersConfigProperty.Builder of CfnResponseHeadersPolicy.SecurityHeadersConfigProperty