View a markdown version of this page

AWS::NetworkFirewall::Firewall VpcEndpoint - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::NetworkFirewall::Firewall VpcEndpoint

Contains the VPC and subnets for a proxy mode firewall endpoint. You use it in CreateFirewall when NoSourcePreservation is TRUE, to specify where Network Firewall creates the firewall endpoint.

This differs from VpcEndpointAssociation, which defines additional secondary endpoints for a firewall in other VPCs.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "SubnetMappings" : [ SubnetMapping, ... ],
  "VpcId" : String
}

Properties

SubnetMappings

The subnets in which Network Firewall creates the firewall endpoint for a proxy mode firewall. Each subnet must belong to a different Availability Zone in the VPC.

Required: No

Type: Array of SubnetMapping

Update requires: Replacement

VpcId

The unique identifier of the VPC where Network Firewall creates the proxy mode firewall endpoint.

Required: No

Type: String

Pattern: ^vpc-[0-9a-f]+$

Minimum: 1

Maximum: 128

Update requires: Replacement