AWS::FMS::Policy NetworkAclEntrySet - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::FMS::Policy NetworkAclEntrySet

The configuration of the first and last rules for the network ACL policy, and the remediation settings for each.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

Properties

FirstEntries

The rules that you want to run first in the Firewall Manager managed network ACLs.

Note

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.

Required: No

Type: Array of NetworkAclEntry

Update requires: No interruption

ForceRemediateForFirstEntries

Applies only when remediation is enabled for the policy as a whole. Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see Remediation for managed network ACLs in the Amazon Firewall Manager Developer Guide.

Required: Yes

Type: Boolean

Update requires: No interruption

ForceRemediateForLastEntries

Applies only when remediation is enabled for the policy as a whole. Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.

If forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see Remediation for managed network ACLs in the Amazon Firewall Manager Developer Guide.

Required: Yes

Type: Boolean

Update requires: No interruption

LastEntries

The rules that you want to run last in the Firewall Manager managed network ACLs.

Note

Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates.

You must specify at least one first entry or one last entry in any network ACL policy.

Required: No

Type: Array of NetworkAclEntry

Update requires: No interruption