AWS::NetworkFirewall::FirewallPolicy StatelessRuleGroupReference - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::NetworkFirewall::FirewallPolicy StatelessRuleGroupReference

Identifier for a single stateless rule group, used in a firewall policy to refer to the rule group.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Priority" : Integer, "ResourceArn" : String }


Priority: Integer ResourceArn: String



An integer setting that indicates the order in which to run the stateless rule groups in a single AWS::NetworkFirewall::FirewallPolicy. Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.

Required: Yes

Type: Integer

Minimum: 1

Maximum: 65535

Update requires: No interruption


The Amazon Resource Name (ARN) of the stateless rule group.

Required: Yes

Type: String

Pattern: ^(arn:aws.*)$

Minimum: 1

Maximum: 256

Update requires: No interruption