AWS::NetworkFirewall::RuleGroup CustomAction - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::NetworkFirewall::RuleGroup CustomAction

An optional, non-standard action to use for stateless packet handling. You can define this in addition to the standard action that you must specify.

You define and name the custom actions that you want to be able to use, and then you reference them by name in your actions settings.

You can use custom actions in the following places:

  • In an AWS::NetworkFirewall::RuleGroup StatelessRulesAndCustomActions. The custom actions are available for use by name inside the StatelessRulesAndCustomActions where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.

  • In an AWS::NetworkFirewall::FirewallPolicy specification, in StatelessCustomActions. The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.


To declare this entity in your Amazon CloudFormation template, use the following syntax:



The custom action associated with the action name.

Required: Yes

Type: ActionDefinition

Update requires: No interruption


The descriptive name of the custom action. You can't change the name of a custom action after you create it.

Required: Yes

Type: String

Pattern: ^[a-zA-Z0-9]+$

Minimum: 1

Maximum: 128

Update requires: No interruption