AWS::NetworkFirewall::RuleGroup RuleOption
Additional settings for a stateful rule.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
Properties
Keyword
-
The Suricata rule option keywords. For Network Firewall, the keyword signature ID (sid) is required in the format
sid:112233
. The sid must be unique within the rule group. For information about Suricata rule option keywords, see Rule options. Required: Yes
Type: String
Pattern:
^.*$
Minimum:
1
Maximum:
128
Update requires: No interruption
Settings
-
The Suricata rule option settings. Settings have zero or more values, and the number of possible settings and required settings depends on the keyword. The format for Settings is
number
. For information about Suricata rule option settings, see Rule options. Required: No
Type: Array of String
Update requires: No interruption