NetworkFirewallPolicyDescription
The definition of the Amazon Network Firewall firewall policy.
Contents
- StatefulDefaultActions
-
The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.
Valid values of the stateful default action:
-
aws:drop_strict
-
aws:drop_established
-
aws:alert_strict
-
aws:alert_established
Type: Array of strings
Length Constraints: Minimum length of 1. Maximum length of 128.
Pattern:
^[a-zA-Z0-9]+$Required: No
-
- StatefulEngineOptions
-
Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings.
Type: StatefulEngineOptions object
Required: No
- StatefulRuleGroups
-
The stateful rule groups that are used in the Network Firewall firewall policy.
Type: Array of StatefulRuleGroup objects
Required: No
- StatelessCustomActions
-
Names of custom actions that are available for use in the stateless default actions settings.
Type: Array of strings
Length Constraints: Minimum length of 1. Maximum length of 128.
Pattern:
^[a-zA-Z0-9]+$Required: No
- StatelessDefaultActions
-
The actions to take on packets that don't match any of the stateless rule groups.
Type: Array of strings
Length Constraints: Minimum length of 1. Maximum length of 128.
Pattern:
^[a-zA-Z0-9]+$Required: No
- StatelessFragmentDefaultActions
-
The actions to take on packet fragments that don't match any of the stateless rule groups.
Type: Array of strings
Length Constraints: Minimum length of 1. Maximum length of 128.
Pattern:
^[a-zA-Z0-9]+$Required: No
- StatelessRuleGroups
-
The stateless rule groups that are used in the Network Firewall firewall policy.
Type: Array of StatelessRuleGroup objects
Required: No
See Also
For more information about using this API in one of the language-specific Amazon SDKs, see the following: