FlowFilter - Amazon Network Firewall
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

FlowFilter

Defines the scope a flow operation. You can use up to 20 filters to configure a single flow operation.

Contents

DestinationAddress

A single IP address specification. This is used in the MatchAttributes source and destination specifications.

Type: Address object

Required: No

DestinationPort

The destination port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 1024.

Pattern: ^.*$

Required: No

Protocols

The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol.

Type: Array of strings

Length Constraints: Minimum length of 1. Maximum length of 12.

Pattern: ^.*$

Required: No

SourceAddress

A single IP address specification. This is used in the MatchAttributes source and destination specifications.

Type: Address object

Required: No

SourcePort

The source port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 1024.

Pattern: ^.*$

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: