aws-sdk-networkfirewall 1.101.0 → 1.102.0

data/lib/aws-sdk-networkfirewall/waiters.rb

@@ -0,0 +1,120 @@
+# frozen_string_literal: true
+
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+require 'aws-sdk-core/waiters'
+
+module Aws::NetworkFirewall
+  # Waiters are utility methods that poll for a particular state to occur
+  # on a client. Waiters can fail after a number of attempts at a polling
+  # interval defined for the service client.
+  #
+  # For a list of operations that can be waited for and the
+  # client methods called for each operation, see the table below or the
+  # {Client#wait_until} field documentation for the {Client}.
+  #
+  # # Invoking a Waiter
+  # To invoke a waiter, call #wait_until on a {Client}. The first parameter
+  # is the waiter name, which is specific to the service client and indicates
+  # which operation is being waited for. The second parameter is a hash of
+  # parameters that are passed to the client method called by the waiter,
+  # which varies according to the waiter name.
+  #
+  # # Wait Failures
+  # To catch errors in a waiter, use WaiterFailed,
+  # as shown in the following example.
+  #
+  #     rescue rescue Aws::Waiters::Errors::WaiterFailed => error
+  #       puts "failed waiting for instance running: #{error.message}
+  #     end
+  #
+  # # Configuring a Waiter
+  # Each waiter has a default polling interval and a maximum number of
+  # attempts it will make before returning control to your program.
+  # To set these values, use the `max_attempts` and `delay` parameters
+  # in your `#wait_until` call.
+  # The following example waits for up to 25 seconds, polling every five seconds.
+  #
+  #     client.wait_until(...) do |w|
+  #       w.max_attempts = 5
+  #       w.delay = 5
+  #     end
+  #
+  # To disable wait failures, set the value of either of these parameters
+  # to `nil`.
+  #
+  # # Extending a Waiter
+  # To modify the behavior of waiters, you can register callbacks that are
+  # triggered before each polling attempt and before waiting.
+  #
+  # The following example implements an exponential backoff in a waiter
+  # by doubling the amount of time to wait on every attempt.
+  #
+  #     client.wait_until(...) do |w|
+  #       w.interval = 0 # disable normal sleep
+  #       w.before_wait do |n, resp|
+  #         sleep(n ** 2)
+  #       end
+  #     end
+  #
+  # # Available Waiters
+  #
+  # The following table lists the valid waiter names, the operations they call,
+  # and the default `:delay` and `:max_attempts` values.
+  #
+  # | waiter_name            | params                            | :delay   | :max_attempts |
+  # | ---------------------- | --------------------------------- | -------- | ------------- |
+  # | firewall_policy_active | {Client#describe_firewall_policy} | 15       | 40            |
+  #
+  module Waiters
+
+    class FirewallPolicyActive
+
+      # @param [Hash] options
+      # @option options [required, Client] :client
+      # @option options [Integer] :max_attempts (40)
+      # @option options [Integer] :delay (15)
+      # @option options [Proc] :before_attempt
+      # @option options [Proc] :before_wait
+      def initialize(options)
+        @client = options.fetch(:client)
+        @waiter = Aws::Waiters::Waiter.new({
+          max_attempts: 40,
+          delay: 15,
+          poller: Aws::Waiters::Poller.new(
+            operation_name: :describe_firewall_policy,
+            acceptors: [
+              {
+                "expected" => "ACTIVE",
+                "matcher" => "path",
+                "state" => "success",
+                "argument" => "firewall_policy_response.firewall_policy_status"
+              },
+              {
+                "expected" => "ERROR",
+                "matcher" => "path",
+                "state" => "failure",
+                "argument" => "firewall_policy_response.firewall_policy_status"
+              }
+            ]
+          )
+        }.merge(options))
+      end
+
+      # @option (see Client#describe_firewall_policy)
+      # @return (see Client#describe_firewall_policy)
+      def wait(params = {})
+        @waiter.wait(client: @client, params: params)
+      end
+
+      # @api private
+      attr_reader :waiter
+
+    end
+  end
+end

data/lib/aws-sdk-networkfirewall.rb

@@ -49,12 +49,13 @@ module Aws::NetworkFirewall
   end
   autoload :Client, 'aws-sdk-networkfirewall/client'
   autoload :Errors, 'aws-sdk-networkfirewall/errors'
+  autoload :Waiters, 'aws-sdk-networkfirewall/waiters'
   autoload :Resource, 'aws-sdk-networkfirewall/resource'
   autoload :EndpointParameters, 'aws-sdk-networkfirewall/endpoint_parameters'
   autoload :EndpointProvider, 'aws-sdk-networkfirewall/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-networkfirewall/endpoints'
 
-  GEM_VERSION = '1.101.0'
+  GEM_VERSION = '1.102.0'
 
 end
 

data/sig/client.rbs

@@ -684,6 +684,7 @@ module Aws
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeFlowOperationResponse]
         def firewall_arn: () -> ::String
         def availability_zone: () -> ::String
+        def availability_zone_id: () -> ::String
         def vpc_endpoint_association_arn: () -> ::String
         def vpc_endpoint_id: () -> ::String
         def flow_operation_id: () -> ::String
@@ -697,6 +698,7 @@ module Aws
       def describe_flow_operation: (
                                      firewall_arn: ::String,
                                      ?availability_zone: ::String,
+                                     ?availability_zone_id: ::String,
                                      ?vpc_endpoint_association_arn: ::String,
                                      ?vpc_endpoint_id: ::String,
                                      flow_operation_id: ::String
@@ -975,6 +977,7 @@ module Aws
         include ::Seahorse::Client::_ResponseSuccess[Types::ListFlowOperationResultsResponse]
         def firewall_arn: () -> ::String
         def availability_zone: () -> ::String
+        def availability_zone_id: () -> ::String
         def vpc_endpoint_association_arn: () -> ::String
         def vpc_endpoint_id: () -> ::String
         def flow_operation_id: () -> ::String
@@ -991,6 +994,7 @@ module Aws
                                          ?next_token: ::String,
                                          ?max_results: ::Integer,
                                          ?availability_zone: ::String,
+                                         ?availability_zone_id: ::String,
                                          ?vpc_endpoint_id: ::String,
                                          ?vpc_endpoint_association_arn: ::String
                                        ) -> _ListFlowOperationResultsResponseSuccess
@@ -1005,6 +1009,7 @@ module Aws
       def list_flow_operations: (
                                   firewall_arn: ::String,
                                   ?availability_zone: ::String,
+                                  ?availability_zone_id: ::String,
                                   ?vpc_endpoint_association_arn: ::String,
                                   ?vpc_endpoint_id: ::String,
                                   ?flow_operation_type: ("FLOW_FLUSH" | "FLOW_CAPTURE"),
@@ -1146,6 +1151,7 @@ module Aws
       def start_flow_capture: (
                                 firewall_arn: ::String,
                                 ?availability_zone: ::String,
+                                ?availability_zone_id: ::String,
                                 ?vpc_endpoint_association_arn: ::String,
                                 ?vpc_endpoint_id: ::String,
                                 ?minimum_flow_age_in_seconds: ::Integer,
@@ -1165,6 +1171,7 @@ module Aws
       def start_flow_flush: (
                               firewall_arn: ::String,
                               ?availability_zone: ::String,
+                              ?availability_zone_id: ::String,
                               ?vpc_endpoint_association_arn: ::String,
                               ?vpc_endpoint_id: ::String,
                               ?minimum_flow_age_in_seconds: ::Integer,
@@ -1588,6 +1595,13 @@ module Aws
                                                  update_token: ::String
                                                ) -> _UpdateTLSInspectionConfigurationResponseSuccess
                                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateTLSInspectionConfigurationResponseSuccess
+
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#wait_until-instance_method
+      def wait_until: (:firewall_policy_active waiter_name, 
+                    ?firewall_policy_name: ::String,
+                    ?firewall_policy_arn: ::String
+                  ) -> Client::_DescribeFirewallPolicyResponseSuccess
+                    | (:firewall_policy_active waiter_name, ?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> Client::_DescribeFirewallPolicyResponseSuccess
     end
   end
 end

data/sig/params.rbs

@@ -8,6 +8,22 @@
 module Aws
   module NetworkFirewall
     module Params
+      type route_53_resolved_ip_validation = {
+      action: ("REJECT" | "DROP" | "ALERT"),
+      dns_firewall_rule_group_id: ::String,
+      dns_expiry_exception_policy: ("REJECT" | "DROP" | "CONTINUE"),
+      bypass_destination_validation_ip_ranges: Array[
+        {
+          address_definition: ::String
+        }
+      ]?,
+      source_ip_ranges: Array[
+        {
+          address_definition: ::String
+        }
+      ]?
+    }
+
       type firewall_policy = {
       stateless_rule_group_references: Array[
         {
@@ -37,7 +53,8 @@ module Aws
             definition: Array[::String]
           }]?
       }?,
-      enable_tls_session_holding: bool?
+      enable_tls_session_holding: bool?,
+      route_53_resolved_ip_validation: Params::route_53_resolved_ip_validation?
     }
 
       type custom_action = {
@@ -111,7 +128,7 @@ module Aws
       rules_string: ::String?,
       rules_source_list: {
         targets: Array[::String],
-        target_types: Array[("TLS_SNI" | "HTTP_HOST")],
+        target_types: Array[("TLS_SNI" | "HTTP_HOST" | "AWS_ROUTE_53_RESOLVED_DOMAIN")],
         generated_rules_type: ("ALLOWLIST" | "DENYLIST" | "REJECTLIST" | "ALERTLIST")
       }?,
       stateful_rules: Array[

data/sig/types.rbs

@@ -578,6 +578,7 @@ module Aws::NetworkFirewall
     class DescribeFlowOperationRequest
       attr_accessor firewall_arn: ::String
       attr_accessor availability_zone: ::String
+      attr_accessor availability_zone_id: ::String
       attr_accessor vpc_endpoint_association_arn: ::String
       attr_accessor vpc_endpoint_id: ::String
       attr_accessor flow_operation_id: ::String
@@ -587,6 +588,7 @@ module Aws::NetworkFirewall
     class DescribeFlowOperationResponse
       attr_accessor firewall_arn: ::String
       attr_accessor availability_zone: ::String
+      attr_accessor availability_zone_id: ::String
       attr_accessor vpc_endpoint_association_arn: ::String
       attr_accessor vpc_endpoint_id: ::String
       attr_accessor flow_operation_id: ::String
@@ -867,6 +869,14 @@ module Aws::NetworkFirewall
       attr_accessor tls_inspection_configuration_arn: ::String
       attr_accessor policy_variables: Types::PolicyVariables
       attr_accessor enable_tls_session_holding: bool
+      attr_accessor route_53_resolved_ip_validation: Types::Route53ResolvedIPValidation
+      SENSITIVE: []
+    end
+
+    class FirewallPolicyError
+      attr_accessor code: ("DNS_FIREWALL_RULE_GROUP_UNAVAILABLE" | "ROUTE53_RESOLVED_IP_VALIDATION_MISSING")
+      attr_accessor message: ::String
+      attr_accessor resource_id: ::String
       SENSITIVE: []
     end
 
@@ -881,13 +891,15 @@ module Aws::NetworkFirewall
       attr_accessor firewall_policy_arn: ::String
       attr_accessor firewall_policy_id: ::String
       attr_accessor description: ::String
-      attr_accessor firewall_policy_status: ("ACTIVE" | "DELETING" | "ERROR")
+      attr_accessor firewall_policy_status: ("ACTIVE" | "DELETING" | "ERROR" | "UPDATING")
+      attr_accessor status_message: ::String
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor consumed_stateless_rule_capacity: ::Integer
       attr_accessor consumed_stateful_rule_capacity: ::Integer
       attr_accessor consumed_stateful_domain_capacity: ::Integer
       attr_accessor number_of_associations: ::Integer
       attr_accessor encryption_configuration: Types::EncryptionConfiguration
+      attr_accessor errors: ::Array[Types::FirewallPolicyError]
       attr_accessor last_modified_time: ::Time
       SENSITIVE: []
     end
@@ -1083,6 +1095,7 @@ module Aws::NetworkFirewall
       attr_accessor next_token: ::String
       attr_accessor max_results: ::Integer
       attr_accessor availability_zone: ::String
+      attr_accessor availability_zone_id: ::String
       attr_accessor vpc_endpoint_id: ::String
       attr_accessor vpc_endpoint_association_arn: ::String
       SENSITIVE: []
@@ -1091,6 +1104,7 @@ module Aws::NetworkFirewall
     class ListFlowOperationResultsResponse
       attr_accessor firewall_arn: ::String
       attr_accessor availability_zone: ::String
+      attr_accessor availability_zone_id: ::String
       attr_accessor vpc_endpoint_association_arn: ::String
       attr_accessor vpc_endpoint_id: ::String
       attr_accessor flow_operation_id: ::String
@@ -1105,6 +1119,7 @@ module Aws::NetworkFirewall
     class ListFlowOperationsRequest
       attr_accessor firewall_arn: ::String
       attr_accessor availability_zone: ::String
+      attr_accessor availability_zone_id: ::String
       attr_accessor vpc_endpoint_association_arn: ::String
       attr_accessor vpc_endpoint_id: ::String
       attr_accessor flow_operation_type: ("FLOW_FLUSH" | "FLOW_CAPTURE")
@@ -1449,6 +1464,15 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class Route53ResolvedIPValidation
+      attr_accessor action: ("REJECT" | "DROP" | "ALERT")
+      attr_accessor dns_firewall_rule_group_id: ::String
+      attr_accessor dns_expiry_exception_policy: ("REJECT" | "DROP" | "CONTINUE")
+      attr_accessor bypass_destination_validation_ip_ranges: ::Array[Types::Address]
+      attr_accessor source_ip_ranges: ::Array[Types::Address]
+      SENSITIVE: []
+    end
+
     class RuleDefinition
       attr_accessor match_attributes: Types::MatchAttributes
       attr_accessor actions: ::Array[::String]
@@ -1477,7 +1501,7 @@ module Aws::NetworkFirewall
       attr_accessor description: ::String
       attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
       attr_accessor capacity: ::Integer
-      attr_accessor rule_group_status: ("ACTIVE" | "DELETING" | "ERROR")
+      attr_accessor rule_group_status: ("ACTIVE" | "DELETING" | "ERROR" | "UPDATING")
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor consumed_capacity: ::Integer
       attr_accessor number_of_associations: ::Integer
@@ -1519,7 +1543,7 @@ module Aws::NetworkFirewall
 
     class RulesSourceList
       attr_accessor targets: ::Array[::String]
-      attr_accessor target_types: ::Array[("TLS_SNI" | "HTTP_HOST")]
+      attr_accessor target_types: ::Array[("TLS_SNI" | "HTTP_HOST" | "AWS_ROUTE_53_RESOLVED_DOMAIN")]
       attr_accessor generated_rules_type: ("ALLOWLIST" | "DENYLIST" | "REJECTLIST" | "ALERTLIST")
       SENSITIVE: []
     end
@@ -1567,6 +1591,7 @@ module Aws::NetworkFirewall
     class StartFlowCaptureRequest
       attr_accessor firewall_arn: ::String
       attr_accessor availability_zone: ::String
+      attr_accessor availability_zone_id: ::String
       attr_accessor vpc_endpoint_association_arn: ::String
       attr_accessor vpc_endpoint_id: ::String
       attr_accessor minimum_flow_age_in_seconds: ::Integer
@@ -1584,6 +1609,7 @@ module Aws::NetworkFirewall
     class StartFlowFlushRequest
       attr_accessor firewall_arn: ::String
       attr_accessor availability_zone: ::String
+      attr_accessor availability_zone_id: ::String
       attr_accessor vpc_endpoint_association_arn: ::String
       attr_accessor vpc_endpoint_id: ::String
       attr_accessor minimum_flow_age_in_seconds: ::Integer
@@ -1692,7 +1718,7 @@ module Aws::NetworkFirewall
       attr_accessor tls_inspection_configuration_arn: ::String
       attr_accessor tls_inspection_configuration_name: ::String
       attr_accessor tls_inspection_configuration_id: ::String
-      attr_accessor tls_inspection_configuration_status: ("ACTIVE" | "DELETING" | "ERROR")
+      attr_accessor tls_inspection_configuration_status: ("ACTIVE" | "DELETING" | "ERROR" | "UPDATING")
       attr_accessor description: ::String
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor last_modified_time: ::Time

data/sig/waiters.rbs

@@ -8,6 +8,17 @@
 module Aws
   module NetworkFirewall
     module Waiters
+
+      class FirewallPolicyActive
+        def initialize: (?client: Client, ?max_attempts: Integer, ?delay: Integer, ?before_attempt: Proc, ?before_wait: Proc) -> void
+                      | (?Hash[Symbol, untyped]) -> void
+
+        def wait: (
+                    ?firewall_policy_name: ::String,
+                    ?firewall_policy_arn: ::String
+                  ) -> Client::_DescribeFirewallPolicyResponseSuccess
+                | (?Hash[Symbol, untyped]) -> Client::_DescribeFirewallPolicyResponseSuccess
+      end
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-networkfirewall
 version: !ruby/object:Gem::Version
-  version: 1.101.0
+  version: 1.102.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.260.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.260.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement
@@ -65,6 +65,7 @@ files:
 - lib/aws-sdk-networkfirewall/plugins/endpoints.rb
 - lib/aws-sdk-networkfirewall/resource.rb
 - lib/aws-sdk-networkfirewall/types.rb
+- lib/aws-sdk-networkfirewall/waiters.rb
 - sig/client.rbs
 - sig/errors.rbs
 - sig/params.rbs