aws-sdk-networkfirewall 1.107.0 → 1.108.0

data/lib/aws-sdk-networkfirewall.rb

@@ -55,7 +55,7 @@ module Aws::NetworkFirewall
   autoload :EndpointProvider, 'aws-sdk-networkfirewall/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-networkfirewall/endpoints'
 
-  GEM_VERSION = '1.107.0'
+  GEM_VERSION = '1.108.0'
 
 end
 

data/sig/client.rbs

@@ -291,6 +291,30 @@ module Aws
                                   ) -> _CreateFirewallPolicyResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateFirewallPolicyResponseSuccess
 
+      interface _CreateFirewallPolicyV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::CreateFirewallPolicyV2Response]
+        def update_token: () -> ::String
+        def firewall_policy_v2_response: () -> Types::FirewallPolicyV2Response
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#create_firewall_policy_v2-instance_method
+      def create_firewall_policy_v2: (
+                                       firewall_policy_v2_name: ::String,
+                                       firewall_policy_v2: Params::firewall_policy_v2,
+                                       ?description: ::String,
+                                       ?tags: Array[
+                                         {
+                                           key: ::String,
+                                           value: ::String
+                                         }
+                                       ],
+                                       ?dry_run: bool,
+                                       ?encryption_configuration: {
+                                         key_id: ::String?,
+                                         type: ("CUSTOMER_KMS" | "AWS_OWNED_KMS_KEY")
+                                       }
+                                     ) -> _CreateFirewallPolicyV2ResponseSuccess
+                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateFirewallPolicyV2ResponseSuccess
+
       interface _CreateProxyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::CreateProxyResponse]
         def proxy: () -> Types::Proxy
@@ -407,8 +431,10 @@ module Aws
       def create_rule_group: (
                                rule_group_name: ::String,
                                ?rule_group: Params::rule_group,
+                               ?firewall_rule_group: Params::firewall_rule_group,
+                               ?ips_rule_group: Params::ips_rule_group,
                                ?rules: ::String,
-                               type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN"),
+                               type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS"),
                                ?description: ::String,
                                capacity: ::Integer,
                                ?tags: Array[
@@ -515,6 +541,17 @@ module Aws
                                   ) -> _DeleteFirewallPolicyResponseSuccess
                                 | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteFirewallPolicyResponseSuccess
 
+      interface _DeleteFirewallPolicyV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DeleteFirewallPolicyV2Response]
+        def firewall_policy_v2_response: () -> Types::FirewallPolicyV2Response
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#delete_firewall_policy_v2-instance_method
+      def delete_firewall_policy_v2: (
+                                       ?firewall_policy_v2_arn: ::String,
+                                       ?firewall_policy_v2_name: ::String
+                                     ) -> _DeleteFirewallPolicyV2ResponseSuccess
+                                   | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteFirewallPolicyV2ResponseSuccess
+
       interface _DeleteNetworkFirewallTransitGatewayAttachmentResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DeleteNetworkFirewallTransitGatewayAttachmentResponse]
         def transit_gateway_attachment_id: () -> ::String
@@ -593,7 +630,7 @@ module Aws
       def delete_rule_group: (
                                ?rule_group_name: ::String,
                                ?rule_group_arn: ::String,
-                               ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
+                               ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
                              ) -> _DeleteRuleGroupResponseSuccess
                            | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteRuleGroupResponseSuccess
 
@@ -680,6 +717,20 @@ module Aws
                                     ) -> _DescribeFirewallPolicyResponseSuccess
                                   | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeFirewallPolicyResponseSuccess
 
+      interface _DescribeFirewallPolicyV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DescribeFirewallPolicyV2Response]
+        def update_token: () -> ::String
+        def firewall_policy_v2_response: () -> Types::FirewallPolicyV2Response
+        def firewall_policy_v2: () -> Types::FirewallPolicyV2
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#describe_firewall_policy_v2-instance_method
+      def describe_firewall_policy_v2: (
+                                         ?firewall_policy_v2_arn: ::String,
+                                         ?firewall_policy_v2_name: ::String,
+                                         ?rule_output_format: ("FIREWALL_RULES" | "RULES_STRING")
+                                       ) -> _DescribeFirewallPolicyV2ResponseSuccess
+                                     | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeFirewallPolicyV2ResponseSuccess
+
       interface _DescribeFlowOperationResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeFlowOperationResponse]
         def firewall_arn: () -> ::String
@@ -781,14 +832,17 @@ module Aws
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeRuleGroupResponse]
         def update_token: () -> ::String
         def rule_group: () -> Types::RuleGroup
+        def firewall_rule_group: () -> Types::FirewallRuleGroup
+        def ips_rule_group: () -> Types::IpsRuleGroup
         def rule_group_response: () -> Types::RuleGroupResponse
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#describe_rule_group-instance_method
       def describe_rule_group: (
                                  ?rule_group_name: ::String,
                                  ?rule_group_arn: ::String,
-                                 ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN"),
-                                 ?analyze_rule_group: bool
+                                 ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS"),
+                                 ?analyze_rule_group: bool,
+                                 ?rule_output_format: ("FIREWALL_RULES" | "RULES_STRING")
                                ) -> _DescribeRuleGroupResponseSuccess
                              | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupResponseSuccess
 
@@ -797,7 +851,7 @@ module Aws
         def rule_group_arn: () -> ::String
         def rule_group_name: () -> ::String
         def description: () -> ::String
-        def type: () -> ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
+        def type: () -> ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
         def capacity: () -> ::Integer
         def stateful_rule_options: () -> Types::StatefulRuleOptions
         def last_modified_time: () -> ::Time
@@ -809,7 +863,7 @@ module Aws
       def describe_rule_group_metadata: (
                                           ?rule_group_name: ::String,
                                           ?rule_group_arn: ::String,
-                                          ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
+                                          ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
                                         ) -> _DescribeRuleGroupMetadataResponseSuccess
                                       | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupMetadataResponseSuccess
 
@@ -823,7 +877,7 @@ module Aws
       def describe_rule_group_summary: (
                                          ?rule_group_name: ::String,
                                          ?rule_group_arn: ::String,
-                                         ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
+                                         ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
                                        ) -> _DescribeRuleGroupSummaryResponseSuccess
                                      | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupSummaryResponseSuccess
 
@@ -960,6 +1014,18 @@ module Aws
                                   ) -> _ListFirewallPoliciesResponseSuccess
                                 | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListFirewallPoliciesResponseSuccess
 
+      interface _ListFirewallPoliciesV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::ListFirewallPoliciesV2Response]
+        def next_token: () -> ::String
+        def firewall_policies_v2: () -> ::Array[Types::FirewallPolicyV2Metadata]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#list_firewall_policies_v2-instance_method
+      def list_firewall_policies_v2: (
+                                       ?next_token: ::String,
+                                       ?max_results: ::Integer
+                                     ) -> _ListFirewallPoliciesV2ResponseSuccess
+                                   | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListFirewallPoliciesV2ResponseSuccess
+
       interface _ListFirewallsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::ListFirewallsResponse]
         def next_token: () -> ::String
@@ -1066,7 +1132,7 @@ module Aws
                               ?scope: ("MANAGED" | "ACCOUNT"),
                               ?managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE" | "PARTNER_MANAGED"),
                               ?subscription_status: ("NOT_SUBSCRIBED" | "SUBSCRIBED"),
-                              ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
+                              ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
                             ) -> _ListRuleGroupsResponseSuccess
                           | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListRuleGroupsResponseSuccess
 
@@ -1363,6 +1429,26 @@ module Aws
                                                     ) -> _UpdateFirewallPolicyChangeProtectionResponseSuccess
                                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateFirewallPolicyChangeProtectionResponseSuccess
 
+      interface _UpdateFirewallPolicyV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::UpdateFirewallPolicyV2Response]
+        def update_token: () -> ::String
+        def firewall_policy_v2_response: () -> Types::FirewallPolicyV2Response
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#update_firewall_policy_v2-instance_method
+      def update_firewall_policy_v2: (
+                                       update_token: ::String,
+                                       ?firewall_policy_v2_arn: ::String,
+                                       ?firewall_policy_v2_name: ::String,
+                                       firewall_policy_v2: Params::firewall_policy_v2,
+                                       ?description: ::String,
+                                       ?dry_run: bool,
+                                       ?encryption_configuration: {
+                                         key_id: ::String?,
+                                         type: ("CUSTOMER_KMS" | "AWS_OWNED_KMS_KEY")
+                                       }
+                                     ) -> _UpdateFirewallPolicyV2ResponseSuccess
+                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateFirewallPolicyV2ResponseSuccess
+
       interface _UpdateLoggingConfigurationResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::UpdateLoggingConfigurationResponse]
         def firewall_arn: () -> ::String
@@ -1542,8 +1628,10 @@ module Aws
                                ?rule_group_arn: ::String,
                                ?rule_group_name: ::String,
                                ?rule_group: Params::rule_group,
+                               ?firewall_rule_group: Params::firewall_rule_group,
+                               ?ips_rule_group: Params::ips_rule_group,
                                ?rules: ::String,
-                               ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN"),
+                               ?type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS"),
                                ?description: ::String,
                                ?dry_run: bool,
                                ?encryption_configuration: {

data/sig/params.rbs

@@ -79,6 +79,111 @@ module Aws
       deep_threat_inspection: bool?
     }
 
+      type firewall_policy_v2 = {
+      firewall_rule_group_entries: Array[
+        Params::firewall_rule_group_entry
+      ]?,
+      ips_rule_group_entries: Array[
+        Params::ips_rule_group_entry
+      ]?,
+      policy_mode: ("ENFORCE" | "MONITOR")?,
+      firewall_default_action: ("DROP" | "ACCEPT" | "REJECT" | "ALERT")?,
+      stateful_engine_options: {
+        stream_exception_policy: ("DROP" | "REJECT")?,
+        flow_timeouts: {
+          tcp_idle_timeout_seconds: ::Integer?
+        }?
+      }?,
+      tls_inspection_configuration_arn: ::String?,
+      policy_variables: {
+        rule_variables: Hash[::String, {
+            definition: Array[::String]
+          }]?
+      }?,
+      route_53_resolved_ip_validation: Params::route_53_resolved_ip_validation?
+    }
+
+      type firewall_rules_source = {
+      rules_string: ::String?,
+      firewall_rules: Array[
+        Params::firewall_rule
+      ]?,
+      rules_source_list: {
+        targets: Array[::String],
+        target_types: Array[("TLS_SNI" | "HTTP_HOST" | "AWS_ROUTE_53_RESOLVED_DOMAIN")],
+        generated_rules_type: ("ALLOWLIST" | "DENYLIST" | "REJECTLIST" | "ALERTLIST")
+      }?
+    }
+
+      type rule_variables = {
+      ip_sets: Hash[::String, {
+          definition: Array[::String]
+        }]?,
+      port_sets: Hash[::String, {
+          definition: Array[::String]?
+        }]?
+    }
+
+      type firewall_rule_group = {
+      rules_source: Params::firewall_rules_source,
+      rule_variables: Params::rule_variables?,
+      reference_sets: {
+        ip_set_references: Hash[::String, {
+            reference_arn: ::String?
+          }]?
+      }?
+    }
+
+      type firewall_rule_group_entry = {
+      priority: ::Integer?,
+      resource_arn: ::String?,
+      inline_rule_group: Params::firewall_rule_group?
+    }
+
+      type firewall_rule = {
+      action: ("ACCEPT" | "DROP" | "REJECT" | "REJECT_DST" | "REJECT_BOTH"),
+      action_scope: ("FLOW" | "TX" | "HOOK" | "PACKET"),
+      hook: ("TCP_ALL" | "TCP_FLOW_START" | "TCP_PRE_FLOW" | "TCP_PRE_STREAM" | "SCTP_ALL" | "SCTP_FLOW_START" | "SCTP_PRE_FLOW" | "SCTP_PRE_STREAM" | "IPV6_ALL" | "IPV6_FLOW_START" | "IPV6_PRE_FLOW" | "IPV6_PRE_STREAM" | "ICMPV6_ALL" | "ICMPV6_FLOW_START" | "ICMPV6_PRE_FLOW" | "ICMPV6_PRE_STREAM" | "UDP_ALL" | "UDP_FLOW_START" | "UDP_PRE_FLOW" | "UDP_PRE_STREAM" | "ICMP_ALL" | "ICMP_FLOW_START" | "ICMP_PRE_FLOW" | "ICMP_PRE_STREAM" | "ICMPV4_ALL" | "ICMPV4_FLOW_START" | "ICMPV4_PRE_FLOW" | "ICMPV4_PRE_STREAM" | "IP_ALL" | "IP_FLOW_START" | "IP_PRE_FLOW" | "IP_PRE_STREAM" | "IPV4_ALL" | "IPV4_FLOW_START" | "IPV4_PRE_FLOW" | "IPV4_PRE_STREAM" | "TLS_CLIENT_STARTED" | "TLS_CLIENT_HELLO" | "TLS_CLIENT_CERT" | "TLS_CLIENT_DATA" | "TLS_CLIENT_FINISHED" | "TLS_SERVER_STARTED" | "TLS_SERVER_HELLO" | "TLS_SERVER_CERT" | "TLS_SERVER_DATA" | "TLS_SERVER_FINISHED" | "HTTP1_REQUEST_STARTED" | "HTTP1_REQUEST_LINE" | "HTTP1_REQUEST_HEADERS" | "HTTP1_REQUEST_BODY" | "HTTP1_REQUEST_TRAILER" | "HTTP1_REQUEST_COMPLETE" | "HTTP1_RESPONSE_STARTED" | "HTTP1_RESPONSE_LINE" | "HTTP1_RESPONSE_HEADERS" | "HTTP1_RESPONSE_BODY" | "HTTP1_RESPONSE_TRAILER" | "HTTP1_RESPONSE_COMPLETE" | "HTTP2_STREAM_REQUEST_STARTED" | "HTTP2_STREAM_REQUEST_HEADERS" | "HTTP2_STREAM_REQUEST_DATA" | "HTTP2_STREAM_REQUEST_CLOSED" | "HTTP2_STREAM_REQUEST_COMPLETE" | "HTTP2_STREAM_RESPONSE_STARTED" | "HTTP2_STREAM_RESPONSE_HEADERS" | "HTTP2_STREAM_RESPONSE_DATA" | "HTTP2_STREAM_RESPONSE_CLOSED" | "HTTP2_STREAM_RESPONSE_COMPLETE" | "HTTP2_GLOBAL_REQUEST_STARTED" | "HTTP2_GLOBAL_REQUEST_COMPLETE" | "HTTP2_GLOBAL_RESPONSE_STARTED" | "HTTP2_GLOBAL_RESPONSE_COMPLETE" | "DOH2_STREAM_REQUEST_STARTED" | "DOH2_STREAM_REQUEST_HEADERS" | "DOH2_STREAM_REQUEST_DATA" | "DOH2_STREAM_REQUEST_CLOSED" | "DOH2_STREAM_REQUEST_COMPLETE" | "DOH2_STREAM_RESPONSE_STARTED" | "DOH2_STREAM_RESPONSE_HEADERS" | "DOH2_STREAM_RESPONSE_DATA" | "DOH2_STREAM_RESPONSE_CLOSED" | "DOH2_STREAM_RESPONSE_COMPLETE" | "DOH2_GLOBAL_REQUEST_STARTED" | "DOH2_GLOBAL_REQUEST_COMPLETE" | "DOH2_GLOBAL_RESPONSE_STARTED" | "DOH2_GLOBAL_RESPONSE_COMPLETE" | "DNS_REQUEST_STARTED" | "DNS_REQUEST_COMPLETE" | "DNS_RESPONSE_STARTED" | "DNS_RESPONSE_COMPLETE" | "SMTP_REQUEST_STARTED" | "SMTP_REQUEST_DATA" | "SMTP_REQUEST_COMPLETE" | "SMTP_RESPONSE_STARTED" | "SMTP_RESPONSE_DATA" | "SMTP_RESPONSE_COMPLETE" | "FTP_REQUEST_STARTED" | "FTP_REQUEST_COMPLETE" | "FTP_RESPONSE_STARTED" | "FTP_RESPONSE_COMPLETE" | "FTP_DATA_REQUEST_STARTED" | "FTP_DATA_REQUEST_COMPLETE" | "FTP_DATA_RESPONSE_STARTED" | "FTP_DATA_RESPONSE_COMPLETE" | "SMB_REQUEST_STARTED" | "SMB_REQUEST_COMPLETE" | "SMB_RESPONSE_STARTED" | "SMB_RESPONSE_COMPLETE" | "DCERPC_REQUEST_STARTED" | "DCERPC_REQUEST_COMPLETE" | "DCERPC_RESPONSE_STARTED" | "DCERPC_RESPONSE_COMPLETE" | "NFS_REQUEST_STARTED" | "NFS_REQUEST_COMPLETE" | "NFS_RESPONSE_STARTED" | "NFS_RESPONSE_COMPLETE" | "KRB5_REQUEST_STARTED" | "KRB5_REQUEST_COMPLETE" | "KRB5_RESPONSE_STARTED" | "KRB5_RESPONSE_COMPLETE" | "IKE_REQUEST_STARTED" | "IKE_REQUEST_COMPLETE" | "IKE_RESPONSE_STARTED" | "IKE_RESPONSE_COMPLETE" | "TFTP_REQUEST_STARTED" | "TFTP_REQUEST_COMPLETE" | "TFTP_RESPONSE_STARTED" | "TFTP_RESPONSE_COMPLETE" | "DHCP_REQUEST_STARTED" | "DHCP_REQUEST_COMPLETE" | "DHCP_RESPONSE_STARTED" | "DHCP_RESPONSE_COMPLETE" | "QUIC_REQUEST_STARTED" | "QUIC_REQUEST_COMPLETE" | "QUIC_RESPONSE_STARTED" | "QUIC_RESPONSE_COMPLETE" | "RDP_REQUEST_STARTED" | "RDP_REQUEST_COMPLETE" | "RDP_RESPONSE_STARTED" | "RDP_RESPONSE_COMPLETE" | "RFB_REQUEST_STARTED" | "RFB_REQUEST_COMPLETE" | "RFB_RESPONSE_STARTED" | "RFB_RESPONSE_COMPLETE" | "MQTT_REQUEST_STARTED" | "MQTT_REQUEST_COMPLETE" | "MQTT_RESPONSE_STARTED" | "MQTT_RESPONSE_COMPLETE" | "PGSQL_REQUEST_STARTED" | "PGSQL_REQUEST_COMPLETE" | "PGSQL_RESPONSE_STARTED" | "PGSQL_RESPONSE_COMPLETE" | "SNMP_REQUEST_STARTED" | "SNMP_REQUEST_COMPLETE" | "SNMP_RESPONSE_STARTED" | "SNMP_RESPONSE_COMPLETE" | "NTP_REQUEST_STARTED" | "NTP_REQUEST_COMPLETE" | "NTP_RESPONSE_STARTED" | "NTP_RESPONSE_COMPLETE" | "TELNET_REQUEST_STARTED" | "TELNET_REQUEST_COMPLETE" | "TELNET_RESPONSE_STARTED" | "TELNET_RESPONSE_COMPLETE" | "WEBSOCKET_REQUEST_STARTED" | "WEBSOCKET_REQUEST_COMPLETE" | "WEBSOCKET_RESPONSE_STARTED" | "WEBSOCKET_RESPONSE_COMPLETE" | "LDAP_REQUEST_STARTED" | "LDAP_REQUEST_COMPLETE" | "LDAP_RESPONSE_STARTED" | "LDAP_RESPONSE_COMPLETE" | "POP3_REQUEST_STARTED" | "POP3_REQUEST_COMPLETE" | "POP3_RESPONSE_STARTED" | "POP3_RESPONSE_COMPLETE" | "MDNS_REQUEST_STARTED" | "MDNS_REQUEST_COMPLETE" | "MDNS_RESPONSE_STARTED" | "MDNS_RESPONSE_COMPLETE" | "BITTORRENT_DHT_REQUEST_STARTED" | "BITTORRENT_DHT_REQUEST_COMPLETE" | "BITTORRENT_DHT_RESPONSE_STARTED" | "BITTORRENT_DHT_RESPONSE_COMPLETE" | "DNP3_REQUEST_STARTED" | "DNP3_REQUEST_COMPLETE" | "DNP3_RESPONSE_STARTED" | "DNP3_RESPONSE_COMPLETE" | "SSH_REQUEST_IN_PROGRESS" | "SSH_REQUEST_BANNER_WAIT_EOL" | "SSH_REQUEST_BANNER_DONE" | "SSH_REQUEST_FINISHED" | "SSH_RESPONSE_IN_PROGRESS" | "SSH_RESPONSE_BANNER_WAIT_EOL" | "SSH_RESPONSE_BANNER_DONE" | "SSH_RESPONSE_FINISHED"),
+      protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP" | "HTTP2" | "QUIC" | "ICMPV4" | "ICMPV6" | "SCTP" | "IPV4" | "IPV6" | "DOH2" | "FTP_DATA" | "NFS" | "RDP" | "RFB" | "MQTT" | "PGSQL" | "SNMP" | "TELNET" | "WEBSOCKET" | "LDAP" | "POP3" | "MDNS" | "BITTORRENT_DHT" | "DNP3"),
+      source_i_ps: ::String?,
+      dest_i_ps: ::String?,
+      source_ports: ::String?,
+      dest_ports: ::String?,
+      rule_options: Array[
+        {
+          keyword: ::String,
+          settings: Array[::String]?
+        }
+      ]?,
+      accept_prior_hooks: bool?,
+      alert_enabled: bool?,
+      bypass_ips_enabled: bool?,
+      rule_metadata: {
+        rule_enabled: bool?,
+        rule_description: ::String?
+      }?
+    }
+
+      type ips_rule_group = {
+      rules_source: {
+        rules_string: ::String?
+      },
+      rule_variables: Params::rule_variables?,
+      reference_sets: {
+        ip_set_references: Hash[::String, {
+            reference_arn: ::String?
+          }]?
+      }?
+    }
+
+      type ips_rule_group_entry = {
+      resource_arn: ::String?,
+      inline_rule_group: Params::ips_rule_group?,
+      override: {
+        action: ("DROP_TO_ALERT")?
+      }?
+    }
+
       type proxy_rule = {
       proxy_rule_name: ::String?,
       description: ::String?,
@@ -106,15 +211,6 @@ module Aws
       insert_position: ::Integer?
     }
 
-      type rule_variables = {
-      ip_sets: Hash[::String, {
-          definition: Array[::String]
-        }]?,
-      port_sets: Hash[::String, {
-          definition: Array[::String]?
-        }]?
-    }
-
       type stateless_rules_and_custom_actions = {
       stateless_rules: Array[
         Params::stateless_rule