aws-sdk-networkfirewall 1.107.0 → 1.108.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
data/sig/types.rbs CHANGED
@@ -213,6 +213,22 @@ module Aws::NetworkFirewall
213
213
  SENSITIVE: []
214
214
  end
215
215
 
216
+ class CreateFirewallPolicyV2Request
217
+ attr_accessor firewall_policy_v2_name: ::String
218
+ attr_accessor firewall_policy_v2: Types::FirewallPolicyV2
219
+ attr_accessor description: ::String
220
+ attr_accessor tags: ::Array[Types::Tag]
221
+ attr_accessor dry_run: bool
222
+ attr_accessor encryption_configuration: Types::EncryptionConfiguration
223
+ SENSITIVE: []
224
+ end
225
+
226
+ class CreateFirewallPolicyV2Response
227
+ attr_accessor update_token: ::String
228
+ attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
229
+ SENSITIVE: []
230
+ end
231
+
216
232
  class CreateFirewallRequest
217
233
  attr_accessor firewall_name: ::String
218
234
  attr_accessor firewall_policy_arn: ::String
@@ -320,8 +336,10 @@ module Aws::NetworkFirewall
320
336
  class CreateRuleGroupRequest
321
337
  attr_accessor rule_group_name: ::String
322
338
  attr_accessor rule_group: Types::RuleGroup
339
+ attr_accessor firewall_rule_group: Types::FirewallRuleGroup
340
+ attr_accessor ips_rule_group: Types::IpsRuleGroup
323
341
  attr_accessor rules: ::String
324
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
342
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
325
343
  attr_accessor description: ::String
326
344
  attr_accessor capacity: ::Integer
327
345
  attr_accessor tags: ::Array[Types::Tag]
@@ -399,6 +417,17 @@ module Aws::NetworkFirewall
399
417
  SENSITIVE: []
400
418
  end
401
419
 
420
+ class DeleteFirewallPolicyV2Request
421
+ attr_accessor firewall_policy_v2_arn: ::String
422
+ attr_accessor firewall_policy_v2_name: ::String
423
+ SENSITIVE: []
424
+ end
425
+
426
+ class DeleteFirewallPolicyV2Response
427
+ attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
428
+ SENSITIVE: []
429
+ end
430
+
402
431
  class DeleteFirewallRequest
403
432
  attr_accessor firewall_name: ::String
404
433
  attr_accessor firewall_arn: ::String
@@ -483,7 +512,7 @@ module Aws::NetworkFirewall
483
512
  class DeleteRuleGroupRequest
484
513
  attr_accessor rule_group_name: ::String
485
514
  attr_accessor rule_group_arn: ::String
486
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
515
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
487
516
  SENSITIVE: []
488
517
  end
489
518
 
@@ -562,6 +591,20 @@ module Aws::NetworkFirewall
562
591
  SENSITIVE: []
563
592
  end
564
593
 
594
+ class DescribeFirewallPolicyV2Request
595
+ attr_accessor firewall_policy_v2_arn: ::String
596
+ attr_accessor firewall_policy_v2_name: ::String
597
+ attr_accessor rule_output_format: ("FIREWALL_RULES" | "RULES_STRING")
598
+ SENSITIVE: []
599
+ end
600
+
601
+ class DescribeFirewallPolicyV2Response
602
+ attr_accessor update_token: ::String
603
+ attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
604
+ attr_accessor firewall_policy_v2: Types::FirewallPolicyV2
605
+ SENSITIVE: []
606
+ end
607
+
565
608
  class DescribeFirewallRequest
566
609
  attr_accessor firewall_name: ::String
567
610
  attr_accessor firewall_arn: ::String
@@ -696,7 +739,7 @@ module Aws::NetworkFirewall
696
739
  class DescribeRuleGroupMetadataRequest
697
740
  attr_accessor rule_group_name: ::String
698
741
  attr_accessor rule_group_arn: ::String
699
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
742
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
700
743
  SENSITIVE: []
701
744
  end
702
745
 
@@ -704,7 +747,7 @@ module Aws::NetworkFirewall
704
747
  attr_accessor rule_group_arn: ::String
705
748
  attr_accessor rule_group_name: ::String
706
749
  attr_accessor description: ::String
707
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
750
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
708
751
  attr_accessor capacity: ::Integer
709
752
  attr_accessor stateful_rule_options: Types::StatefulRuleOptions
710
753
  attr_accessor last_modified_time: ::Time
@@ -717,14 +760,17 @@ module Aws::NetworkFirewall
717
760
  class DescribeRuleGroupRequest
718
761
  attr_accessor rule_group_name: ::String
719
762
  attr_accessor rule_group_arn: ::String
720
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
763
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
721
764
  attr_accessor analyze_rule_group: bool
765
+ attr_accessor rule_output_format: ("FIREWALL_RULES" | "RULES_STRING")
722
766
  SENSITIVE: []
723
767
  end
724
768
 
725
769
  class DescribeRuleGroupResponse
726
770
  attr_accessor update_token: ::String
727
771
  attr_accessor rule_group: Types::RuleGroup
772
+ attr_accessor firewall_rule_group: Types::FirewallRuleGroup
773
+ attr_accessor ips_rule_group: Types::IpsRuleGroup
728
774
  attr_accessor rule_group_response: Types::RuleGroupResponse
729
775
  SENSITIVE: []
730
776
  end
@@ -732,7 +778,7 @@ module Aws::NetworkFirewall
732
778
  class DescribeRuleGroupSummaryRequest
733
779
  attr_accessor rule_group_name: ::String
734
780
  attr_accessor rule_group_arn: ::String
735
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
781
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
736
782
  SENSITIVE: []
737
783
  end
738
784
 
@@ -904,6 +950,80 @@ module Aws::NetworkFirewall
904
950
  SENSITIVE: []
905
951
  end
906
952
 
953
+ class FirewallPolicyV2
954
+ attr_accessor firewall_rule_group_entries: ::Array[Types::FirewallRuleGroupEntry]
955
+ attr_accessor ips_rule_group_entries: ::Array[Types::IpsRuleGroupEntry]
956
+ attr_accessor policy_mode: ("ENFORCE" | "MONITOR")
957
+ attr_accessor firewall_default_action: ("DROP" | "ACCEPT" | "REJECT" | "ALERT")
958
+ attr_accessor stateful_engine_options: Types::StatefulEngineOptionsV2
959
+ attr_accessor tls_inspection_configuration_arn: ::String
960
+ attr_accessor policy_variables: Types::PolicyVariables
961
+ attr_accessor route_53_resolved_ip_validation: Types::Route53ResolvedIPValidation
962
+ SENSITIVE: []
963
+ end
964
+
965
+ class FirewallPolicyV2Metadata
966
+ attr_accessor name: ::String
967
+ attr_accessor arn: ::String
968
+ SENSITIVE: []
969
+ end
970
+
971
+ class FirewallPolicyV2Response
972
+ attr_accessor firewall_policy_v2_name: ::String
973
+ attr_accessor firewall_policy_v2_arn: ::String
974
+ attr_accessor firewall_policy_v2_id: ::String
975
+ attr_accessor description: ::String
976
+ attr_accessor firewall_policy_v2_status: ("ACTIVE" | "DELETING" | "ERROR" | "UPDATING")
977
+ attr_accessor status_message: ::String
978
+ attr_accessor tags: ::Array[Types::Tag]
979
+ attr_accessor consumed_firewall_rule_capacity: ::Integer
980
+ attr_accessor consumed_ips_rule_capacity: ::Integer
981
+ attr_accessor consumed_ips_domain_capacity: ::Integer
982
+ attr_accessor number_of_associations: ::Integer
983
+ attr_accessor encryption_configuration: Types::EncryptionConfiguration
984
+ attr_accessor errors: ::Array[Types::FirewallPolicyError]
985
+ attr_accessor last_modified_time: ::Time
986
+ SENSITIVE: []
987
+ end
988
+
989
+ class FirewallRule
990
+ attr_accessor action: ("ACCEPT" | "DROP" | "REJECT" | "REJECT_DST" | "REJECT_BOTH")
991
+ attr_accessor action_scope: ("FLOW" | "TX" | "HOOK" | "PACKET")
992
+ attr_accessor hook: ("TCP_ALL" | "TCP_FLOW_START" | "TCP_PRE_FLOW" | "TCP_PRE_STREAM" | "SCTP_ALL" | "SCTP_FLOW_START" | "SCTP_PRE_FLOW" | "SCTP_PRE_STREAM" | "IPV6_ALL" | "IPV6_FLOW_START" | "IPV6_PRE_FLOW" | "IPV6_PRE_STREAM" | "ICMPV6_ALL" | "ICMPV6_FLOW_START" | "ICMPV6_PRE_FLOW" | "ICMPV6_PRE_STREAM" | "UDP_ALL" | "UDP_FLOW_START" | "UDP_PRE_FLOW" | "UDP_PRE_STREAM" | "ICMP_ALL" | "ICMP_FLOW_START" | "ICMP_PRE_FLOW" | "ICMP_PRE_STREAM" | "ICMPV4_ALL" | "ICMPV4_FLOW_START" | "ICMPV4_PRE_FLOW" | "ICMPV4_PRE_STREAM" | "IP_ALL" | "IP_FLOW_START" | "IP_PRE_FLOW" | "IP_PRE_STREAM" | "IPV4_ALL" | "IPV4_FLOW_START" | "IPV4_PRE_FLOW" | "IPV4_PRE_STREAM" | "TLS_CLIENT_STARTED" | "TLS_CLIENT_HELLO" | "TLS_CLIENT_CERT" | "TLS_CLIENT_DATA" | "TLS_CLIENT_FINISHED" | "TLS_SERVER_STARTED" | "TLS_SERVER_HELLO" | "TLS_SERVER_CERT" | "TLS_SERVER_DATA" | "TLS_SERVER_FINISHED" | "HTTP1_REQUEST_STARTED" | "HTTP1_REQUEST_LINE" | "HTTP1_REQUEST_HEADERS" | "HTTP1_REQUEST_BODY" | "HTTP1_REQUEST_TRAILER" | "HTTP1_REQUEST_COMPLETE" | "HTTP1_RESPONSE_STARTED" | "HTTP1_RESPONSE_LINE" | "HTTP1_RESPONSE_HEADERS" | "HTTP1_RESPONSE_BODY" | "HTTP1_RESPONSE_TRAILER" | "HTTP1_RESPONSE_COMPLETE" | "HTTP2_STREAM_REQUEST_STARTED" | "HTTP2_STREAM_REQUEST_HEADERS" | "HTTP2_STREAM_REQUEST_DATA" | "HTTP2_STREAM_REQUEST_CLOSED" | "HTTP2_STREAM_REQUEST_COMPLETE" | "HTTP2_STREAM_RESPONSE_STARTED" | "HTTP2_STREAM_RESPONSE_HEADERS" | "HTTP2_STREAM_RESPONSE_DATA" | "HTTP2_STREAM_RESPONSE_CLOSED" | "HTTP2_STREAM_RESPONSE_COMPLETE" | "HTTP2_GLOBAL_REQUEST_STARTED" | "HTTP2_GLOBAL_REQUEST_COMPLETE" | "HTTP2_GLOBAL_RESPONSE_STARTED" | "HTTP2_GLOBAL_RESPONSE_COMPLETE" | "DOH2_STREAM_REQUEST_STARTED" | "DOH2_STREAM_REQUEST_HEADERS" | "DOH2_STREAM_REQUEST_DATA" | "DOH2_STREAM_REQUEST_CLOSED" | "DOH2_STREAM_REQUEST_COMPLETE" | "DOH2_STREAM_RESPONSE_STARTED" | "DOH2_STREAM_RESPONSE_HEADERS" | "DOH2_STREAM_RESPONSE_DATA" | "DOH2_STREAM_RESPONSE_CLOSED" | "DOH2_STREAM_RESPONSE_COMPLETE" | "DOH2_GLOBAL_REQUEST_STARTED" | "DOH2_GLOBAL_REQUEST_COMPLETE" | "DOH2_GLOBAL_RESPONSE_STARTED" | "DOH2_GLOBAL_RESPONSE_COMPLETE" | "DNS_REQUEST_STARTED" | "DNS_REQUEST_COMPLETE" | "DNS_RESPONSE_STARTED" | "DNS_RESPONSE_COMPLETE" | "SMTP_REQUEST_STARTED" | "SMTP_REQUEST_DATA" | "SMTP_REQUEST_COMPLETE" | "SMTP_RESPONSE_STARTED" | "SMTP_RESPONSE_DATA" | "SMTP_RESPONSE_COMPLETE" | "FTP_REQUEST_STARTED" | "FTP_REQUEST_COMPLETE" | "FTP_RESPONSE_STARTED" | "FTP_RESPONSE_COMPLETE" | "FTP_DATA_REQUEST_STARTED" | "FTP_DATA_REQUEST_COMPLETE" | "FTP_DATA_RESPONSE_STARTED" | "FTP_DATA_RESPONSE_COMPLETE" | "SMB_REQUEST_STARTED" | "SMB_REQUEST_COMPLETE" | "SMB_RESPONSE_STARTED" | "SMB_RESPONSE_COMPLETE" | "DCERPC_REQUEST_STARTED" | "DCERPC_REQUEST_COMPLETE" | "DCERPC_RESPONSE_STARTED" | "DCERPC_RESPONSE_COMPLETE" | "NFS_REQUEST_STARTED" | "NFS_REQUEST_COMPLETE" | "NFS_RESPONSE_STARTED" | "NFS_RESPONSE_COMPLETE" | "KRB5_REQUEST_STARTED" | "KRB5_REQUEST_COMPLETE" | "KRB5_RESPONSE_STARTED" | "KRB5_RESPONSE_COMPLETE" | "IKE_REQUEST_STARTED" | "IKE_REQUEST_COMPLETE" | "IKE_RESPONSE_STARTED" | "IKE_RESPONSE_COMPLETE" | "TFTP_REQUEST_STARTED" | "TFTP_REQUEST_COMPLETE" | "TFTP_RESPONSE_STARTED" | "TFTP_RESPONSE_COMPLETE" | "DHCP_REQUEST_STARTED" | "DHCP_REQUEST_COMPLETE" | "DHCP_RESPONSE_STARTED" | "DHCP_RESPONSE_COMPLETE" | "QUIC_REQUEST_STARTED" | "QUIC_REQUEST_COMPLETE" | "QUIC_RESPONSE_STARTED" | "QUIC_RESPONSE_COMPLETE" | "RDP_REQUEST_STARTED" | "RDP_REQUEST_COMPLETE" | "RDP_RESPONSE_STARTED" | "RDP_RESPONSE_COMPLETE" | "RFB_REQUEST_STARTED" | "RFB_REQUEST_COMPLETE" | "RFB_RESPONSE_STARTED" | "RFB_RESPONSE_COMPLETE" | "MQTT_REQUEST_STARTED" | "MQTT_REQUEST_COMPLETE" | "MQTT_RESPONSE_STARTED" | "MQTT_RESPONSE_COMPLETE" | "PGSQL_REQUEST_STARTED" | "PGSQL_REQUEST_COMPLETE" | "PGSQL_RESPONSE_STARTED" | "PGSQL_RESPONSE_COMPLETE" | "SNMP_REQUEST_STARTED" | "SNMP_REQUEST_COMPLETE" | "SNMP_RESPONSE_STARTED" | "SNMP_RESPONSE_COMPLETE" | "NTP_REQUEST_STARTED" | "NTP_REQUEST_COMPLETE" | "NTP_RESPONSE_STARTED" | "NTP_RESPONSE_COMPLETE" | "TELNET_REQUEST_STARTED" | "TELNET_REQUEST_COMPLETE" | "TELNET_RESPONSE_STARTED" | "TELNET_RESPONSE_COMPLETE" | "WEBSOCKET_REQUEST_STARTED" | "WEBSOCKET_REQUEST_COMPLETE" | "WEBSOCKET_RESPONSE_STARTED" | "WEBSOCKET_RESPONSE_COMPLETE" | "LDAP_REQUEST_STARTED" | "LDAP_REQUEST_COMPLETE" | "LDAP_RESPONSE_STARTED" | "LDAP_RESPONSE_COMPLETE" | "POP3_REQUEST_STARTED" | "POP3_REQUEST_COMPLETE" | "POP3_RESPONSE_STARTED" | "POP3_RESPONSE_COMPLETE" | "MDNS_REQUEST_STARTED" | "MDNS_REQUEST_COMPLETE" | "MDNS_RESPONSE_STARTED" | "MDNS_RESPONSE_COMPLETE" | "BITTORRENT_DHT_REQUEST_STARTED" | "BITTORRENT_DHT_REQUEST_COMPLETE" | "BITTORRENT_DHT_RESPONSE_STARTED" | "BITTORRENT_DHT_RESPONSE_COMPLETE" | "DNP3_REQUEST_STARTED" | "DNP3_REQUEST_COMPLETE" | "DNP3_RESPONSE_STARTED" | "DNP3_RESPONSE_COMPLETE" | "SSH_REQUEST_IN_PROGRESS" | "SSH_REQUEST_BANNER_WAIT_EOL" | "SSH_REQUEST_BANNER_DONE" | "SSH_REQUEST_FINISHED" | "SSH_RESPONSE_IN_PROGRESS" | "SSH_RESPONSE_BANNER_WAIT_EOL" | "SSH_RESPONSE_BANNER_DONE" | "SSH_RESPONSE_FINISHED")
993
+ attr_accessor protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP" | "HTTP2" | "QUIC" | "ICMPV4" | "ICMPV6" | "SCTP" | "IPV4" | "IPV6" | "DOH2" | "FTP_DATA" | "NFS" | "RDP" | "RFB" | "MQTT" | "PGSQL" | "SNMP" | "TELNET" | "WEBSOCKET" | "LDAP" | "POP3" | "MDNS" | "BITTORRENT_DHT" | "DNP3")
994
+ attr_accessor source_i_ps: ::String
995
+ attr_accessor dest_i_ps: ::String
996
+ attr_accessor source_ports: ::String
997
+ attr_accessor dest_ports: ::String
998
+ attr_accessor rule_options: ::Array[Types::RuleOption]
999
+ attr_accessor accept_prior_hooks: bool
1000
+ attr_accessor alert_enabled: bool
1001
+ attr_accessor bypass_ips_enabled: bool
1002
+ attr_accessor rule_metadata: Types::RuleMetadata
1003
+ SENSITIVE: []
1004
+ end
1005
+
1006
+ class FirewallRuleGroup
1007
+ attr_accessor rules_source: Types::FirewallRulesSource
1008
+ attr_accessor rule_variables: Types::RuleVariables
1009
+ attr_accessor reference_sets: Types::ReferenceSets
1010
+ SENSITIVE: []
1011
+ end
1012
+
1013
+ class FirewallRuleGroupEntry
1014
+ attr_accessor priority: ::Integer
1015
+ attr_accessor resource_arn: ::String
1016
+ attr_accessor inline_rule_group: Types::FirewallRuleGroup
1017
+ SENSITIVE: []
1018
+ end
1019
+
1020
+ class FirewallRulesSource
1021
+ attr_accessor rules_string: ::String
1022
+ attr_accessor firewall_rules: ::Array[Types::FirewallRule]
1023
+ attr_accessor rules_source_list: Types::RulesSourceList
1024
+ SENSITIVE: []
1025
+ end
1026
+
907
1027
  class FirewallStatus
908
1028
  attr_accessor status: ("PROVISIONING" | "DELETING" | "READY" | "FAILED")
909
1029
  attr_accessor configuration_sync_state_summary: ("PENDING" | "IN_SYNC" | "CAPACITY_CONSTRAINED")
@@ -1033,6 +1153,30 @@ module Aws::NetworkFirewall
1033
1153
  SENSITIVE: []
1034
1154
  end
1035
1155
 
1156
+ class IpsRuleGroup
1157
+ attr_accessor rules_source: Types::IpsRulesSource
1158
+ attr_accessor rule_variables: Types::RuleVariables
1159
+ attr_accessor reference_sets: Types::ReferenceSets
1160
+ SENSITIVE: []
1161
+ end
1162
+
1163
+ class IpsRuleGroupEntry
1164
+ attr_accessor resource_arn: ::String
1165
+ attr_accessor inline_rule_group: Types::IpsRuleGroup
1166
+ attr_accessor override: Types::IpsRuleGroupOverride
1167
+ SENSITIVE: []
1168
+ end
1169
+
1170
+ class IpsRuleGroupOverride
1171
+ attr_accessor action: ("DROP_TO_ALERT")
1172
+ SENSITIVE: []
1173
+ end
1174
+
1175
+ class IpsRulesSource
1176
+ attr_accessor rules_string: ::String
1177
+ SENSITIVE: []
1178
+ end
1179
+
1036
1180
  class LimitExceededException
1037
1181
  attr_accessor message: ::String
1038
1182
  SENSITIVE: []
@@ -1076,6 +1220,18 @@ module Aws::NetworkFirewall
1076
1220
  SENSITIVE: []
1077
1221
  end
1078
1222
 
1223
+ class ListFirewallPoliciesV2Request
1224
+ attr_accessor next_token: ::String
1225
+ attr_accessor max_results: ::Integer
1226
+ SENSITIVE: []
1227
+ end
1228
+
1229
+ class ListFirewallPoliciesV2Response
1230
+ attr_accessor next_token: ::String
1231
+ attr_accessor firewall_policies_v2: ::Array[Types::FirewallPolicyV2Metadata]
1232
+ SENSITIVE: []
1233
+ end
1234
+
1079
1235
  class ListFirewallsRequest
1080
1236
  attr_accessor next_token: ::String
1081
1237
  attr_accessor vpc_ids: ::Array[::String]
@@ -1176,7 +1332,7 @@ module Aws::NetworkFirewall
1176
1332
  attr_accessor scope: ("MANAGED" | "ACCOUNT")
1177
1333
  attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE" | "PARTNER_MANAGED")
1178
1334
  attr_accessor subscription_status: ("NOT_SUBSCRIBED" | "SUBSCRIBED")
1179
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
1335
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
1180
1336
  SENSITIVE: []
1181
1337
  end
1182
1338
 
@@ -1499,7 +1655,7 @@ module Aws::NetworkFirewall
1499
1655
  attr_accessor rule_group_name: ::String
1500
1656
  attr_accessor rule_group_id: ::String
1501
1657
  attr_accessor description: ::String
1502
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
1658
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
1503
1659
  attr_accessor capacity: ::Integer
1504
1660
  attr_accessor rule_group_status: ("ACTIVE" | "DELETING" | "ERROR" | "UPDATING")
1505
1661
  attr_accessor tags: ::Array[Types::Tag]
@@ -1514,6 +1670,12 @@ module Aws::NetworkFirewall
1514
1670
  SENSITIVE: []
1515
1671
  end
1516
1672
 
1673
+ class RuleMetadata
1674
+ attr_accessor rule_enabled: bool
1675
+ attr_accessor rule_description: ::String
1676
+ SENSITIVE: []
1677
+ end
1678
+
1517
1679
  class RuleOption
1518
1680
  attr_accessor keyword: ::String
1519
1681
  attr_accessor settings: ::Array[::String]
@@ -1631,6 +1793,12 @@ module Aws::NetworkFirewall
1631
1793
  SENSITIVE: []
1632
1794
  end
1633
1795
 
1796
+ class StatefulEngineOptionsV2
1797
+ attr_accessor stream_exception_policy: ("DROP" | "REJECT")
1798
+ attr_accessor flow_timeouts: Types::FlowTimeouts
1799
+ SENSITIVE: []
1800
+ end
1801
+
1634
1802
  class StatefulRule
1635
1803
  attr_accessor action: ("PASS" | "DROP" | "ALERT" | "REJECT")
1636
1804
  attr_accessor header: Types::Header
@@ -1931,6 +2099,23 @@ module Aws::NetworkFirewall
1931
2099
  SENSITIVE: []
1932
2100
  end
1933
2101
 
2102
+ class UpdateFirewallPolicyV2Request
2103
+ attr_accessor update_token: ::String
2104
+ attr_accessor firewall_policy_v2_arn: ::String
2105
+ attr_accessor firewall_policy_v2_name: ::String
2106
+ attr_accessor firewall_policy_v2: Types::FirewallPolicyV2
2107
+ attr_accessor description: ::String
2108
+ attr_accessor dry_run: bool
2109
+ attr_accessor encryption_configuration: Types::EncryptionConfiguration
2110
+ SENSITIVE: []
2111
+ end
2112
+
2113
+ class UpdateFirewallPolicyV2Response
2114
+ attr_accessor update_token: ::String
2115
+ attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
2116
+ SENSITIVE: []
2117
+ end
2118
+
1934
2119
  class UpdateLoggingConfigurationRequest
1935
2120
  attr_accessor firewall_arn: ::String
1936
2121
  attr_accessor firewall_name: ::String
@@ -2050,8 +2235,10 @@ module Aws::NetworkFirewall
2050
2235
  attr_accessor rule_group_arn: ::String
2051
2236
  attr_accessor rule_group_name: ::String
2052
2237
  attr_accessor rule_group: Types::RuleGroup
2238
+ attr_accessor firewall_rule_group: Types::FirewallRuleGroup
2239
+ attr_accessor ips_rule_group: Types::IpsRuleGroup
2053
2240
  attr_accessor rules: ::String
2054
- attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
2241
+ attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
2055
2242
  attr_accessor description: ::String
2056
2243
  attr_accessor dry_run: bool
2057
2244
  attr_accessor encryption_configuration: Types::EncryptionConfiguration
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-networkfirewall
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.107.0
4
+ version: 1.108.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.266.0
21
+ version: 3.267.0
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.266.0
31
+ version: 3.267.0
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement