aws-sdk-networkfirewall 1.107.0 → 1.108.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-networkfirewall/client.rb +1001 -36
- data/lib/aws-sdk-networkfirewall/client_api.rb +260 -0
- data/lib/aws-sdk-networkfirewall/types.rb +1227 -76
- data/lib/aws-sdk-networkfirewall.rb +1 -1
- data/sig/client.rbs +97 -9
- data/sig/params.rbs +105 -9
- data/sig/types.rbs +196 -9
- metadata +3 -3
data/sig/types.rbs
CHANGED
|
@@ -213,6 +213,22 @@ module Aws::NetworkFirewall
|
|
|
213
213
|
SENSITIVE: []
|
|
214
214
|
end
|
|
215
215
|
|
|
216
|
+
class CreateFirewallPolicyV2Request
|
|
217
|
+
attr_accessor firewall_policy_v2_name: ::String
|
|
218
|
+
attr_accessor firewall_policy_v2: Types::FirewallPolicyV2
|
|
219
|
+
attr_accessor description: ::String
|
|
220
|
+
attr_accessor tags: ::Array[Types::Tag]
|
|
221
|
+
attr_accessor dry_run: bool
|
|
222
|
+
attr_accessor encryption_configuration: Types::EncryptionConfiguration
|
|
223
|
+
SENSITIVE: []
|
|
224
|
+
end
|
|
225
|
+
|
|
226
|
+
class CreateFirewallPolicyV2Response
|
|
227
|
+
attr_accessor update_token: ::String
|
|
228
|
+
attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
|
|
229
|
+
SENSITIVE: []
|
|
230
|
+
end
|
|
231
|
+
|
|
216
232
|
class CreateFirewallRequest
|
|
217
233
|
attr_accessor firewall_name: ::String
|
|
218
234
|
attr_accessor firewall_policy_arn: ::String
|
|
@@ -320,8 +336,10 @@ module Aws::NetworkFirewall
|
|
|
320
336
|
class CreateRuleGroupRequest
|
|
321
337
|
attr_accessor rule_group_name: ::String
|
|
322
338
|
attr_accessor rule_group: Types::RuleGroup
|
|
339
|
+
attr_accessor firewall_rule_group: Types::FirewallRuleGroup
|
|
340
|
+
attr_accessor ips_rule_group: Types::IpsRuleGroup
|
|
323
341
|
attr_accessor rules: ::String
|
|
324
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
342
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
325
343
|
attr_accessor description: ::String
|
|
326
344
|
attr_accessor capacity: ::Integer
|
|
327
345
|
attr_accessor tags: ::Array[Types::Tag]
|
|
@@ -399,6 +417,17 @@ module Aws::NetworkFirewall
|
|
|
399
417
|
SENSITIVE: []
|
|
400
418
|
end
|
|
401
419
|
|
|
420
|
+
class DeleteFirewallPolicyV2Request
|
|
421
|
+
attr_accessor firewall_policy_v2_arn: ::String
|
|
422
|
+
attr_accessor firewall_policy_v2_name: ::String
|
|
423
|
+
SENSITIVE: []
|
|
424
|
+
end
|
|
425
|
+
|
|
426
|
+
class DeleteFirewallPolicyV2Response
|
|
427
|
+
attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
|
|
428
|
+
SENSITIVE: []
|
|
429
|
+
end
|
|
430
|
+
|
|
402
431
|
class DeleteFirewallRequest
|
|
403
432
|
attr_accessor firewall_name: ::String
|
|
404
433
|
attr_accessor firewall_arn: ::String
|
|
@@ -483,7 +512,7 @@ module Aws::NetworkFirewall
|
|
|
483
512
|
class DeleteRuleGroupRequest
|
|
484
513
|
attr_accessor rule_group_name: ::String
|
|
485
514
|
attr_accessor rule_group_arn: ::String
|
|
486
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
515
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
487
516
|
SENSITIVE: []
|
|
488
517
|
end
|
|
489
518
|
|
|
@@ -562,6 +591,20 @@ module Aws::NetworkFirewall
|
|
|
562
591
|
SENSITIVE: []
|
|
563
592
|
end
|
|
564
593
|
|
|
594
|
+
class DescribeFirewallPolicyV2Request
|
|
595
|
+
attr_accessor firewall_policy_v2_arn: ::String
|
|
596
|
+
attr_accessor firewall_policy_v2_name: ::String
|
|
597
|
+
attr_accessor rule_output_format: ("FIREWALL_RULES" | "RULES_STRING")
|
|
598
|
+
SENSITIVE: []
|
|
599
|
+
end
|
|
600
|
+
|
|
601
|
+
class DescribeFirewallPolicyV2Response
|
|
602
|
+
attr_accessor update_token: ::String
|
|
603
|
+
attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
|
|
604
|
+
attr_accessor firewall_policy_v2: Types::FirewallPolicyV2
|
|
605
|
+
SENSITIVE: []
|
|
606
|
+
end
|
|
607
|
+
|
|
565
608
|
class DescribeFirewallRequest
|
|
566
609
|
attr_accessor firewall_name: ::String
|
|
567
610
|
attr_accessor firewall_arn: ::String
|
|
@@ -696,7 +739,7 @@ module Aws::NetworkFirewall
|
|
|
696
739
|
class DescribeRuleGroupMetadataRequest
|
|
697
740
|
attr_accessor rule_group_name: ::String
|
|
698
741
|
attr_accessor rule_group_arn: ::String
|
|
699
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
742
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
700
743
|
SENSITIVE: []
|
|
701
744
|
end
|
|
702
745
|
|
|
@@ -704,7 +747,7 @@ module Aws::NetworkFirewall
|
|
|
704
747
|
attr_accessor rule_group_arn: ::String
|
|
705
748
|
attr_accessor rule_group_name: ::String
|
|
706
749
|
attr_accessor description: ::String
|
|
707
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
750
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
708
751
|
attr_accessor capacity: ::Integer
|
|
709
752
|
attr_accessor stateful_rule_options: Types::StatefulRuleOptions
|
|
710
753
|
attr_accessor last_modified_time: ::Time
|
|
@@ -717,14 +760,17 @@ module Aws::NetworkFirewall
|
|
|
717
760
|
class DescribeRuleGroupRequest
|
|
718
761
|
attr_accessor rule_group_name: ::String
|
|
719
762
|
attr_accessor rule_group_arn: ::String
|
|
720
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
763
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
721
764
|
attr_accessor analyze_rule_group: bool
|
|
765
|
+
attr_accessor rule_output_format: ("FIREWALL_RULES" | "RULES_STRING")
|
|
722
766
|
SENSITIVE: []
|
|
723
767
|
end
|
|
724
768
|
|
|
725
769
|
class DescribeRuleGroupResponse
|
|
726
770
|
attr_accessor update_token: ::String
|
|
727
771
|
attr_accessor rule_group: Types::RuleGroup
|
|
772
|
+
attr_accessor firewall_rule_group: Types::FirewallRuleGroup
|
|
773
|
+
attr_accessor ips_rule_group: Types::IpsRuleGroup
|
|
728
774
|
attr_accessor rule_group_response: Types::RuleGroupResponse
|
|
729
775
|
SENSITIVE: []
|
|
730
776
|
end
|
|
@@ -732,7 +778,7 @@ module Aws::NetworkFirewall
|
|
|
732
778
|
class DescribeRuleGroupSummaryRequest
|
|
733
779
|
attr_accessor rule_group_name: ::String
|
|
734
780
|
attr_accessor rule_group_arn: ::String
|
|
735
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
781
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
736
782
|
SENSITIVE: []
|
|
737
783
|
end
|
|
738
784
|
|
|
@@ -904,6 +950,80 @@ module Aws::NetworkFirewall
|
|
|
904
950
|
SENSITIVE: []
|
|
905
951
|
end
|
|
906
952
|
|
|
953
|
+
class FirewallPolicyV2
|
|
954
|
+
attr_accessor firewall_rule_group_entries: ::Array[Types::FirewallRuleGroupEntry]
|
|
955
|
+
attr_accessor ips_rule_group_entries: ::Array[Types::IpsRuleGroupEntry]
|
|
956
|
+
attr_accessor policy_mode: ("ENFORCE" | "MONITOR")
|
|
957
|
+
attr_accessor firewall_default_action: ("DROP" | "ACCEPT" | "REJECT" | "ALERT")
|
|
958
|
+
attr_accessor stateful_engine_options: Types::StatefulEngineOptionsV2
|
|
959
|
+
attr_accessor tls_inspection_configuration_arn: ::String
|
|
960
|
+
attr_accessor policy_variables: Types::PolicyVariables
|
|
961
|
+
attr_accessor route_53_resolved_ip_validation: Types::Route53ResolvedIPValidation
|
|
962
|
+
SENSITIVE: []
|
|
963
|
+
end
|
|
964
|
+
|
|
965
|
+
class FirewallPolicyV2Metadata
|
|
966
|
+
attr_accessor name: ::String
|
|
967
|
+
attr_accessor arn: ::String
|
|
968
|
+
SENSITIVE: []
|
|
969
|
+
end
|
|
970
|
+
|
|
971
|
+
class FirewallPolicyV2Response
|
|
972
|
+
attr_accessor firewall_policy_v2_name: ::String
|
|
973
|
+
attr_accessor firewall_policy_v2_arn: ::String
|
|
974
|
+
attr_accessor firewall_policy_v2_id: ::String
|
|
975
|
+
attr_accessor description: ::String
|
|
976
|
+
attr_accessor firewall_policy_v2_status: ("ACTIVE" | "DELETING" | "ERROR" | "UPDATING")
|
|
977
|
+
attr_accessor status_message: ::String
|
|
978
|
+
attr_accessor tags: ::Array[Types::Tag]
|
|
979
|
+
attr_accessor consumed_firewall_rule_capacity: ::Integer
|
|
980
|
+
attr_accessor consumed_ips_rule_capacity: ::Integer
|
|
981
|
+
attr_accessor consumed_ips_domain_capacity: ::Integer
|
|
982
|
+
attr_accessor number_of_associations: ::Integer
|
|
983
|
+
attr_accessor encryption_configuration: Types::EncryptionConfiguration
|
|
984
|
+
attr_accessor errors: ::Array[Types::FirewallPolicyError]
|
|
985
|
+
attr_accessor last_modified_time: ::Time
|
|
986
|
+
SENSITIVE: []
|
|
987
|
+
end
|
|
988
|
+
|
|
989
|
+
class FirewallRule
|
|
990
|
+
attr_accessor action: ("ACCEPT" | "DROP" | "REJECT" | "REJECT_DST" | "REJECT_BOTH")
|
|
991
|
+
attr_accessor action_scope: ("FLOW" | "TX" | "HOOK" | "PACKET")
|
|
992
|
+
attr_accessor hook: ("TCP_ALL" | "TCP_FLOW_START" | "TCP_PRE_FLOW" | "TCP_PRE_STREAM" | "SCTP_ALL" | "SCTP_FLOW_START" | "SCTP_PRE_FLOW" | "SCTP_PRE_STREAM" | "IPV6_ALL" | "IPV6_FLOW_START" | "IPV6_PRE_FLOW" | "IPV6_PRE_STREAM" | "ICMPV6_ALL" | "ICMPV6_FLOW_START" | "ICMPV6_PRE_FLOW" | "ICMPV6_PRE_STREAM" | "UDP_ALL" | "UDP_FLOW_START" | "UDP_PRE_FLOW" | "UDP_PRE_STREAM" | "ICMP_ALL" | "ICMP_FLOW_START" | "ICMP_PRE_FLOW" | "ICMP_PRE_STREAM" | "ICMPV4_ALL" | "ICMPV4_FLOW_START" | "ICMPV4_PRE_FLOW" | "ICMPV4_PRE_STREAM" | "IP_ALL" | "IP_FLOW_START" | "IP_PRE_FLOW" | "IP_PRE_STREAM" | "IPV4_ALL" | "IPV4_FLOW_START" | "IPV4_PRE_FLOW" | "IPV4_PRE_STREAM" | "TLS_CLIENT_STARTED" | "TLS_CLIENT_HELLO" | "TLS_CLIENT_CERT" | "TLS_CLIENT_DATA" | "TLS_CLIENT_FINISHED" | "TLS_SERVER_STARTED" | "TLS_SERVER_HELLO" | "TLS_SERVER_CERT" | "TLS_SERVER_DATA" | "TLS_SERVER_FINISHED" | "HTTP1_REQUEST_STARTED" | "HTTP1_REQUEST_LINE" | "HTTP1_REQUEST_HEADERS" | "HTTP1_REQUEST_BODY" | "HTTP1_REQUEST_TRAILER" | "HTTP1_REQUEST_COMPLETE" | "HTTP1_RESPONSE_STARTED" | "HTTP1_RESPONSE_LINE" | "HTTP1_RESPONSE_HEADERS" | "HTTP1_RESPONSE_BODY" | "HTTP1_RESPONSE_TRAILER" | "HTTP1_RESPONSE_COMPLETE" | "HTTP2_STREAM_REQUEST_STARTED" | "HTTP2_STREAM_REQUEST_HEADERS" | "HTTP2_STREAM_REQUEST_DATA" | "HTTP2_STREAM_REQUEST_CLOSED" | "HTTP2_STREAM_REQUEST_COMPLETE" | "HTTP2_STREAM_RESPONSE_STARTED" | "HTTP2_STREAM_RESPONSE_HEADERS" | "HTTP2_STREAM_RESPONSE_DATA" | "HTTP2_STREAM_RESPONSE_CLOSED" | "HTTP2_STREAM_RESPONSE_COMPLETE" | "HTTP2_GLOBAL_REQUEST_STARTED" | "HTTP2_GLOBAL_REQUEST_COMPLETE" | "HTTP2_GLOBAL_RESPONSE_STARTED" | "HTTP2_GLOBAL_RESPONSE_COMPLETE" | "DOH2_STREAM_REQUEST_STARTED" | "DOH2_STREAM_REQUEST_HEADERS" | "DOH2_STREAM_REQUEST_DATA" | "DOH2_STREAM_REQUEST_CLOSED" | "DOH2_STREAM_REQUEST_COMPLETE" | "DOH2_STREAM_RESPONSE_STARTED" | "DOH2_STREAM_RESPONSE_HEADERS" | "DOH2_STREAM_RESPONSE_DATA" | "DOH2_STREAM_RESPONSE_CLOSED" | "DOH2_STREAM_RESPONSE_COMPLETE" | "DOH2_GLOBAL_REQUEST_STARTED" | "DOH2_GLOBAL_REQUEST_COMPLETE" | "DOH2_GLOBAL_RESPONSE_STARTED" | "DOH2_GLOBAL_RESPONSE_COMPLETE" | "DNS_REQUEST_STARTED" | "DNS_REQUEST_COMPLETE" | "DNS_RESPONSE_STARTED" | "DNS_RESPONSE_COMPLETE" | "SMTP_REQUEST_STARTED" | "SMTP_REQUEST_DATA" | "SMTP_REQUEST_COMPLETE" | "SMTP_RESPONSE_STARTED" | "SMTP_RESPONSE_DATA" | "SMTP_RESPONSE_COMPLETE" | "FTP_REQUEST_STARTED" | "FTP_REQUEST_COMPLETE" | "FTP_RESPONSE_STARTED" | "FTP_RESPONSE_COMPLETE" | "FTP_DATA_REQUEST_STARTED" | "FTP_DATA_REQUEST_COMPLETE" | "FTP_DATA_RESPONSE_STARTED" | "FTP_DATA_RESPONSE_COMPLETE" | "SMB_REQUEST_STARTED" | "SMB_REQUEST_COMPLETE" | "SMB_RESPONSE_STARTED" | "SMB_RESPONSE_COMPLETE" | "DCERPC_REQUEST_STARTED" | "DCERPC_REQUEST_COMPLETE" | "DCERPC_RESPONSE_STARTED" | "DCERPC_RESPONSE_COMPLETE" | "NFS_REQUEST_STARTED" | "NFS_REQUEST_COMPLETE" | "NFS_RESPONSE_STARTED" | "NFS_RESPONSE_COMPLETE" | "KRB5_REQUEST_STARTED" | "KRB5_REQUEST_COMPLETE" | "KRB5_RESPONSE_STARTED" | "KRB5_RESPONSE_COMPLETE" | "IKE_REQUEST_STARTED" | "IKE_REQUEST_COMPLETE" | "IKE_RESPONSE_STARTED" | "IKE_RESPONSE_COMPLETE" | "TFTP_REQUEST_STARTED" | "TFTP_REQUEST_COMPLETE" | "TFTP_RESPONSE_STARTED" | "TFTP_RESPONSE_COMPLETE" | "DHCP_REQUEST_STARTED" | "DHCP_REQUEST_COMPLETE" | "DHCP_RESPONSE_STARTED" | "DHCP_RESPONSE_COMPLETE" | "QUIC_REQUEST_STARTED" | "QUIC_REQUEST_COMPLETE" | "QUIC_RESPONSE_STARTED" | "QUIC_RESPONSE_COMPLETE" | "RDP_REQUEST_STARTED" | "RDP_REQUEST_COMPLETE" | "RDP_RESPONSE_STARTED" | "RDP_RESPONSE_COMPLETE" | "RFB_REQUEST_STARTED" | "RFB_REQUEST_COMPLETE" | "RFB_RESPONSE_STARTED" | "RFB_RESPONSE_COMPLETE" | "MQTT_REQUEST_STARTED" | "MQTT_REQUEST_COMPLETE" | "MQTT_RESPONSE_STARTED" | "MQTT_RESPONSE_COMPLETE" | "PGSQL_REQUEST_STARTED" | "PGSQL_REQUEST_COMPLETE" | "PGSQL_RESPONSE_STARTED" | "PGSQL_RESPONSE_COMPLETE" | "SNMP_REQUEST_STARTED" | "SNMP_REQUEST_COMPLETE" | "SNMP_RESPONSE_STARTED" | "SNMP_RESPONSE_COMPLETE" | "NTP_REQUEST_STARTED" | "NTP_REQUEST_COMPLETE" | "NTP_RESPONSE_STARTED" | "NTP_RESPONSE_COMPLETE" | "TELNET_REQUEST_STARTED" | "TELNET_REQUEST_COMPLETE" | "TELNET_RESPONSE_STARTED" | "TELNET_RESPONSE_COMPLETE" | "WEBSOCKET_REQUEST_STARTED" | "WEBSOCKET_REQUEST_COMPLETE" | "WEBSOCKET_RESPONSE_STARTED" | "WEBSOCKET_RESPONSE_COMPLETE" | "LDAP_REQUEST_STARTED" | "LDAP_REQUEST_COMPLETE" | "LDAP_RESPONSE_STARTED" | "LDAP_RESPONSE_COMPLETE" | "POP3_REQUEST_STARTED" | "POP3_REQUEST_COMPLETE" | "POP3_RESPONSE_STARTED" | "POP3_RESPONSE_COMPLETE" | "MDNS_REQUEST_STARTED" | "MDNS_REQUEST_COMPLETE" | "MDNS_RESPONSE_STARTED" | "MDNS_RESPONSE_COMPLETE" | "BITTORRENT_DHT_REQUEST_STARTED" | "BITTORRENT_DHT_REQUEST_COMPLETE" | "BITTORRENT_DHT_RESPONSE_STARTED" | "BITTORRENT_DHT_RESPONSE_COMPLETE" | "DNP3_REQUEST_STARTED" | "DNP3_REQUEST_COMPLETE" | "DNP3_RESPONSE_STARTED" | "DNP3_RESPONSE_COMPLETE" | "SSH_REQUEST_IN_PROGRESS" | "SSH_REQUEST_BANNER_WAIT_EOL" | "SSH_REQUEST_BANNER_DONE" | "SSH_REQUEST_FINISHED" | "SSH_RESPONSE_IN_PROGRESS" | "SSH_RESPONSE_BANNER_WAIT_EOL" | "SSH_RESPONSE_BANNER_DONE" | "SSH_RESPONSE_FINISHED")
|
|
993
|
+
attr_accessor protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP" | "HTTP2" | "QUIC" | "ICMPV4" | "ICMPV6" | "SCTP" | "IPV4" | "IPV6" | "DOH2" | "FTP_DATA" | "NFS" | "RDP" | "RFB" | "MQTT" | "PGSQL" | "SNMP" | "TELNET" | "WEBSOCKET" | "LDAP" | "POP3" | "MDNS" | "BITTORRENT_DHT" | "DNP3")
|
|
994
|
+
attr_accessor source_i_ps: ::String
|
|
995
|
+
attr_accessor dest_i_ps: ::String
|
|
996
|
+
attr_accessor source_ports: ::String
|
|
997
|
+
attr_accessor dest_ports: ::String
|
|
998
|
+
attr_accessor rule_options: ::Array[Types::RuleOption]
|
|
999
|
+
attr_accessor accept_prior_hooks: bool
|
|
1000
|
+
attr_accessor alert_enabled: bool
|
|
1001
|
+
attr_accessor bypass_ips_enabled: bool
|
|
1002
|
+
attr_accessor rule_metadata: Types::RuleMetadata
|
|
1003
|
+
SENSITIVE: []
|
|
1004
|
+
end
|
|
1005
|
+
|
|
1006
|
+
class FirewallRuleGroup
|
|
1007
|
+
attr_accessor rules_source: Types::FirewallRulesSource
|
|
1008
|
+
attr_accessor rule_variables: Types::RuleVariables
|
|
1009
|
+
attr_accessor reference_sets: Types::ReferenceSets
|
|
1010
|
+
SENSITIVE: []
|
|
1011
|
+
end
|
|
1012
|
+
|
|
1013
|
+
class FirewallRuleGroupEntry
|
|
1014
|
+
attr_accessor priority: ::Integer
|
|
1015
|
+
attr_accessor resource_arn: ::String
|
|
1016
|
+
attr_accessor inline_rule_group: Types::FirewallRuleGroup
|
|
1017
|
+
SENSITIVE: []
|
|
1018
|
+
end
|
|
1019
|
+
|
|
1020
|
+
class FirewallRulesSource
|
|
1021
|
+
attr_accessor rules_string: ::String
|
|
1022
|
+
attr_accessor firewall_rules: ::Array[Types::FirewallRule]
|
|
1023
|
+
attr_accessor rules_source_list: Types::RulesSourceList
|
|
1024
|
+
SENSITIVE: []
|
|
1025
|
+
end
|
|
1026
|
+
|
|
907
1027
|
class FirewallStatus
|
|
908
1028
|
attr_accessor status: ("PROVISIONING" | "DELETING" | "READY" | "FAILED")
|
|
909
1029
|
attr_accessor configuration_sync_state_summary: ("PENDING" | "IN_SYNC" | "CAPACITY_CONSTRAINED")
|
|
@@ -1033,6 +1153,30 @@ module Aws::NetworkFirewall
|
|
|
1033
1153
|
SENSITIVE: []
|
|
1034
1154
|
end
|
|
1035
1155
|
|
|
1156
|
+
class IpsRuleGroup
|
|
1157
|
+
attr_accessor rules_source: Types::IpsRulesSource
|
|
1158
|
+
attr_accessor rule_variables: Types::RuleVariables
|
|
1159
|
+
attr_accessor reference_sets: Types::ReferenceSets
|
|
1160
|
+
SENSITIVE: []
|
|
1161
|
+
end
|
|
1162
|
+
|
|
1163
|
+
class IpsRuleGroupEntry
|
|
1164
|
+
attr_accessor resource_arn: ::String
|
|
1165
|
+
attr_accessor inline_rule_group: Types::IpsRuleGroup
|
|
1166
|
+
attr_accessor override: Types::IpsRuleGroupOverride
|
|
1167
|
+
SENSITIVE: []
|
|
1168
|
+
end
|
|
1169
|
+
|
|
1170
|
+
class IpsRuleGroupOverride
|
|
1171
|
+
attr_accessor action: ("DROP_TO_ALERT")
|
|
1172
|
+
SENSITIVE: []
|
|
1173
|
+
end
|
|
1174
|
+
|
|
1175
|
+
class IpsRulesSource
|
|
1176
|
+
attr_accessor rules_string: ::String
|
|
1177
|
+
SENSITIVE: []
|
|
1178
|
+
end
|
|
1179
|
+
|
|
1036
1180
|
class LimitExceededException
|
|
1037
1181
|
attr_accessor message: ::String
|
|
1038
1182
|
SENSITIVE: []
|
|
@@ -1076,6 +1220,18 @@ module Aws::NetworkFirewall
|
|
|
1076
1220
|
SENSITIVE: []
|
|
1077
1221
|
end
|
|
1078
1222
|
|
|
1223
|
+
class ListFirewallPoliciesV2Request
|
|
1224
|
+
attr_accessor next_token: ::String
|
|
1225
|
+
attr_accessor max_results: ::Integer
|
|
1226
|
+
SENSITIVE: []
|
|
1227
|
+
end
|
|
1228
|
+
|
|
1229
|
+
class ListFirewallPoliciesV2Response
|
|
1230
|
+
attr_accessor next_token: ::String
|
|
1231
|
+
attr_accessor firewall_policies_v2: ::Array[Types::FirewallPolicyV2Metadata]
|
|
1232
|
+
SENSITIVE: []
|
|
1233
|
+
end
|
|
1234
|
+
|
|
1079
1235
|
class ListFirewallsRequest
|
|
1080
1236
|
attr_accessor next_token: ::String
|
|
1081
1237
|
attr_accessor vpc_ids: ::Array[::String]
|
|
@@ -1176,7 +1332,7 @@ module Aws::NetworkFirewall
|
|
|
1176
1332
|
attr_accessor scope: ("MANAGED" | "ACCOUNT")
|
|
1177
1333
|
attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE" | "PARTNER_MANAGED")
|
|
1178
1334
|
attr_accessor subscription_status: ("NOT_SUBSCRIBED" | "SUBSCRIBED")
|
|
1179
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
1335
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
1180
1336
|
SENSITIVE: []
|
|
1181
1337
|
end
|
|
1182
1338
|
|
|
@@ -1499,7 +1655,7 @@ module Aws::NetworkFirewall
|
|
|
1499
1655
|
attr_accessor rule_group_name: ::String
|
|
1500
1656
|
attr_accessor rule_group_id: ::String
|
|
1501
1657
|
attr_accessor description: ::String
|
|
1502
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
1658
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
1503
1659
|
attr_accessor capacity: ::Integer
|
|
1504
1660
|
attr_accessor rule_group_status: ("ACTIVE" | "DELETING" | "ERROR" | "UPDATING")
|
|
1505
1661
|
attr_accessor tags: ::Array[Types::Tag]
|
|
@@ -1514,6 +1670,12 @@ module Aws::NetworkFirewall
|
|
|
1514
1670
|
SENSITIVE: []
|
|
1515
1671
|
end
|
|
1516
1672
|
|
|
1673
|
+
class RuleMetadata
|
|
1674
|
+
attr_accessor rule_enabled: bool
|
|
1675
|
+
attr_accessor rule_description: ::String
|
|
1676
|
+
SENSITIVE: []
|
|
1677
|
+
end
|
|
1678
|
+
|
|
1517
1679
|
class RuleOption
|
|
1518
1680
|
attr_accessor keyword: ::String
|
|
1519
1681
|
attr_accessor settings: ::Array[::String]
|
|
@@ -1631,6 +1793,12 @@ module Aws::NetworkFirewall
|
|
|
1631
1793
|
SENSITIVE: []
|
|
1632
1794
|
end
|
|
1633
1795
|
|
|
1796
|
+
class StatefulEngineOptionsV2
|
|
1797
|
+
attr_accessor stream_exception_policy: ("DROP" | "REJECT")
|
|
1798
|
+
attr_accessor flow_timeouts: Types::FlowTimeouts
|
|
1799
|
+
SENSITIVE: []
|
|
1800
|
+
end
|
|
1801
|
+
|
|
1634
1802
|
class StatefulRule
|
|
1635
1803
|
attr_accessor action: ("PASS" | "DROP" | "ALERT" | "REJECT")
|
|
1636
1804
|
attr_accessor header: Types::Header
|
|
@@ -1931,6 +2099,23 @@ module Aws::NetworkFirewall
|
|
|
1931
2099
|
SENSITIVE: []
|
|
1932
2100
|
end
|
|
1933
2101
|
|
|
2102
|
+
class UpdateFirewallPolicyV2Request
|
|
2103
|
+
attr_accessor update_token: ::String
|
|
2104
|
+
attr_accessor firewall_policy_v2_arn: ::String
|
|
2105
|
+
attr_accessor firewall_policy_v2_name: ::String
|
|
2106
|
+
attr_accessor firewall_policy_v2: Types::FirewallPolicyV2
|
|
2107
|
+
attr_accessor description: ::String
|
|
2108
|
+
attr_accessor dry_run: bool
|
|
2109
|
+
attr_accessor encryption_configuration: Types::EncryptionConfiguration
|
|
2110
|
+
SENSITIVE: []
|
|
2111
|
+
end
|
|
2112
|
+
|
|
2113
|
+
class UpdateFirewallPolicyV2Response
|
|
2114
|
+
attr_accessor update_token: ::String
|
|
2115
|
+
attr_accessor firewall_policy_v2_response: Types::FirewallPolicyV2Response
|
|
2116
|
+
SENSITIVE: []
|
|
2117
|
+
end
|
|
2118
|
+
|
|
1934
2119
|
class UpdateLoggingConfigurationRequest
|
|
1935
2120
|
attr_accessor firewall_arn: ::String
|
|
1936
2121
|
attr_accessor firewall_name: ::String
|
|
@@ -2050,8 +2235,10 @@ module Aws::NetworkFirewall
|
|
|
2050
2235
|
attr_accessor rule_group_arn: ::String
|
|
2051
2236
|
attr_accessor rule_group_name: ::String
|
|
2052
2237
|
attr_accessor rule_group: Types::RuleGroup
|
|
2238
|
+
attr_accessor firewall_rule_group: Types::FirewallRuleGroup
|
|
2239
|
+
attr_accessor ips_rule_group: Types::IpsRuleGroup
|
|
2053
2240
|
attr_accessor rules: ::String
|
|
2054
|
-
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN")
|
|
2241
|
+
attr_accessor type: ("STATELESS" | "STATEFUL" | "STATEFUL_DOMAIN" | "FIREWALL" | "IPS")
|
|
2055
2242
|
attr_accessor description: ::String
|
|
2056
2243
|
attr_accessor dry_run: bool
|
|
2057
2244
|
attr_accessor encryption_configuration: Types::EncryptionConfiguration
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: aws-sdk-networkfirewall
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.108.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Amazon Web Services
|
|
@@ -18,7 +18,7 @@ dependencies:
|
|
|
18
18
|
version: '3'
|
|
19
19
|
- - ">="
|
|
20
20
|
- !ruby/object:Gem::Version
|
|
21
|
-
version: 3.
|
|
21
|
+
version: 3.267.0
|
|
22
22
|
type: :runtime
|
|
23
23
|
prerelease: false
|
|
24
24
|
version_requirements: !ruby/object:Gem::Requirement
|
|
@@ -28,7 +28,7 @@ dependencies:
|
|
|
28
28
|
version: '3'
|
|
29
29
|
- - ">="
|
|
30
30
|
- !ruby/object:Gem::Version
|
|
31
|
-
version: 3.
|
|
31
|
+
version: 3.267.0
|
|
32
32
|
- !ruby/object:Gem::Dependency
|
|
33
33
|
name: aws-sigv4
|
|
34
34
|
requirement: !ruby/object:Gem::Requirement
|