aws-sdk-networkfirewall 1.18.0 → 1.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b13f43ce3588c6c4542cafe04c38770518df59d8ac1d51f4544ea0ef03bae8cb
-  data.tar.gz: 2e8adacc2451fe8f264e0b67b870a1bbd700c292a67bb1a9c528b96e4dc66020
+  metadata.gz: be09ee175389ae3449ee0b6b244e4a6cb85248f68ae8bde115ae537d287c18f8
+  data.tar.gz: 7b4ec448cbb2f8e0d3d27ea2df20722412cedd32b9842a29038395da48788ae3
 SHA512:
-  metadata.gz: 9204851dd108b726d1945b131d1c288ddec3987732d9ab6fe12b776b14fe107c607e4bc65dc69406c9edd03f5a319dc0e92728927563a94db9e740caf23809eb
-  data.tar.gz: 57ade2ad3ac3df5424ec6dab830ca3593855995dac31e88c0e6f97b1a5730d61359b2bca58873b7bce112c2a7270c69e0ae6886cc8662c3110711441ad19340a
+  metadata.gz: 8664e5c493bae474d7fa36b98376961f25899deabb5c88192fd346c01af62c79a5697df7de4ce7afb06c3846f9484e7cd02435713fdd5c2c7e459fb61b61f8cf
+  data.tar.gz: '0690ea32a49da14aaf14afa86002f580f6157466b56153b14f10207110acb8cf0776744b136a19658eb2b297af6a7e023866e71e97eff74f31ff1b6bb0d4e5db'

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.19.0 (2022-10-05)
+------------------
+
+* Feature - StreamExceptionPolicy configures how AWS Network Firewall processes traffic when a network connection breaks midstream
+
 1.18.0 (2022-07-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.18.0
+1.19.0

data/lib/aws-sdk-networkfirewall/client.rb

@@ -744,6 +744,7 @@ module Aws::NetworkFirewall
     #       stateful_default_actions: ["CollectionMember_String"],
     #       stateful_engine_options: {
     #         rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
+    #         stream_exception_policy: "DROP", # accepts DROP, CONTINUE
     #       },
     #     },
     #     description: "Description",
@@ -1419,6 +1420,7 @@ module Aws::NetworkFirewall
     #   resp.firewall_policy.stateful_default_actions #=> Array
     #   resp.firewall_policy.stateful_default_actions[0] #=> String
     #   resp.firewall_policy.stateful_engine_options.rule_order #=> String, one of "DEFAULT_ACTION_ORDER", "STRICT_ORDER"
+    #   resp.firewall_policy.stateful_engine_options.stream_exception_policy #=> String, one of "DROP", "CONTINUE"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeFirewallPolicy AWS API Documentation
     #
@@ -2454,6 +2456,7 @@ module Aws::NetworkFirewall
     #       stateful_default_actions: ["CollectionMember_String"],
     #       stateful_engine_options: {
     #         rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
+    #         stream_exception_policy: "DROP", # accepts DROP, CONTINUE
     #       },
     #     },
     #     description: "Description",
@@ -2984,7 +2987,7 @@ module Aws::NetworkFirewall
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-networkfirewall'
-      context[:gem_version] = '1.18.0'
+      context[:gem_version] = '1.19.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-networkfirewall/client_api.rb

@@ -185,6 +185,7 @@ module Aws::NetworkFirewall
     StatelessRuleGroupReferences = Shapes::ListShape.new(name: 'StatelessRuleGroupReferences')
     StatelessRules = Shapes::ListShape.new(name: 'StatelessRules')
     StatelessRulesAndCustomActions = Shapes::StructureShape.new(name: 'StatelessRulesAndCustomActions')
+    StreamExceptionPolicy = Shapes::StringShape.new(name: 'StreamExceptionPolicy')
     SubnetMapping = Shapes::StructureShape.new(name: 'SubnetMapping')
     SubnetMappings = Shapes::ListShape.new(name: 'SubnetMappings')
     SyncState = Shapes::StructureShape.new(name: 'SyncState')
@@ -695,6 +696,7 @@ module Aws::NetworkFirewall
     StatefulActions.member = Shapes::ShapeRef.new(shape: CollectionMember_String)
 
     StatefulEngineOptions.add_member(:rule_order, Shapes::ShapeRef.new(shape: RuleOrder, location_name: "RuleOrder"))
+    StatefulEngineOptions.add_member(:stream_exception_policy, Shapes::ShapeRef.new(shape: StreamExceptionPolicy, location_name: "StreamExceptionPolicy"))
     StatefulEngineOptions.struct_class = Types::StatefulEngineOptions
 
     StatefulRule.add_member(:action, Shapes::ShapeRef.new(shape: StatefulAction, required: true, location_name: "Action"))

data/lib/aws-sdk-networkfirewall/types.rb

@@ -413,6 +413,7 @@ module Aws::NetworkFirewall
     #           stateful_default_actions: ["CollectionMember_String"],
     #           stateful_engine_options: {
     #             rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
+    #             stream_exception_policy: "DROP", # accepts DROP, CONTINUE
     #           },
     #         },
     #         description: "Description",
@@ -1933,6 +1934,7 @@ module Aws::NetworkFirewall
     #         stateful_default_actions: ["CollectionMember_String"],
     #         stateful_engine_options: {
     #           rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
+    #           stream_exception_policy: "DROP", # accepts DROP, CONTINUE
     #         },
     #       }
     #
@@ -3711,7 +3713,7 @@ module Aws::NetworkFirewall
     #
     #
     #
-    #   [1]: https://suricata.readthedocs.io/en/suricata-5.0.0/rules/intro.html#
+    #   [1]: https://suricata.readthedocs.io/rules/intro.html#
     #   @return [Array<Types::StatefulRule>]
     #
     # @!attribute [rw] stateless_rules_and_custom_actions
@@ -3837,6 +3839,7 @@ module Aws::NetworkFirewall
     #
     #       {
     #         rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
+    #         stream_exception_policy: "DROP", # accepts DROP, CONTINUE
     #       }
     #
     # @!attribute [rw] rule_order
@@ -3852,10 +3855,31 @@ module Aws::NetworkFirewall
     #   [1]: https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html
     #   @return [String]
     #
+    # @!attribute [rw] stream_exception_policy
+    #   Configures how Network Firewall processes traffic when a network
+    #   connection breaks midstream. Network connections can break due to
+    #   disruptions in external networks or within the firewall itself.
+    #
+    #   * `DROP` - Network Firewall fails closed and drops all subsequent
+    #     traffic going to the firewall. This is the default behavior.
+    #
+    #   * `CONTINUE` - Network Firewall continues to apply rules to the
+    #     subsequent traffic without context from traffic before the break.
+    #     This impacts the behavior of rules that depend on this context.
+    #     For example, if you have a stateful rule to `drop http` traffic,
+    #     Network Firewall won't match the traffic for this rule because
+    #     the service won't have the context from session initialization
+    #     defining the application layer protocol as HTTP. However, this
+    #     behavior is rule dependent—a TCP-layer rule using a
+    #     `flow:stateless` rule would still match, as would the
+    #     `aws:drop_strict` default action.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/StatefulEngineOptions AWS API Documentation
     #
     class StatefulEngineOptions < Struct.new(
-      :rule_order)
+      :rule_order,
+      :stream_exception_policy)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3868,7 +3892,7 @@ module Aws::NetworkFirewall
     #
     #
     #
-    # [1]: https://suricata.readthedocs.io/en/suricata-5.0.0/rules/intro.html#
+    # [1]: https://suricata.readthedocs.io/rules/intro.html#
     #
     # @note When making an API call, you may pass StatefulRule
     #   data as a hash:
@@ -4953,6 +4977,7 @@ module Aws::NetworkFirewall
     #           stateful_default_actions: ["CollectionMember_String"],
     #           stateful_engine_options: {
     #             rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
+    #             stream_exception_policy: "DROP", # accepts DROP, CONTINUE
     #           },
     #         },
     #         description: "Description",

data/lib/aws-sdk-networkfirewall.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-networkfirewall/customizations'
 # @!group service
 module Aws::NetworkFirewall
 
-  GEM_VERSION = '1.18.0'
+  GEM_VERSION = '1.19.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-networkfirewall
 version: !ruby/object:Gem::Version
-  version: 1.18.0
+  version: 1.19.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-07-21 00:00:00.000000000 Z
+date: 2022-10-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core