aws-sdk-networkfirewall 1.68.0 → 1.70.0

data/lib/aws-sdk-networkfirewall.rb

@@ -23,7 +23,7 @@ Aws::Plugins::GlobalConfiguration.add_identifier(:networkfirewall)
 # structure.
 #
 #     network_firewall = Aws::NetworkFirewall::Client.new
-#     resp = network_firewall.associate_firewall_policy(params)
+#     resp = network_firewall.accept_network_firewall_transit_gateway_attachment(params)
 #
 # See {Client} for more information.
 #
@@ -54,7 +54,7 @@ module Aws::NetworkFirewall
   autoload :EndpointProvider, 'aws-sdk-networkfirewall/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-networkfirewall/endpoints'
 
-  GEM_VERSION = '1.68.0'
+  GEM_VERSION = '1.70.0'
 
 end
 

data/sig/client.rbs

@@ -78,6 +78,37 @@ module Aws
                   | (?Hash[Symbol, untyped]) -> instance
 
 
+      interface _AcceptNetworkFirewallTransitGatewayAttachmentResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::AcceptNetworkFirewallTransitGatewayAttachmentResponse]
+        def transit_gateway_attachment_id: () -> ::String
+        def transit_gateway_attachment_status: () -> ("CREATING" | "DELETING" | "DELETED" | "FAILED" | "ERROR" | "READY" | "PENDING_ACCEPTANCE" | "REJECTING" | "REJECTED")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#accept_network_firewall_transit_gateway_attachment-instance_method
+      def accept_network_firewall_transit_gateway_attachment: (
+                                                                transit_gateway_attachment_id: ::String
+                                                              ) -> _AcceptNetworkFirewallTransitGatewayAttachmentResponseSuccess
+                                                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AcceptNetworkFirewallTransitGatewayAttachmentResponseSuccess
+
+      interface _AssociateAvailabilityZonesResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::AssociateAvailabilityZonesResponse]
+        def firewall_arn: () -> ::String
+        def firewall_name: () -> ::String
+        def availability_zone_mappings: () -> ::Array[Types::AvailabilityZoneMapping]
+        def update_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#associate_availability_zones-instance_method
+      def associate_availability_zones: (
+                                          ?update_token: ::String,
+                                          ?firewall_arn: ::String,
+                                          ?firewall_name: ::String,
+                                          availability_zone_mappings: Array[
+                                            {
+                                              availability_zone: ::String
+                                            },
+                                          ]
+                                        ) -> _AssociateAvailabilityZonesResponseSuccess
+                                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AssociateAvailabilityZonesResponseSuccess
+
       interface _AssociateFirewallPolicyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::AssociateFirewallPolicyResponse]
         def firewall_arn: () -> ::String
@@ -145,7 +176,14 @@ module Aws
                                key_id: ::String?,
                                type: ("CUSTOMER_KMS" | "AWS_OWNED_KMS_KEY")
                              },
-                             ?enabled_analysis_types: Array[("TLS_SNI" | "HTTP_HOST")]
+                             ?enabled_analysis_types: Array[("TLS_SNI" | "HTTP_HOST")],
+                             ?transit_gateway_id: ::String,
+                             ?availability_zone_mappings: Array[
+                               {
+                                 availability_zone: ::String
+                               },
+                             ],
+                             ?availability_zone_change_protection: bool
                            ) -> _CreateFirewallResponseSuccess
                          | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateFirewallResponseSuccess
 
@@ -186,7 +224,8 @@ module Aws
                                           priority: ::Integer?,
                                           override: {
                                             action: ("DROP_TO_ALERT")?
-                                          }?
+                                          }?,
+                                          deep_threat_inspection: bool?
                                         },
                                       ]?,
                                       stateful_default_actions: Array[::String]?,
@@ -252,7 +291,7 @@ module Aws
                                      {
                                        action: ("PASS" | "DROP" | "ALERT" | "REJECT"),
                                        header: {
-                                         protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "IMAP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP"),
+                                         protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "IMAP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP" | "HTTP2" | "QUIC"),
                                          source: ::String,
                                          source_port: ::String,
                                          direction: ("FORWARD" | "ANY"),
@@ -346,7 +385,10 @@ module Aws
                                  source_arn: ::String?,
                                  source_update_token: ::String?
                                },
-                               ?analyze_rule_group: bool
+                               ?analyze_rule_group: bool,
+                               ?summary_configuration: {
+                                 rule_options: Array[("SID" | "MSG" | "METADATA")]?
+                               }
                              ) -> _CreateRuleGroupResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateRuleGroupResponseSuccess
 
@@ -461,6 +503,17 @@ module Aws
                                   ) -> _DeleteFirewallPolicyResponseSuccess
                                 | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteFirewallPolicyResponseSuccess
 
+      interface _DeleteNetworkFirewallTransitGatewayAttachmentResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DeleteNetworkFirewallTransitGatewayAttachmentResponse]
+        def transit_gateway_attachment_id: () -> ::String
+        def transit_gateway_attachment_status: () -> ("CREATING" | "DELETING" | "DELETED" | "FAILED" | "ERROR" | "READY" | "PENDING_ACCEPTANCE" | "REJECTING" | "REJECTED")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#delete_network_firewall_transit_gateway_attachment-instance_method
+      def delete_network_firewall_transit_gateway_attachment: (
+                                                                transit_gateway_attachment_id: ::String
+                                                              ) -> _DeleteNetworkFirewallTransitGatewayAttachmentResponseSuccess
+                                                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteNetworkFirewallTransitGatewayAttachmentResponseSuccess
+
       interface _DeleteResourcePolicyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DeleteResourcePolicyResponse]
       end
@@ -524,6 +577,7 @@ module Aws
         def description: () -> ::String
         def status: () -> ("PROVISIONING" | "DELETING" | "READY")
         def supported_availability_zones: () -> ::Hash[::String, Types::AvailabilityZoneMetadata]
+        def transit_gateway_attachment_id: () -> ::String
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#describe_firewall_metadata-instance_method
       def describe_firewall_metadata: (
@@ -623,6 +677,20 @@ module Aws
                                         ) -> _DescribeRuleGroupMetadataResponseSuccess
                                       | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupMetadataResponseSuccess
 
+      interface _DescribeRuleGroupSummaryResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DescribeRuleGroupSummaryResponse]
+        def rule_group_name: () -> ::String
+        def description: () -> ::String
+        def summary: () -> Types::Summary
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#describe_rule_group_summary-instance_method
+      def describe_rule_group_summary: (
+                                         ?rule_group_name: ::String,
+                                         ?rule_group_arn: ::String,
+                                         ?type: ("STATELESS" | "STATEFUL")
+                                       ) -> _DescribeRuleGroupSummaryResponseSuccess
+                                     | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupSummaryResponseSuccess
+
       interface _DescribeTLSInspectionConfigurationResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeTLSInspectionConfigurationResponse]
         def update_token: () -> ::String
@@ -647,6 +715,26 @@ module Aws
                                              ) -> _DescribeVpcEndpointAssociationResponseSuccess
                                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeVpcEndpointAssociationResponseSuccess
 
+      interface _DisassociateAvailabilityZonesResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DisassociateAvailabilityZonesResponse]
+        def firewall_arn: () -> ::String
+        def firewall_name: () -> ::String
+        def availability_zone_mappings: () -> ::Array[Types::AvailabilityZoneMapping]
+        def update_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#disassociate_availability_zones-instance_method
+      def disassociate_availability_zones: (
+                                             ?update_token: ::String,
+                                             ?firewall_arn: ::String,
+                                             ?firewall_name: ::String,
+                                             availability_zone_mappings: Array[
+                                               {
+                                                 availability_zone: ::String
+                                               },
+                                             ]
+                                           ) -> _DisassociateAvailabilityZonesResponseSuccess
+                                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DisassociateAvailabilityZonesResponseSuccess
+
       interface _DisassociateSubnetsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DisassociateSubnetsResponse]
         def firewall_arn: () -> ::String
@@ -774,7 +862,7 @@ module Aws
                               ?next_token: ::String,
                               ?max_results: ::Integer,
                               ?scope: ("MANAGED" | "ACCOUNT"),
-                              ?managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS"),
+                              ?managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE"),
                               ?type: ("STATELESS" | "STATEFUL")
                             ) -> _ListRuleGroupsResponseSuccess
                           | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListRuleGroupsResponseSuccess
@@ -827,6 +915,17 @@ module Aws
                                ) -> _PutResourcePolicyResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutResourcePolicyResponseSuccess
 
+      interface _RejectNetworkFirewallTransitGatewayAttachmentResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::RejectNetworkFirewallTransitGatewayAttachmentResponse]
+        def transit_gateway_attachment_id: () -> ::String
+        def transit_gateway_attachment_status: () -> ("CREATING" | "DELETING" | "DELETED" | "FAILED" | "ERROR" | "READY" | "PENDING_ACCEPTANCE" | "REJECTING" | "REJECTED")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#reject_network_firewall_transit_gateway_attachment-instance_method
+      def reject_network_firewall_transit_gateway_attachment: (
+                                                                transit_gateway_attachment_id: ::String
+                                                              ) -> _RejectNetworkFirewallTransitGatewayAttachmentResponseSuccess
+                                                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RejectNetworkFirewallTransitGatewayAttachmentResponseSuccess
+
       interface _StartAnalysisReportResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::StartAnalysisReportResponse]
         def analysis_report_id: () -> ::String
@@ -922,6 +1021,22 @@ module Aws
                           ) -> _UntagResourceResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UntagResourceResponseSuccess
 
+      interface _UpdateAvailabilityZoneChangeProtectionResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::UpdateAvailabilityZoneChangeProtectionResponse]
+        def update_token: () -> ::String
+        def firewall_arn: () -> ::String
+        def firewall_name: () -> ::String
+        def availability_zone_change_protection: () -> bool
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#update_availability_zone_change_protection-instance_method
+      def update_availability_zone_change_protection: (
+                                                        ?update_token: ::String,
+                                                        ?firewall_arn: ::String,
+                                                        ?firewall_name: ::String,
+                                                        availability_zone_change_protection: bool
+                                                      ) -> _UpdateAvailabilityZoneChangeProtectionResponseSuccess
+                                                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateAvailabilityZoneChangeProtectionResponseSuccess
+
       interface _UpdateFirewallAnalysisSettingsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::UpdateFirewallAnalysisSettingsResponse]
         def enabled_analysis_types: () -> ::Array[("TLS_SNI" | "HTTP_HOST")]
@@ -1028,7 +1143,8 @@ module Aws
                                           priority: ::Integer?,
                                           override: {
                                             action: ("DROP_TO_ALERT")?
-                                          }?
+                                          }?,
+                                          deep_threat_inspection: bool?
                                         },
                                       ]?,
                                       stateful_default_actions: Array[::String]?,
@@ -1130,7 +1246,7 @@ module Aws
                                      {
                                        action: ("PASS" | "DROP" | "ALERT" | "REJECT"),
                                        header: {
-                                         protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "IMAP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP"),
+                                         protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "IMAP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP" | "HTTP2" | "QUIC"),
                                          source: ::String,
                                          source_port: ::String,
                                          direction: ("FORWARD" | "ANY"),
@@ -1217,7 +1333,10 @@ module Aws
                                  source_arn: ::String?,
                                  source_update_token: ::String?
                                },
-                               ?analyze_rule_group: bool
+                               ?analyze_rule_group: bool,
+                               ?summary_configuration: {
+                                 rule_options: Array[("SID" | "MSG" | "METADATA")]?
+                               }
                              ) -> _UpdateRuleGroupResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateRuleGroupResponseSuccess
 

data/sig/types.rbs

@@ -13,6 +13,17 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class AcceptNetworkFirewallTransitGatewayAttachmentRequest
+      attr_accessor transit_gateway_attachment_id: ::String
+      SENSITIVE: []
+    end
+
+    class AcceptNetworkFirewallTransitGatewayAttachmentResponse
+      attr_accessor transit_gateway_attachment_id: ::String
+      attr_accessor transit_gateway_attachment_status: ("CREATING" | "DELETING" | "DELETED" | "FAILED" | "ERROR" | "READY" | "PENDING_ACCEPTANCE" | "REJECTING" | "REJECTED")
+      SENSITIVE: []
+    end
+
     class ActionDefinition
       attr_accessor publish_metric_action: Types::PublishMetricAction
       SENSITIVE: []
@@ -48,6 +59,22 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class AssociateAvailabilityZonesRequest
+      attr_accessor update_token: ::String
+      attr_accessor firewall_arn: ::String
+      attr_accessor firewall_name: ::String
+      attr_accessor availability_zone_mappings: ::Array[Types::AvailabilityZoneMapping]
+      SENSITIVE: []
+    end
+
+    class AssociateAvailabilityZonesResponse
+      attr_accessor firewall_arn: ::String
+      attr_accessor firewall_name: ::String
+      attr_accessor availability_zone_mappings: ::Array[Types::AvailabilityZoneMapping]
+      attr_accessor update_token: ::String
+      SENSITIVE: []
+    end
+
     class AssociateFirewallPolicyRequest
       attr_accessor update_token: ::String
       attr_accessor firewall_arn: ::String
@@ -88,6 +115,11 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class AvailabilityZoneMapping
+      attr_accessor availability_zone: ::String
+      SENSITIVE: []
+    end
+
     class AvailabilityZoneMetadata
       attr_accessor ip_address_type: ("DUALSTACK" | "IPV4" | "IPV6")
       SENSITIVE: []
@@ -139,6 +171,9 @@ module Aws::NetworkFirewall
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor encryption_configuration: Types::EncryptionConfiguration
       attr_accessor enabled_analysis_types: ::Array[("TLS_SNI" | "HTTP_HOST")]
+      attr_accessor transit_gateway_id: ::String
+      attr_accessor availability_zone_mappings: ::Array[Types::AvailabilityZoneMapping]
+      attr_accessor availability_zone_change_protection: bool
       SENSITIVE: []
     end
 
@@ -160,6 +195,7 @@ module Aws::NetworkFirewall
       attr_accessor encryption_configuration: Types::EncryptionConfiguration
       attr_accessor source_metadata: Types::SourceMetadata
       attr_accessor analyze_rule_group: bool
+      attr_accessor summary_configuration: Types::SummaryConfiguration
       SENSITIVE: []
     end
 
@@ -228,6 +264,17 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class DeleteNetworkFirewallTransitGatewayAttachmentRequest
+      attr_accessor transit_gateway_attachment_id: ::String
+      SENSITIVE: []
+    end
+
+    class DeleteNetworkFirewallTransitGatewayAttachmentResponse
+      attr_accessor transit_gateway_attachment_id: ::String
+      attr_accessor transit_gateway_attachment_status: ("CREATING" | "DELETING" | "DELETED" | "FAILED" | "ERROR" | "READY" | "PENDING_ACCEPTANCE" | "REJECTING" | "REJECTED")
+      SENSITIVE: []
+    end
+
     class DeleteResourcePolicyRequest
       attr_accessor resource_arn: ::String
       SENSITIVE: []
@@ -281,6 +328,7 @@ module Aws::NetworkFirewall
       attr_accessor description: ::String
       attr_accessor status: ("PROVISIONING" | "DELETING" | "READY")
       attr_accessor supported_availability_zones: ::Hash[::String, Types::AvailabilityZoneMetadata]
+      attr_accessor transit_gateway_attachment_id: ::String
       SENSITIVE: []
     end
 
@@ -389,6 +437,20 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class DescribeRuleGroupSummaryRequest
+      attr_accessor rule_group_name: ::String
+      attr_accessor rule_group_arn: ::String
+      attr_accessor type: ("STATELESS" | "STATEFUL")
+      SENSITIVE: []
+    end
+
+    class DescribeRuleGroupSummaryResponse
+      attr_accessor rule_group_name: ::String
+      attr_accessor description: ::String
+      attr_accessor summary: Types::Summary
+      SENSITIVE: []
+    end
+
     class DescribeTLSInspectionConfigurationRequest
       attr_accessor tls_inspection_configuration_arn: ::String
       attr_accessor tls_inspection_configuration_name: ::String
@@ -418,6 +480,22 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class DisassociateAvailabilityZonesRequest
+      attr_accessor update_token: ::String
+      attr_accessor firewall_arn: ::String
+      attr_accessor firewall_name: ::String
+      attr_accessor availability_zone_mappings: ::Array[Types::AvailabilityZoneMapping]
+      SENSITIVE: []
+    end
+
+    class DisassociateAvailabilityZonesResponse
+      attr_accessor firewall_arn: ::String
+      attr_accessor firewall_name: ::String
+      attr_accessor availability_zone_mappings: ::Array[Types::AvailabilityZoneMapping]
+      attr_accessor update_token: ::String
+      SENSITIVE: []
+    end
+
     class DisassociateSubnetsRequest
       attr_accessor update_token: ::String
       attr_accessor firewall_arn: ::String
@@ -455,12 +533,17 @@ module Aws::NetworkFirewall
       attr_accessor encryption_configuration: Types::EncryptionConfiguration
       attr_accessor number_of_associations: ::Integer
       attr_accessor enabled_analysis_types: ::Array[("TLS_SNI" | "HTTP_HOST")]
+      attr_accessor transit_gateway_id: ::String
+      attr_accessor transit_gateway_owner_account_id: ::String
+      attr_accessor availability_zone_mappings: ::Array[Types::AvailabilityZoneMapping]
+      attr_accessor availability_zone_change_protection: bool
       SENSITIVE: []
     end
 
     class FirewallMetadata
       attr_accessor firewall_name: ::String
       attr_accessor firewall_arn: ::String
+      attr_accessor transit_gateway_attachment_id: ::String
       SENSITIVE: []
     end
 
@@ -503,6 +586,7 @@ module Aws::NetworkFirewall
       attr_accessor configuration_sync_state_summary: ("PENDING" | "IN_SYNC" | "CAPACITY_CONSTRAINED")
       attr_accessor sync_states: ::Hash[::String, Types::SyncState]
       attr_accessor capacity_usage_summary: Types::CapacityUsageSummary
+      attr_accessor transit_gateway_attachment_sync_state: Types::TransitGatewayAttachmentSyncState
       SENSITIVE: []
     end
 
@@ -567,7 +651,7 @@ module Aws::NetworkFirewall
     end
 
     class Header
-      attr_accessor protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "IMAP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP")
+      attr_accessor protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "IMAP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP" | "HTTP2" | "QUIC")
       attr_accessor source: ::String
       attr_accessor source_port: ::String
       attr_accessor direction: ("FORWARD" | "ANY")
@@ -716,7 +800,7 @@ module Aws::NetworkFirewall
       attr_accessor next_token: ::String
       attr_accessor max_results: ::Integer
       attr_accessor scope: ("MANAGED" | "ACCOUNT")
-      attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS")
+      attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE")
       attr_accessor type: ("STATELESS" | "STATEFUL")
       SENSITIVE: []
     end
@@ -833,6 +917,17 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class RejectNetworkFirewallTransitGatewayAttachmentRequest
+      attr_accessor transit_gateway_attachment_id: ::String
+      SENSITIVE: []
+    end
+
+    class RejectNetworkFirewallTransitGatewayAttachmentResponse
+      attr_accessor transit_gateway_attachment_id: ::String
+      attr_accessor transit_gateway_attachment_status: ("CREATING" | "DELETING" | "DELETED" | "FAILED" | "ERROR" | "READY" | "PENDING_ACCEPTANCE" | "REJECTING" | "REJECTED")
+      SENSITIVE: []
+    end
+
     class ResourceNotFoundException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -879,6 +974,7 @@ module Aws::NetworkFirewall
       attr_accessor sns_topic: ::String
       attr_accessor last_modified_time: ::Time
       attr_accessor analysis_results: ::Array[Types::AnalysisResult]
+      attr_accessor summary_configuration: Types::SummaryConfiguration
       SENSITIVE: []
     end
 
@@ -888,6 +984,13 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class RuleSummary
+      attr_accessor sid: ::String
+      attr_accessor msg: ::String
+      attr_accessor metadata: ::String
+      SENSITIVE: []
+    end
+
     class RuleVariables
       attr_accessor ip_sets: ::Hash[::String, Types::IPSet]
       attr_accessor port_sets: ::Hash[::String, Types::PortSet]
@@ -1006,6 +1109,7 @@ module Aws::NetworkFirewall
       attr_accessor resource_arn: ::String
       attr_accessor priority: ::Integer
       attr_accessor override: Types::StatefulRuleGroupOverride
+      attr_accessor deep_threat_inspection: bool
       SENSITIVE: []
     end
 
@@ -1038,6 +1142,16 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class Summary
+      attr_accessor rule_summaries: ::Array[Types::RuleSummary]
+      SENSITIVE: []
+    end
+
+    class SummaryConfiguration
+      attr_accessor rule_options: ::Array[("SID" | "MSG" | "METADATA")]
+      SENSITIVE: []
+    end
+
     class SyncState
       attr_accessor attachment: Types::Attachment
       attr_accessor config: ::Hash[::String, Types::PerObjectStatus]
@@ -1104,6 +1218,13 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class TransitGatewayAttachmentSyncState
+      attr_accessor attachment_id: ::String
+      attr_accessor transit_gateway_attachment_status: ("CREATING" | "DELETING" | "DELETED" | "FAILED" | "ERROR" | "READY" | "PENDING_ACCEPTANCE" | "REJECTING" | "REJECTED")
+      attr_accessor status_message: ::String
+      SENSITIVE: []
+    end
+
     class UniqueSources
       attr_accessor count: ::Integer
       SENSITIVE: []
@@ -1123,6 +1244,22 @@ module Aws::NetworkFirewall
     class UntagResourceResponse < Aws::EmptyStructure
     end
 
+    class UpdateAvailabilityZoneChangeProtectionRequest
+      attr_accessor update_token: ::String
+      attr_accessor firewall_arn: ::String
+      attr_accessor firewall_name: ::String
+      attr_accessor availability_zone_change_protection: bool
+      SENSITIVE: []
+    end
+
+    class UpdateAvailabilityZoneChangeProtectionResponse
+      attr_accessor update_token: ::String
+      attr_accessor firewall_arn: ::String
+      attr_accessor firewall_name: ::String
+      attr_accessor availability_zone_change_protection: bool
+      SENSITIVE: []
+    end
+
     class UpdateFirewallAnalysisSettingsRequest
       attr_accessor enabled_analysis_types: ::Array[("TLS_SNI" | "HTTP_HOST")]
       attr_accessor firewall_arn: ::String
@@ -1248,6 +1385,7 @@ module Aws::NetworkFirewall
       attr_accessor encryption_configuration: Types::EncryptionConfiguration
       attr_accessor source_metadata: Types::SourceMetadata
       attr_accessor analyze_rule_group: bool
+      attr_accessor summary_configuration: Types::SummaryConfiguration
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-networkfirewall
 version: !ruby/object:Gem::Version
-  version: 1.68.0
+  version: 1.70.0
 platform: ruby
 authors:
 - Amazon Web Services