aws-sdk-networkfirewall 1.69.0 → 1.71.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: cad30eb0730be43dba55f8f37ee7f37fa6154e60acc8b8169a6abf148b9166f2
4
- data.tar.gz: adeec5b752ae386788194748430a990bda96946b679ce8fdc85d430547d7946d
3
+ metadata.gz: f847af9cb779b325bdbb4cc3cabb0bce5a13dbbda625cbed21ec13e0453b9177
4
+ data.tar.gz: 4ad7cede653b56b6a2049f85e4193b1750b7d935192c4aa8e3736451a6c999e8
5
5
  SHA512:
6
- metadata.gz: 6af62b765cd8c67599e28c6ad31fc0094c86719a7b7c7b172f94eec21fc8a7448c35426174910fe03964c7b6b540994d397fa8f439b5795e4107684d2e0254c4
7
- data.tar.gz: 8e076917fc63035dc0ad614b042dd0b07e68005170f1f22d8b578111517a51e16cef815b77044aea543108d413d766ffeaf2ee0ae2aac5b264775e1c7b9b5f30
6
+ metadata.gz: ff49cc8106d8d091e36436d9602446351fd4f994fdf7607524b4c7556e5f48f725c08739f2f80811f3a72c117c8474666f8f861859934242c056708701933314
7
+ data.tar.gz: 6db79fa10438b04fc80e48e91947d4d5a25b00ce741437962ef38ebb72e31539b13d22776b89f0c4f6826529c45129f3fdf61679a2de4d66e65270d69e01887f
data/CHANGELOG.md CHANGED
@@ -1,6 +1,16 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.71.0 (2025-07-21)
5
+ ------------------
6
+
7
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
8
+
9
+ 1.70.0 (2025-06-17)
10
+ ------------------
11
+
12
+ * Feature - Release of Active Threat Defense in Network Firewall
13
+
4
14
  1.69.0 (2025-06-16)
5
15
  ------------------
6
16
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.69.0
1
+ 1.71.0
@@ -95,7 +95,7 @@ module Aws::NetworkFirewall
95
95
  # class name or an instance of a plugin class.
96
96
  #
97
97
  # @option options [required, Aws::CredentialProvider] :credentials
98
- # Your AWS credentials. This can be an instance of any one of the
98
+ # Your AWS credentials used for authentication. This can be an instance of any one of the
99
99
  # following classes:
100
100
  #
101
101
  # * `Aws::Credentials` - Used for configuring static, non-refreshing
@@ -128,18 +128,23 @@ module Aws::NetworkFirewall
128
128
  # locations will be searched for credentials:
129
129
  #
130
130
  # * `Aws.config[:credentials]`
131
+ #
131
132
  # * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
132
133
  # `:account_id` options.
133
- # * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
134
- # ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
134
+ #
135
+ # * `ENV['AWS_ACCESS_KEY_ID']`, `ENV['AWS_SECRET_ACCESS_KEY']`,
136
+ # `ENV['AWS_SESSION_TOKEN']`, and `ENV['AWS_ACCOUNT_ID']`.
137
+ #
135
138
  # * `~/.aws/credentials`
139
+ #
136
140
  # * `~/.aws/config`
141
+ #
137
142
  # * EC2/ECS IMDS instance profile - When used by default, the timeouts
138
143
  # are very aggressive. Construct and pass an instance of
139
144
  # `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
140
145
  # enable retries and extended timeouts. Instance profile credential
141
- # fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
142
- # to true.
146
+ # fetching can be disabled by setting `ENV['AWS_EC2_METADATA_DISABLED']`
147
+ # to `true`.
143
148
  #
144
149
  # @option options [required, String] :region
145
150
  # The AWS region to connect to. The configured `:region` is
@@ -167,6 +172,11 @@ module Aws::NetworkFirewall
167
172
  # When false, the request will raise a `RetryCapacityNotAvailableError` and will
168
173
  # not retry instead of sleeping.
169
174
  #
175
+ # @option options [Array<String>] :auth_scheme_preference
176
+ # A list of preferred authentication schemes to use when making a request. Supported values are:
177
+ # `sigv4`, `sigv4a`, `httpBearerAuth`, and `noAuth`. When set using `ENV['AWS_AUTH_SCHEME_PREFERENCE']` or in
178
+ # shared config as `auth_scheme_preference`, the value should be a comma-separated list.
179
+ #
170
180
  # @option options [Boolean] :client_side_monitoring (false)
171
181
  # When `true`, client-side metrics will be collected for all API requests from
172
182
  # this client.
@@ -253,8 +263,8 @@ module Aws::NetworkFirewall
253
263
  # 4 times. Used in `standard` and `adaptive` retry modes.
254
264
  #
255
265
  # @option options [String] :profile ("default")
256
- # Used when loading credentials from the shared credentials file
257
- # at HOME/.aws/credentials. When not specified, 'default' is used.
266
+ # Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
267
+ # When not specified, 'default' is used.
258
268
  #
259
269
  # @option options [String] :request_checksum_calculation ("when_supported")
260
270
  # Determines when a checksum will be calculated for request payloads. Values are:
@@ -374,7 +384,7 @@ module Aws::NetworkFirewall
374
384
  # `Aws::Telemetry::OTelProvider` for telemetry provider.
375
385
  #
376
386
  # @option options [Aws::TokenProvider] :token_provider
377
- # A Bearer Token Provider. This can be an instance of any one of the
387
+ # Your Bearer token used for authentication. This can be an instance of any one of the
378
388
  # following classes:
379
389
  #
380
390
  # * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
@@ -1054,6 +1064,7 @@ module Aws::NetworkFirewall
1054
1064
  # override: {
1055
1065
  # action: "DROP_TO_ALERT", # accepts DROP_TO_ALERT
1056
1066
  # },
1067
+ # deep_threat_inspection: false,
1057
1068
  # },
1058
1069
  # ],
1059
1070
  # stateful_default_actions: ["CollectionMember_String"],
@@ -1238,6 +1249,17 @@ module Aws::NetworkFirewall
1238
1249
  # the rule group for you. To run the stateless rule group analyzer
1239
1250
  # without creating the rule group, set `DryRun` to `TRUE`.
1240
1251
  #
1252
+ # @option params [Types::SummaryConfiguration] :summary_configuration
1253
+ # An object that contains a `RuleOptions` array of strings. You use
1254
+ # `RuleOptions` to determine which of the following RuleSummary values
1255
+ # are returned in response to `DescribeRuleGroupSummary`.
1256
+ #
1257
+ # * `Metadata` - returns
1258
+ #
1259
+ # * `Msg`
1260
+ #
1261
+ # * `SID`
1262
+ #
1241
1263
  # @return [Types::CreateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1242
1264
  #
1243
1265
  # * {Types::CreateRuleGroupResponse#update_token #update_token} => String
@@ -1373,6 +1395,9 @@ module Aws::NetworkFirewall
1373
1395
  # source_update_token: "UpdateToken",
1374
1396
  # },
1375
1397
  # analyze_rule_group: false,
1398
+ # summary_configuration: {
1399
+ # rule_options: ["SID"], # accepts SID, MSG, METADATA
1400
+ # },
1376
1401
  # })
1377
1402
  #
1378
1403
  # @example Response structure
@@ -1401,6 +1426,8 @@ module Aws::NetworkFirewall
1401
1426
  # resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
1402
1427
  # resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
1403
1428
  # resp.rule_group_response.analysis_results[0].analysis_detail #=> String
1429
+ # resp.rule_group_response.summary_configuration.rule_options #=> Array
1430
+ # resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
1404
1431
  #
1405
1432
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/CreateRuleGroup AWS API Documentation
1406
1433
  #
@@ -1814,7 +1841,7 @@ module Aws::NetworkFirewall
1814
1841
  # the firewall owner or the transit gateway owner can delete the
1815
1842
  # attachment.
1816
1843
  #
1817
- # After you delete a transit gateway attachment, traffic will no longer
1844
+ # After you delete a transit gateway attachment, raffic will no longer
1818
1845
  # flow through the firewall endpoints.
1819
1846
  #
1820
1847
  # After you initiate the delete operation, use DescribeFirewall to
@@ -1933,6 +1960,8 @@ module Aws::NetworkFirewall
1933
1960
  # resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
1934
1961
  # resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
1935
1962
  # resp.rule_group_response.analysis_results[0].analysis_detail #=> String
1963
+ # resp.rule_group_response.summary_configuration.rule_options #=> Array
1964
+ # resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
1936
1965
  #
1937
1966
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DeleteRuleGroup AWS API Documentation
1938
1967
  #
@@ -2232,6 +2261,7 @@ module Aws::NetworkFirewall
2232
2261
  # resp.firewall_policy.stateful_rule_group_references[0].resource_arn #=> String
2233
2262
  # resp.firewall_policy.stateful_rule_group_references[0].priority #=> Integer
2234
2263
  # resp.firewall_policy.stateful_rule_group_references[0].override.action #=> String, one of "DROP_TO_ALERT"
2264
+ # resp.firewall_policy.stateful_rule_group_references[0].deep_threat_inspection #=> Boolean
2235
2265
  # resp.firewall_policy.stateful_default_actions #=> Array
2236
2266
  # resp.firewall_policy.stateful_default_actions[0] #=> String
2237
2267
  # resp.firewall_policy.stateful_engine_options.rule_order #=> String, one of "DEFAULT_ACTION_ORDER", "STRICT_ORDER"
@@ -2523,6 +2553,8 @@ module Aws::NetworkFirewall
2523
2553
  # resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
2524
2554
  # resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
2525
2555
  # resp.rule_group_response.analysis_results[0].analysis_detail #=> String
2556
+ # resp.rule_group_response.summary_configuration.rule_options #=> Array
2557
+ # resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
2526
2558
  #
2527
2559
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroup AWS API Documentation
2528
2560
  #
@@ -2597,6 +2629,69 @@ module Aws::NetworkFirewall
2597
2629
  req.send_request(options)
2598
2630
  end
2599
2631
 
2632
+ # Returns detailed information for a stateful rule group.
2633
+ #
2634
+ # For active threat defense Amazon Web Services managed rule groups,
2635
+ # this operation provides insight into the protections enabled by the
2636
+ # rule group, based on Suricata rule metadata fields. Summaries are
2637
+ # available for rule groups you manage and for active threat defense
2638
+ # Amazon Web Services managed rule groups.
2639
+ #
2640
+ # To modify how threat information appears in summaries, use the
2641
+ # `SummaryConfiguration` parameter in UpdateRuleGroup.
2642
+ #
2643
+ # @option params [String] :rule_group_name
2644
+ # The descriptive name of the rule group. You can't change the name of
2645
+ # a rule group after you create it.
2646
+ #
2647
+ # You must specify the ARN or the name, and you can specify both.
2648
+ #
2649
+ # @option params [String] :rule_group_arn
2650
+ # Required. The Amazon Resource Name (ARN) of the rule group.
2651
+ #
2652
+ # You must specify the ARN or the name, and you can specify both.
2653
+ #
2654
+ # @option params [String] :type
2655
+ # The type of rule group you want a summary for. This is a required
2656
+ # field.
2657
+ #
2658
+ # Valid value: `STATEFUL`
2659
+ #
2660
+ # Note that `STATELESS` exists but is not currently supported. If you
2661
+ # provide `STATELESS`, an exception is returned.
2662
+ #
2663
+ # @return [Types::DescribeRuleGroupSummaryResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2664
+ #
2665
+ # * {Types::DescribeRuleGroupSummaryResponse#rule_group_name #rule_group_name} => String
2666
+ # * {Types::DescribeRuleGroupSummaryResponse#description #description} => String
2667
+ # * {Types::DescribeRuleGroupSummaryResponse#summary #summary} => Types::Summary
2668
+ #
2669
+ # @example Request syntax with placeholder values
2670
+ #
2671
+ # resp = client.describe_rule_group_summary({
2672
+ # rule_group_name: "ResourceName",
2673
+ # rule_group_arn: "ResourceArn",
2674
+ # type: "STATELESS", # accepts STATELESS, STATEFUL
2675
+ # })
2676
+ #
2677
+ # @example Response structure
2678
+ #
2679
+ # resp.rule_group_name #=> String
2680
+ # resp.description #=> String
2681
+ # resp.summary.rule_summaries #=> Array
2682
+ # resp.summary.rule_summaries[0].sid #=> String
2683
+ # resp.summary.rule_summaries[0].msg #=> String
2684
+ # resp.summary.rule_summaries[0].metadata #=> String
2685
+ #
2686
+ # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroupSummary AWS API Documentation
2687
+ #
2688
+ # @overload describe_rule_group_summary(params = {})
2689
+ # @param [Hash] params ({})
2690
+ def describe_rule_group_summary(params = {}, options = {})
2691
+ req = build_request(:describe_rule_group_summary, params)
2692
+ req.send_request(options)
2693
+ end
2694
+
2600
2695
  # Returns the data objects for the specified TLS inspection
2601
2696
  # configuration.
2602
2697
  #
@@ -3352,7 +3447,7 @@ module Aws::NetworkFirewall
3352
3447
  # next_token: "PaginationToken",
3353
3448
  # max_results: 1,
3354
3449
  # scope: "MANAGED", # accepts MANAGED, ACCOUNT
3355
- # managed_type: "AWS_MANAGED_THREAT_SIGNATURES", # accepts AWS_MANAGED_THREAT_SIGNATURES, AWS_MANAGED_DOMAIN_LISTS
3450
+ # managed_type: "AWS_MANAGED_THREAT_SIGNATURES", # accepts AWS_MANAGED_THREAT_SIGNATURES, AWS_MANAGED_DOMAIN_LISTS, ACTIVE_THREAT_DEFENSE
3356
3451
  # type: "STATELESS", # accepts STATELESS, STATEFUL
3357
3452
  # })
3358
3453
  #
@@ -3630,9 +3725,8 @@ module Aws::NetworkFirewall
3630
3725
  # creation of routing components between the transit gateway and
3631
3726
  # firewall endpoints.
3632
3727
  #
3633
- # Only the transit gateway owner can reject the attachment. After
3634
- # rejection, no traffic will flow through the firewall endpoints for
3635
- # this attachment.
3728
+ # Only the firewall owner can reject the attachment. After rejection, no
3729
+ # traffic will flow through the firewall endpoints for this attachment.
3636
3730
  #
3637
3731
  # Use DescribeFirewall to monitor the rejection status. To accept the
3638
3732
  # attachment instead of rejecting it, use
@@ -4431,6 +4525,7 @@ module Aws::NetworkFirewall
4431
4525
  # override: {
4432
4526
  # action: "DROP_TO_ALERT", # accepts DROP_TO_ALERT
4433
4527
  # },
4528
+ # deep_threat_inspection: false,
4434
4529
  # },
4435
4530
  # ],
4436
4531
  # stateful_default_actions: ["CollectionMember_String"],
@@ -4757,6 +4852,11 @@ module Aws::NetworkFirewall
4757
4852
  # the rule group for you. To run the stateless rule group analyzer
4758
4853
  # without updating the rule group, set `DryRun` to `TRUE`.
4759
4854
  #
4855
+ # @option params [Types::SummaryConfiguration] :summary_configuration
4856
+ # Updates the selected summary configuration for a rule group.
4857
+ #
4858
+ # Changes affect subsequent responses from DescribeRuleGroupSummary.
4859
+ #
4760
4860
  # @return [Types::UpdateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
4761
4861
  #
4762
4862
  # * {Types::UpdateRuleGroupResponse#update_token #update_token} => String
@@ -4887,6 +4987,9 @@ module Aws::NetworkFirewall
4887
4987
  # source_update_token: "UpdateToken",
4888
4988
  # },
4889
4989
  # analyze_rule_group: false,
4990
+ # summary_configuration: {
4991
+ # rule_options: ["SID"], # accepts SID, MSG, METADATA
4992
+ # },
4890
4993
  # })
4891
4994
  #
4892
4995
  # @example Response structure
@@ -4915,6 +5018,8 @@ module Aws::NetworkFirewall
4915
5018
  # resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
4916
5019
  # resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
4917
5020
  # resp.rule_group_response.analysis_results[0].analysis_detail #=> String
5021
+ # resp.rule_group_response.summary_configuration.rule_options #=> Array
5022
+ # resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
4918
5023
  #
4919
5024
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/UpdateRuleGroup AWS API Documentation
4920
5025
  #
@@ -5171,7 +5276,7 @@ module Aws::NetworkFirewall
5171
5276
  tracer: tracer
5172
5277
  )
5173
5278
  context[:gem_name] = 'aws-sdk-networkfirewall'
5174
- context[:gem_version] = '1.69.0'
5279
+ context[:gem_version] = '1.71.0'
5175
5280
  Seahorse::Client::Request.new(handlers, context)
5176
5281
  end
5177
5282
 
@@ -71,6 +71,7 @@ module Aws::NetworkFirewall
71
71
  CreateVpcEndpointAssociationResponse = Shapes::StructureShape.new(name: 'CreateVpcEndpointAssociationResponse')
72
72
  CustomAction = Shapes::StructureShape.new(name: 'CustomAction')
73
73
  CustomActions = Shapes::ListShape.new(name: 'CustomActions')
74
+ DeepThreatInspection = Shapes::BooleanShape.new(name: 'DeepThreatInspection')
74
75
  DeleteFirewallPolicyRequest = Shapes::StructureShape.new(name: 'DeleteFirewallPolicyRequest')
75
76
  DeleteFirewallPolicyResponse = Shapes::StructureShape.new(name: 'DeleteFirewallPolicyResponse')
76
77
  DeleteFirewallRequest = Shapes::StructureShape.new(name: 'DeleteFirewallRequest')
@@ -101,6 +102,8 @@ module Aws::NetworkFirewall
101
102
  DescribeRuleGroupMetadataResponse = Shapes::StructureShape.new(name: 'DescribeRuleGroupMetadataResponse')
102
103
  DescribeRuleGroupRequest = Shapes::StructureShape.new(name: 'DescribeRuleGroupRequest')
103
104
  DescribeRuleGroupResponse = Shapes::StructureShape.new(name: 'DescribeRuleGroupResponse')
105
+ DescribeRuleGroupSummaryRequest = Shapes::StructureShape.new(name: 'DescribeRuleGroupSummaryRequest')
106
+ DescribeRuleGroupSummaryResponse = Shapes::StructureShape.new(name: 'DescribeRuleGroupSummaryResponse')
104
107
  DescribeTLSInspectionConfigurationRequest = Shapes::StructureShape.new(name: 'DescribeTLSInspectionConfigurationRequest')
105
108
  DescribeTLSInspectionConfigurationResponse = Shapes::StructureShape.new(name: 'DescribeTLSInspectionConfigurationResponse')
106
109
  DescribeVpcEndpointAssociationRequest = Shapes::StructureShape.new(name: 'DescribeVpcEndpointAssociationRequest')
@@ -247,6 +250,8 @@ module Aws::NetworkFirewall
247
250
  RuleOption = Shapes::StructureShape.new(name: 'RuleOption')
248
251
  RuleOptions = Shapes::ListShape.new(name: 'RuleOptions')
249
252
  RuleOrder = Shapes::StringShape.new(name: 'RuleOrder')
253
+ RuleSummaries = Shapes::ListShape.new(name: 'RuleSummaries')
254
+ RuleSummary = Shapes::StructureShape.new(name: 'RuleSummary')
250
255
  RuleTargets = Shapes::ListShape.new(name: 'RuleTargets')
251
256
  RuleVariableName = Shapes::StringShape.new(name: 'RuleVariableName')
252
257
  RuleVariables = Shapes::StructureShape.new(name: 'RuleVariables')
@@ -293,6 +298,10 @@ module Aws::NetworkFirewall
293
298
  StreamExceptionPolicy = Shapes::StringShape.new(name: 'StreamExceptionPolicy')
294
299
  SubnetMapping = Shapes::StructureShape.new(name: 'SubnetMapping')
295
300
  SubnetMappings = Shapes::ListShape.new(name: 'SubnetMappings')
301
+ Summary = Shapes::StructureShape.new(name: 'Summary')
302
+ SummaryConfiguration = Shapes::StructureShape.new(name: 'SummaryConfiguration')
303
+ SummaryRuleOption = Shapes::StringShape.new(name: 'SummaryRuleOption')
304
+ SummaryRuleOptions = Shapes::ListShape.new(name: 'SummaryRuleOptions')
296
305
  SupportedAvailabilityZones = Shapes::MapShape.new(name: 'SupportedAvailabilityZones')
297
306
  SyncState = Shapes::StructureShape.new(name: 'SyncState')
298
307
  SyncStateConfig = Shapes::MapShape.new(name: 'SyncStateConfig')
@@ -514,6 +523,7 @@ module Aws::NetworkFirewall
514
523
  CreateRuleGroupRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
515
524
  CreateRuleGroupRequest.add_member(:source_metadata, Shapes::ShapeRef.new(shape: SourceMetadata, location_name: "SourceMetadata"))
516
525
  CreateRuleGroupRequest.add_member(:analyze_rule_group, Shapes::ShapeRef.new(shape: Boolean, location_name: "AnalyzeRuleGroup"))
526
+ CreateRuleGroupRequest.add_member(:summary_configuration, Shapes::ShapeRef.new(shape: SummaryConfiguration, location_name: "SummaryConfiguration"))
517
527
  CreateRuleGroupRequest.struct_class = Types::CreateRuleGroupRequest
518
528
 
519
529
  CreateRuleGroupResponse.add_member(:update_token, Shapes::ShapeRef.new(shape: UpdateToken, required: true, location_name: "UpdateToken"))
@@ -685,6 +695,16 @@ module Aws::NetworkFirewall
685
695
  DescribeRuleGroupResponse.add_member(:rule_group_response, Shapes::ShapeRef.new(shape: RuleGroupResponse, required: true, location_name: "RuleGroupResponse"))
686
696
  DescribeRuleGroupResponse.struct_class = Types::DescribeRuleGroupResponse
687
697
 
698
+ DescribeRuleGroupSummaryRequest.add_member(:rule_group_name, Shapes::ShapeRef.new(shape: ResourceName, location_name: "RuleGroupName"))
699
+ DescribeRuleGroupSummaryRequest.add_member(:rule_group_arn, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "RuleGroupArn"))
700
+ DescribeRuleGroupSummaryRequest.add_member(:type, Shapes::ShapeRef.new(shape: RuleGroupType, location_name: "Type"))
701
+ DescribeRuleGroupSummaryRequest.struct_class = Types::DescribeRuleGroupSummaryRequest
702
+
703
+ DescribeRuleGroupSummaryResponse.add_member(:rule_group_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "RuleGroupName"))
704
+ DescribeRuleGroupSummaryResponse.add_member(:description, Shapes::ShapeRef.new(shape: Description, location_name: "Description"))
705
+ DescribeRuleGroupSummaryResponse.add_member(:summary, Shapes::ShapeRef.new(shape: Summary, location_name: "Summary"))
706
+ DescribeRuleGroupSummaryResponse.struct_class = Types::DescribeRuleGroupSummaryResponse
707
+
688
708
  DescribeTLSInspectionConfigurationRequest.add_member(:tls_inspection_configuration_arn, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "TLSInspectionConfigurationArn"))
689
709
  DescribeTLSInspectionConfigurationRequest.add_member(:tls_inspection_configuration_name, Shapes::ShapeRef.new(shape: ResourceName, location_name: "TLSInspectionConfigurationName"))
690
710
  DescribeTLSInspectionConfigurationRequest.struct_class = Types::DescribeTLSInspectionConfigurationRequest
@@ -1103,6 +1123,7 @@ module Aws::NetworkFirewall
1103
1123
  RuleGroupResponse.add_member(:sns_topic, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "SnsTopic"))
1104
1124
  RuleGroupResponse.add_member(:last_modified_time, Shapes::ShapeRef.new(shape: LastUpdateTime, location_name: "LastModifiedTime"))
1105
1125
  RuleGroupResponse.add_member(:analysis_results, Shapes::ShapeRef.new(shape: AnalysisResultList, location_name: "AnalysisResults"))
1126
+ RuleGroupResponse.add_member(:summary_configuration, Shapes::ShapeRef.new(shape: SummaryConfiguration, location_name: "SummaryConfiguration"))
1106
1127
  RuleGroupResponse.struct_class = Types::RuleGroupResponse
1107
1128
 
1108
1129
  RuleGroups.member = Shapes::ShapeRef.new(shape: RuleGroupMetadata)
@@ -1115,6 +1136,13 @@ module Aws::NetworkFirewall
1115
1136
 
1116
1137
  RuleOptions.member = Shapes::ShapeRef.new(shape: RuleOption)
1117
1138
 
1139
+ RuleSummaries.member = Shapes::ShapeRef.new(shape: RuleSummary)
1140
+
1141
+ RuleSummary.add_member(:sid, Shapes::ShapeRef.new(shape: CollectionMember_String, location_name: "SID"))
1142
+ RuleSummary.add_member(:msg, Shapes::ShapeRef.new(shape: CollectionMember_String, location_name: "Msg"))
1143
+ RuleSummary.add_member(:metadata, Shapes::ShapeRef.new(shape: CollectionMember_String, location_name: "Metadata"))
1144
+ RuleSummary.struct_class = Types::RuleSummary
1145
+
1118
1146
  RuleTargets.member = Shapes::ShapeRef.new(shape: CollectionMember_String)
1119
1147
 
1120
1148
  RuleVariables.add_member(:ip_sets, Shapes::ShapeRef.new(shape: IPSets, location_name: "IPSets"))
@@ -1212,6 +1240,7 @@ module Aws::NetworkFirewall
1212
1240
  StatefulRuleGroupReference.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceArn"))
1213
1241
  StatefulRuleGroupReference.add_member(:priority, Shapes::ShapeRef.new(shape: Priority, location_name: "Priority", metadata: {"box" => true}))
1214
1242
  StatefulRuleGroupReference.add_member(:override, Shapes::ShapeRef.new(shape: StatefulRuleGroupOverride, location_name: "Override"))
1243
+ StatefulRuleGroupReference.add_member(:deep_threat_inspection, Shapes::ShapeRef.new(shape: DeepThreatInspection, location_name: "DeepThreatInspection"))
1215
1244
  StatefulRuleGroupReference.struct_class = Types::StatefulRuleGroupReference
1216
1245
 
1217
1246
  StatefulRuleGroupReferences.member = Shapes::ShapeRef.new(shape: StatefulRuleGroupReference)
@@ -1245,6 +1274,14 @@ module Aws::NetworkFirewall
1245
1274
 
1246
1275
  SubnetMappings.member = Shapes::ShapeRef.new(shape: SubnetMapping)
1247
1276
 
1277
+ Summary.add_member(:rule_summaries, Shapes::ShapeRef.new(shape: RuleSummaries, location_name: "RuleSummaries"))
1278
+ Summary.struct_class = Types::Summary
1279
+
1280
+ SummaryConfiguration.add_member(:rule_options, Shapes::ShapeRef.new(shape: SummaryRuleOptions, location_name: "RuleOptions"))
1281
+ SummaryConfiguration.struct_class = Types::SummaryConfiguration
1282
+
1283
+ SummaryRuleOptions.member = Shapes::ShapeRef.new(shape: SummaryRuleOption)
1284
+
1248
1285
  SupportedAvailabilityZones.key = Shapes::ShapeRef.new(shape: AvailabilityZone)
1249
1286
  SupportedAvailabilityZones.value = Shapes::ShapeRef.new(shape: AvailabilityZoneMetadata)
1250
1287
 
@@ -1436,6 +1473,7 @@ module Aws::NetworkFirewall
1436
1473
  UpdateRuleGroupRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
1437
1474
  UpdateRuleGroupRequest.add_member(:source_metadata, Shapes::ShapeRef.new(shape: SourceMetadata, location_name: "SourceMetadata"))
1438
1475
  UpdateRuleGroupRequest.add_member(:analyze_rule_group, Shapes::ShapeRef.new(shape: Boolean, location_name: "AnalyzeRuleGroup"))
1476
+ UpdateRuleGroupRequest.add_member(:summary_configuration, Shapes::ShapeRef.new(shape: SummaryConfiguration, location_name: "SummaryConfiguration"))
1439
1477
  UpdateRuleGroupRequest.struct_class = Types::UpdateRuleGroupRequest
1440
1478
 
1441
1479
  UpdateRuleGroupResponse.add_member(:update_token, Shapes::ShapeRef.new(shape: UpdateToken, required: true, location_name: "UpdateToken"))
@@ -1823,6 +1861,18 @@ module Aws::NetworkFirewall
1823
1861
  o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
1824
1862
  end)
1825
1863
 
1864
+ api.add_operation(:describe_rule_group_summary, Seahorse::Model::Operation.new.tap do |o|
1865
+ o.name = "DescribeRuleGroupSummary"
1866
+ o.http_method = "POST"
1867
+ o.http_request_uri = "/"
1868
+ o.input = Shapes::ShapeRef.new(shape: DescribeRuleGroupSummaryRequest)
1869
+ o.output = Shapes::ShapeRef.new(shape: DescribeRuleGroupSummaryResponse)
1870
+ o.errors << Shapes::ShapeRef.new(shape: InvalidRequestException)
1871
+ o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
1872
+ o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
1873
+ o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
1874
+ end)
1875
+
1826
1876
  api.add_operation(:describe_tls_inspection_configuration, Seahorse::Model::Operation.new.tap do |o|
1827
1877
  o.name = "DescribeTLSInspectionConfiguration"
1828
1878
  o.http_method = "POST"
@@ -1146,6 +1146,18 @@ module Aws::NetworkFirewall
1146
1146
  # analyzer without creating the rule group, set `DryRun` to `TRUE`.
1147
1147
  # @return [Boolean]
1148
1148
  #
1149
+ # @!attribute [rw] summary_configuration
1150
+ # An object that contains a `RuleOptions` array of strings. You use
1151
+ # `RuleOptions` to determine which of the following RuleSummary values
1152
+ # are returned in response to `DescribeRuleGroupSummary`.
1153
+ #
1154
+ # * `Metadata` - returns
1155
+ #
1156
+ # * `Msg`
1157
+ #
1158
+ # * `SID`
1159
+ # @return [Types::SummaryConfiguration]
1160
+ #
1149
1161
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/CreateRuleGroupRequest AWS API Documentation
1150
1162
  #
1151
1163
  class CreateRuleGroupRequest < Struct.new(
@@ -1159,7 +1171,8 @@ module Aws::NetworkFirewall
1159
1171
  :dry_run,
1160
1172
  :encryption_configuration,
1161
1173
  :source_metadata,
1162
- :analyze_rule_group)
1174
+ :analyze_rule_group,
1175
+ :summary_configuration)
1163
1176
  SENSITIVE = []
1164
1177
  include Aws::Structure
1165
1178
  end
@@ -2233,6 +2246,73 @@ module Aws::NetworkFirewall
2233
2246
  include Aws::Structure
2234
2247
  end
2235
2248
 
2249
+ # @!attribute [rw] rule_group_name
2250
+ # The descriptive name of the rule group. You can't change the name
2251
+ # of a rule group after you create it.
2252
+ #
2253
+ # You must specify the ARN or the name, and you can specify both.
2254
+ # @return [String]
2255
+ #
2256
+ # @!attribute [rw] rule_group_arn
2257
+ # Required. The Amazon Resource Name (ARN) of the rule group.
2258
+ #
2259
+ # You must specify the ARN or the name, and you can specify both.
2260
+ # @return [String]
2261
+ #
2262
+ # @!attribute [rw] type
2263
+ # The type of rule group you want a summary for. This is a required
2264
+ # field.
2265
+ #
2266
+ # Valid value: `STATEFUL`
2267
+ #
2268
+ # Note that `STATELESS` exists but is not currently supported. If you
2269
+ # provide `STATELESS`, an exception is returned.
2270
+ # @return [String]
2271
+ #
2272
+ # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroupSummaryRequest AWS API Documentation
2273
+ #
2274
+ class DescribeRuleGroupSummaryRequest < Struct.new(
2275
+ :rule_group_name,
2276
+ :rule_group_arn,
2277
+ :type)
2278
+ SENSITIVE = []
2279
+ include Aws::Structure
2280
+ end
2281
+
2282
+ # @!attribute [rw] rule_group_name
2283
+ # The descriptive name of the rule group. You can't change the name
2284
+ # of a rule group after you create it.
2285
+ # @return [String]
2286
+ #
2287
+ # @!attribute [rw] description
2288
+ # A description of the rule group.
2289
+ # @return [String]
2290
+ #
2291
+ # @!attribute [rw] summary
2292
+ # A complex type that contains rule information based on the rule
2293
+ # group's configured summary settings. The content varies depending
2294
+ # on the fields that you specified to extract in your
2295
+ # SummaryConfiguration. When you haven't configured any summary
2296
+ # settings, this returns an empty array. The response might include:
2297
+ #
2298
+ # * Rule identifiers
2299
+ #
2300
+ # * Rule descriptions
2301
+ #
2302
+ # * Any metadata fields that you specified in your
2303
+ # SummaryConfiguration
2304
+ # @return [Types::Summary]
2305
+ #
2306
+ # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroupSummaryResponse AWS API Documentation
2307
+ #
2308
+ class DescribeRuleGroupSummaryResponse < Struct.new(
2309
+ :rule_group_name,
2310
+ :description,
2311
+ :summary)
2312
+ SENSITIVE = []
2313
+ include Aws::Structure
2314
+ end
2315
+
2236
2316
  # @!attribute [rw] tls_inspection_configuration_arn
2237
2317
  # The Amazon Resource Name (ARN) of the TLS inspection configuration.
2238
2318
  #
@@ -4911,6 +4991,16 @@ module Aws::NetworkFirewall
4911
4991
  # in the list of analysis results.
4912
4992
  # @return [Array<Types::AnalysisResult>]
4913
4993
  #
4994
+ # @!attribute [rw] summary_configuration
4995
+ # A complex type containing the currently selected rule option fields
4996
+ # that will be displayed for rule summarization returned by
4997
+ # DescribeRuleGroupSummary.
4998
+ #
4999
+ # * The `RuleOptions` specified in SummaryConfiguration
5000
+ #
5001
+ # * Rule metadata organization preferences
5002
+ # @return [Types::SummaryConfiguration]
5003
+ #
4914
5004
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/RuleGroupResponse AWS API Documentation
4915
5005
  #
4916
5006
  class RuleGroupResponse < Struct.new(
@@ -4928,7 +5018,8 @@ module Aws::NetworkFirewall
4928
5018
  :source_metadata,
4929
5019
  :sns_topic,
4930
5020
  :last_modified_time,
4931
- :analysis_results)
5021
+ :analysis_results,
5022
+ :summary_configuration)
4932
5023
  SENSITIVE = []
4933
5024
  include Aws::Structure
4934
5025
  end
@@ -4967,6 +5058,39 @@ module Aws::NetworkFirewall
4967
5058
  include Aws::Structure
4968
5059
  end
4969
5060
 
5061
+ # A complex type containing details about a Suricata rule. Contains:
5062
+ #
5063
+ # * `SID`
5064
+ #
5065
+ # * `Msg`
5066
+ #
5067
+ # * `Metadata`
5068
+ #
5069
+ # Summaries are available for rule groups you manage and for active
5070
+ # threat defense Amazon Web Services managed rule groups.
5071
+ #
5072
+ # @!attribute [rw] sid
5073
+ # The unique identifier (Signature ID) of the Suricata rule.
5074
+ # @return [String]
5075
+ #
5076
+ # @!attribute [rw] msg
5077
+ # The contents taken from the rule's msg field.
5078
+ # @return [String]
5079
+ #
5080
+ # @!attribute [rw] metadata
5081
+ # The contents of the rule's metadata.
5082
+ # @return [String]
5083
+ #
5084
+ # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/RuleSummary AWS API Documentation
5085
+ #
5086
+ class RuleSummary < Struct.new(
5087
+ :sid,
5088
+ :msg,
5089
+ :metadata)
5090
+ SENSITIVE = []
5091
+ include Aws::Structure
5092
+ end
5093
+
4970
5094
  # Settings that are available for use in the rules in the RuleGroup
4971
5095
  # where this is defined. See CreateRuleGroup or UpdateRuleGroup for
4972
5096
  # usage.
@@ -5644,12 +5768,32 @@ module Aws::NetworkFirewall
5644
5768
  # the rule group within a policy.
5645
5769
  # @return [Types::StatefulRuleGroupOverride]
5646
5770
  #
5771
+ # @!attribute [rw] deep_threat_inspection
5772
+ # Network Firewall plans to augment the active threat defense managed
5773
+ # rule group with an additional deep threat inspection capability.
5774
+ # When this capability is released, Amazon Web Services will analyze
5775
+ # service logs of network traffic processed by these rule groups to
5776
+ # identify threat indicators across customers. Amazon Web Services
5777
+ # will use these threat indicators to improve the active threat
5778
+ # defense managed rule groups and protect the security of Amazon Web
5779
+ # Services customers and services.
5780
+ #
5781
+ # <note markdown="1"> Customers can opt-out of deep threat inspection at any time through
5782
+ # the Network Firewall console or API. When customers opt out, Network
5783
+ # Firewall will not use the network traffic processed by those
5784
+ # customers' active threat defense rule groups for rule group
5785
+ # improvement.
5786
+ #
5787
+ # </note>
5788
+ # @return [Boolean]
5789
+ #
5647
5790
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/StatefulRuleGroupReference AWS API Documentation
5648
5791
  #
5649
5792
  class StatefulRuleGroupReference < Struct.new(
5650
5793
  :resource_arn,
5651
5794
  :priority,
5652
- :override)
5795
+ :override,
5796
+ :deep_threat_inspection)
5653
5797
  SENSITIVE = []
5654
5798
  include Aws::Structure
5655
5799
  end
@@ -5787,6 +5931,52 @@ module Aws::NetworkFirewall
5787
5931
  include Aws::Structure
5788
5932
  end
5789
5933
 
5934
+ # A complex type containing summaries of security protections provided
5935
+ # by a rule group.
5936
+ #
5937
+ # Network Firewall extracts this information from selected fields in the
5938
+ # rule group's Suricata rules, based on your SummaryConfiguration
5939
+ # settings.
5940
+ #
5941
+ # @!attribute [rw] rule_summaries
5942
+ # An array of RuleSummary objects containing individual rule details
5943
+ # that had been configured by the rulegroup's SummaryConfiguration.
5944
+ # @return [Array<Types::RuleSummary>]
5945
+ #
5946
+ # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/Summary AWS API Documentation
5947
+ #
5948
+ class Summary < Struct.new(
5949
+ :rule_summaries)
5950
+ SENSITIVE = []
5951
+ include Aws::Structure
5952
+ end
5953
+
5954
+ # A complex type that specifies which Suricata rule metadata fields to
5955
+ # use when displaying threat information. Contains:
5956
+ #
5957
+ # * `RuleOptions` - The Suricata rule options fields to extract and
5958
+ # display
5959
+ #
5960
+ # ^
5961
+ #
5962
+ # These settings affect how threat information appears in both the
5963
+ # console and API responses. Summaries are available for rule groups you
5964
+ # manage and for active threat defense Amazon Web Services managed rule
5965
+ # groups.
5966
+ #
5967
+ # @!attribute [rw] rule_options
5968
+ # Specifies the selected rule options returned by
5969
+ # DescribeRuleGroupSummary.
5970
+ # @return [Array<String>]
5971
+ #
5972
+ # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/SummaryConfiguration AWS API Documentation
5973
+ #
5974
+ class SummaryConfiguration < Struct.new(
5975
+ :rule_options)
5976
+ SENSITIVE = []
5977
+ include Aws::Structure
5978
+ end
5979
+
5790
5980
  # The status of the firewall endpoint and firewall policy configuration
5791
5981
  # for a single VPC subnet. This is part of the FirewallStatus.
5792
5982
  #
@@ -7102,6 +7292,12 @@ module Aws::NetworkFirewall
7102
7292
  # analyzer without updating the rule group, set `DryRun` to `TRUE`.
7103
7293
  # @return [Boolean]
7104
7294
  #
7295
+ # @!attribute [rw] summary_configuration
7296
+ # Updates the selected summary configuration for a rule group.
7297
+ #
7298
+ # Changes affect subsequent responses from DescribeRuleGroupSummary.
7299
+ # @return [Types::SummaryConfiguration]
7300
+ #
7105
7301
  # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/UpdateRuleGroupRequest AWS API Documentation
7106
7302
  #
7107
7303
  class UpdateRuleGroupRequest < Struct.new(
@@ -7115,7 +7311,8 @@ module Aws::NetworkFirewall
7115
7311
  :dry_run,
7116
7312
  :encryption_configuration,
7117
7313
  :source_metadata,
7118
- :analyze_rule_group)
7314
+ :analyze_rule_group,
7315
+ :summary_configuration)
7119
7316
  SENSITIVE = []
7120
7317
  include Aws::Structure
7121
7318
  end
@@ -54,7 +54,7 @@ module Aws::NetworkFirewall
54
54
  autoload :EndpointProvider, 'aws-sdk-networkfirewall/endpoint_provider'
55
55
  autoload :Endpoints, 'aws-sdk-networkfirewall/endpoints'
56
56
 
57
- GEM_VERSION = '1.69.0'
57
+ GEM_VERSION = '1.71.0'
58
58
 
59
59
  end
60
60
 
data/sig/client.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
@@ -224,7 +225,8 @@ module Aws
224
225
  priority: ::Integer?,
225
226
  override: {
226
227
  action: ("DROP_TO_ALERT")?
227
- }?
228
+ }?,
229
+ deep_threat_inspection: bool?
228
230
  },
229
231
  ]?,
230
232
  stateful_default_actions: Array[::String]?,
@@ -384,7 +386,10 @@ module Aws
384
386
  source_arn: ::String?,
385
387
  source_update_token: ::String?
386
388
  },
387
- ?analyze_rule_group: bool
389
+ ?analyze_rule_group: bool,
390
+ ?summary_configuration: {
391
+ rule_options: Array[("SID" | "MSG" | "METADATA")]?
392
+ }
388
393
  ) -> _CreateRuleGroupResponseSuccess
389
394
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateRuleGroupResponseSuccess
390
395
 
@@ -673,6 +678,20 @@ module Aws
673
678
  ) -> _DescribeRuleGroupMetadataResponseSuccess
674
679
  | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupMetadataResponseSuccess
675
680
 
681
+ interface _DescribeRuleGroupSummaryResponseSuccess
682
+ include ::Seahorse::Client::_ResponseSuccess[Types::DescribeRuleGroupSummaryResponse]
683
+ def rule_group_name: () -> ::String
684
+ def description: () -> ::String
685
+ def summary: () -> Types::Summary
686
+ end
687
+ # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#describe_rule_group_summary-instance_method
688
+ def describe_rule_group_summary: (
689
+ ?rule_group_name: ::String,
690
+ ?rule_group_arn: ::String,
691
+ ?type: ("STATELESS" | "STATEFUL")
692
+ ) -> _DescribeRuleGroupSummaryResponseSuccess
693
+ | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupSummaryResponseSuccess
694
+
676
695
  interface _DescribeTLSInspectionConfigurationResponseSuccess
677
696
  include ::Seahorse::Client::_ResponseSuccess[Types::DescribeTLSInspectionConfigurationResponse]
678
697
  def update_token: () -> ::String
@@ -844,7 +863,7 @@ module Aws
844
863
  ?next_token: ::String,
845
864
  ?max_results: ::Integer,
846
865
  ?scope: ("MANAGED" | "ACCOUNT"),
847
- ?managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS"),
866
+ ?managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE"),
848
867
  ?type: ("STATELESS" | "STATEFUL")
849
868
  ) -> _ListRuleGroupsResponseSuccess
850
869
  | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListRuleGroupsResponseSuccess
@@ -1125,7 +1144,8 @@ module Aws
1125
1144
  priority: ::Integer?,
1126
1145
  override: {
1127
1146
  action: ("DROP_TO_ALERT")?
1128
- }?
1147
+ }?,
1148
+ deep_threat_inspection: bool?
1129
1149
  },
1130
1150
  ]?,
1131
1151
  stateful_default_actions: Array[::String]?,
@@ -1314,7 +1334,10 @@ module Aws
1314
1334
  source_arn: ::String?,
1315
1335
  source_update_token: ::String?
1316
1336
  },
1317
- ?analyze_rule_group: bool
1337
+ ?analyze_rule_group: bool,
1338
+ ?summary_configuration: {
1339
+ rule_options: Array[("SID" | "MSG" | "METADATA")]?
1340
+ }
1318
1341
  ) -> _UpdateRuleGroupResponseSuccess
1319
1342
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateRuleGroupResponseSuccess
1320
1343
 
data/sig/resource.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
data/sig/types.rbs CHANGED
@@ -195,6 +195,7 @@ module Aws::NetworkFirewall
195
195
  attr_accessor encryption_configuration: Types::EncryptionConfiguration
196
196
  attr_accessor source_metadata: Types::SourceMetadata
197
197
  attr_accessor analyze_rule_group: bool
198
+ attr_accessor summary_configuration: Types::SummaryConfiguration
198
199
  SENSITIVE: []
199
200
  end
200
201
 
@@ -436,6 +437,20 @@ module Aws::NetworkFirewall
436
437
  SENSITIVE: []
437
438
  end
438
439
 
440
+ class DescribeRuleGroupSummaryRequest
441
+ attr_accessor rule_group_name: ::String
442
+ attr_accessor rule_group_arn: ::String
443
+ attr_accessor type: ("STATELESS" | "STATEFUL")
444
+ SENSITIVE: []
445
+ end
446
+
447
+ class DescribeRuleGroupSummaryResponse
448
+ attr_accessor rule_group_name: ::String
449
+ attr_accessor description: ::String
450
+ attr_accessor summary: Types::Summary
451
+ SENSITIVE: []
452
+ end
453
+
439
454
  class DescribeTLSInspectionConfigurationRequest
440
455
  attr_accessor tls_inspection_configuration_arn: ::String
441
456
  attr_accessor tls_inspection_configuration_name: ::String
@@ -785,7 +800,7 @@ module Aws::NetworkFirewall
785
800
  attr_accessor next_token: ::String
786
801
  attr_accessor max_results: ::Integer
787
802
  attr_accessor scope: ("MANAGED" | "ACCOUNT")
788
- attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS")
803
+ attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE")
789
804
  attr_accessor type: ("STATELESS" | "STATEFUL")
790
805
  SENSITIVE: []
791
806
  end
@@ -959,6 +974,7 @@ module Aws::NetworkFirewall
959
974
  attr_accessor sns_topic: ::String
960
975
  attr_accessor last_modified_time: ::Time
961
976
  attr_accessor analysis_results: ::Array[Types::AnalysisResult]
977
+ attr_accessor summary_configuration: Types::SummaryConfiguration
962
978
  SENSITIVE: []
963
979
  end
964
980
 
@@ -968,6 +984,13 @@ module Aws::NetworkFirewall
968
984
  SENSITIVE: []
969
985
  end
970
986
 
987
+ class RuleSummary
988
+ attr_accessor sid: ::String
989
+ attr_accessor msg: ::String
990
+ attr_accessor metadata: ::String
991
+ SENSITIVE: []
992
+ end
993
+
971
994
  class RuleVariables
972
995
  attr_accessor ip_sets: ::Hash[::String, Types::IPSet]
973
996
  attr_accessor port_sets: ::Hash[::String, Types::PortSet]
@@ -1086,6 +1109,7 @@ module Aws::NetworkFirewall
1086
1109
  attr_accessor resource_arn: ::String
1087
1110
  attr_accessor priority: ::Integer
1088
1111
  attr_accessor override: Types::StatefulRuleGroupOverride
1112
+ attr_accessor deep_threat_inspection: bool
1089
1113
  SENSITIVE: []
1090
1114
  end
1091
1115
 
@@ -1118,6 +1142,16 @@ module Aws::NetworkFirewall
1118
1142
  SENSITIVE: []
1119
1143
  end
1120
1144
 
1145
+ class Summary
1146
+ attr_accessor rule_summaries: ::Array[Types::RuleSummary]
1147
+ SENSITIVE: []
1148
+ end
1149
+
1150
+ class SummaryConfiguration
1151
+ attr_accessor rule_options: ::Array[("SID" | "MSG" | "METADATA")]
1152
+ SENSITIVE: []
1153
+ end
1154
+
1121
1155
  class SyncState
1122
1156
  attr_accessor attachment: Types::Attachment
1123
1157
  attr_accessor config: ::Hash[::String, Types::PerObjectStatus]
@@ -1351,6 +1385,7 @@ module Aws::NetworkFirewall
1351
1385
  attr_accessor encryption_configuration: Types::EncryptionConfiguration
1352
1386
  attr_accessor source_metadata: Types::SourceMetadata
1353
1387
  attr_accessor analyze_rule_group: bool
1388
+ attr_accessor summary_configuration: Types::SummaryConfiguration
1354
1389
  SENSITIVE: []
1355
1390
  end
1356
1391
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-networkfirewall
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.69.0
4
+ version: 1.71.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.225.0
21
+ version: 3.227.0
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.225.0
31
+ version: 3.227.0
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement