aws-sdk-networkfirewall 1.69.0 → 1.71.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-networkfirewall/client.rb +119 -14
- data/lib/aws-sdk-networkfirewall/client_api.rb +50 -0
- data/lib/aws-sdk-networkfirewall/types.rb +201 -4
- data/lib/aws-sdk-networkfirewall.rb +1 -1
- data/sig/client.rbs +28 -5
- data/sig/resource.rbs +1 -0
- data/sig/types.rbs +36 -1
- metadata +3 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: f847af9cb779b325bdbb4cc3cabb0bce5a13dbbda625cbed21ec13e0453b9177
|
4
|
+
data.tar.gz: 4ad7cede653b56b6a2049f85e4193b1750b7d935192c4aa8e3736451a6c999e8
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ff49cc8106d8d091e36436d9602446351fd4f994fdf7607524b4c7556e5f48f725c08739f2f80811f3a72c117c8474666f8f861859934242c056708701933314
|
7
|
+
data.tar.gz: 6db79fa10438b04fc80e48e91947d4d5a25b00ce741437962ef38ebb72e31539b13d22776b89f0c4f6826529c45129f3fdf61679a2de4d66e65270d69e01887f
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,16 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.71.0 (2025-07-21)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
8
|
+
|
9
|
+
1.70.0 (2025-06-17)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Release of Active Threat Defense in Network Firewall
|
13
|
+
|
4
14
|
1.69.0 (2025-06-16)
|
5
15
|
------------------
|
6
16
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.71.0
|
@@ -95,7 +95,7 @@ module Aws::NetworkFirewall
|
|
95
95
|
# class name or an instance of a plugin class.
|
96
96
|
#
|
97
97
|
# @option options [required, Aws::CredentialProvider] :credentials
|
98
|
-
# Your AWS credentials. This can be an instance of any one of the
|
98
|
+
# Your AWS credentials used for authentication. This can be an instance of any one of the
|
99
99
|
# following classes:
|
100
100
|
#
|
101
101
|
# * `Aws::Credentials` - Used for configuring static, non-refreshing
|
@@ -128,18 +128,23 @@ module Aws::NetworkFirewall
|
|
128
128
|
# locations will be searched for credentials:
|
129
129
|
#
|
130
130
|
# * `Aws.config[:credentials]`
|
131
|
+
#
|
131
132
|
# * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
|
132
133
|
# `:account_id` options.
|
133
|
-
#
|
134
|
-
#
|
134
|
+
#
|
135
|
+
# * `ENV['AWS_ACCESS_KEY_ID']`, `ENV['AWS_SECRET_ACCESS_KEY']`,
|
136
|
+
# `ENV['AWS_SESSION_TOKEN']`, and `ENV['AWS_ACCOUNT_ID']`.
|
137
|
+
#
|
135
138
|
# * `~/.aws/credentials`
|
139
|
+
#
|
136
140
|
# * `~/.aws/config`
|
141
|
+
#
|
137
142
|
# * EC2/ECS IMDS instance profile - When used by default, the timeouts
|
138
143
|
# are very aggressive. Construct and pass an instance of
|
139
144
|
# `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
|
140
145
|
# enable retries and extended timeouts. Instance profile credential
|
141
|
-
# fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
|
142
|
-
# to true
|
146
|
+
# fetching can be disabled by setting `ENV['AWS_EC2_METADATA_DISABLED']`
|
147
|
+
# to `true`.
|
143
148
|
#
|
144
149
|
# @option options [required, String] :region
|
145
150
|
# The AWS region to connect to. The configured `:region` is
|
@@ -167,6 +172,11 @@ module Aws::NetworkFirewall
|
|
167
172
|
# When false, the request will raise a `RetryCapacityNotAvailableError` and will
|
168
173
|
# not retry instead of sleeping.
|
169
174
|
#
|
175
|
+
# @option options [Array<String>] :auth_scheme_preference
|
176
|
+
# A list of preferred authentication schemes to use when making a request. Supported values are:
|
177
|
+
# `sigv4`, `sigv4a`, `httpBearerAuth`, and `noAuth`. When set using `ENV['AWS_AUTH_SCHEME_PREFERENCE']` or in
|
178
|
+
# shared config as `auth_scheme_preference`, the value should be a comma-separated list.
|
179
|
+
#
|
170
180
|
# @option options [Boolean] :client_side_monitoring (false)
|
171
181
|
# When `true`, client-side metrics will be collected for all API requests from
|
172
182
|
# this client.
|
@@ -253,8 +263,8 @@ module Aws::NetworkFirewall
|
|
253
263
|
# 4 times. Used in `standard` and `adaptive` retry modes.
|
254
264
|
#
|
255
265
|
# @option options [String] :profile ("default")
|
256
|
-
# Used when loading credentials from the shared credentials file
|
257
|
-
#
|
266
|
+
# Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
|
267
|
+
# When not specified, 'default' is used.
|
258
268
|
#
|
259
269
|
# @option options [String] :request_checksum_calculation ("when_supported")
|
260
270
|
# Determines when a checksum will be calculated for request payloads. Values are:
|
@@ -374,7 +384,7 @@ module Aws::NetworkFirewall
|
|
374
384
|
# `Aws::Telemetry::OTelProvider` for telemetry provider.
|
375
385
|
#
|
376
386
|
# @option options [Aws::TokenProvider] :token_provider
|
377
|
-
#
|
387
|
+
# Your Bearer token used for authentication. This can be an instance of any one of the
|
378
388
|
# following classes:
|
379
389
|
#
|
380
390
|
# * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
|
@@ -1054,6 +1064,7 @@ module Aws::NetworkFirewall
|
|
1054
1064
|
# override: {
|
1055
1065
|
# action: "DROP_TO_ALERT", # accepts DROP_TO_ALERT
|
1056
1066
|
# },
|
1067
|
+
# deep_threat_inspection: false,
|
1057
1068
|
# },
|
1058
1069
|
# ],
|
1059
1070
|
# stateful_default_actions: ["CollectionMember_String"],
|
@@ -1238,6 +1249,17 @@ module Aws::NetworkFirewall
|
|
1238
1249
|
# the rule group for you. To run the stateless rule group analyzer
|
1239
1250
|
# without creating the rule group, set `DryRun` to `TRUE`.
|
1240
1251
|
#
|
1252
|
+
# @option params [Types::SummaryConfiguration] :summary_configuration
|
1253
|
+
# An object that contains a `RuleOptions` array of strings. You use
|
1254
|
+
# `RuleOptions` to determine which of the following RuleSummary values
|
1255
|
+
# are returned in response to `DescribeRuleGroupSummary`.
|
1256
|
+
#
|
1257
|
+
# * `Metadata` - returns
|
1258
|
+
#
|
1259
|
+
# * `Msg`
|
1260
|
+
#
|
1261
|
+
# * `SID`
|
1262
|
+
#
|
1241
1263
|
# @return [Types::CreateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1242
1264
|
#
|
1243
1265
|
# * {Types::CreateRuleGroupResponse#update_token #update_token} => String
|
@@ -1373,6 +1395,9 @@ module Aws::NetworkFirewall
|
|
1373
1395
|
# source_update_token: "UpdateToken",
|
1374
1396
|
# },
|
1375
1397
|
# analyze_rule_group: false,
|
1398
|
+
# summary_configuration: {
|
1399
|
+
# rule_options: ["SID"], # accepts SID, MSG, METADATA
|
1400
|
+
# },
|
1376
1401
|
# })
|
1377
1402
|
#
|
1378
1403
|
# @example Response structure
|
@@ -1401,6 +1426,8 @@ module Aws::NetworkFirewall
|
|
1401
1426
|
# resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
|
1402
1427
|
# resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
|
1403
1428
|
# resp.rule_group_response.analysis_results[0].analysis_detail #=> String
|
1429
|
+
# resp.rule_group_response.summary_configuration.rule_options #=> Array
|
1430
|
+
# resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
|
1404
1431
|
#
|
1405
1432
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/CreateRuleGroup AWS API Documentation
|
1406
1433
|
#
|
@@ -1814,7 +1841,7 @@ module Aws::NetworkFirewall
|
|
1814
1841
|
# the firewall owner or the transit gateway owner can delete the
|
1815
1842
|
# attachment.
|
1816
1843
|
#
|
1817
|
-
# After you delete a transit gateway attachment,
|
1844
|
+
# After you delete a transit gateway attachment, raffic will no longer
|
1818
1845
|
# flow through the firewall endpoints.
|
1819
1846
|
#
|
1820
1847
|
# After you initiate the delete operation, use DescribeFirewall to
|
@@ -1933,6 +1960,8 @@ module Aws::NetworkFirewall
|
|
1933
1960
|
# resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
|
1934
1961
|
# resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
|
1935
1962
|
# resp.rule_group_response.analysis_results[0].analysis_detail #=> String
|
1963
|
+
# resp.rule_group_response.summary_configuration.rule_options #=> Array
|
1964
|
+
# resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
|
1936
1965
|
#
|
1937
1966
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DeleteRuleGroup AWS API Documentation
|
1938
1967
|
#
|
@@ -2232,6 +2261,7 @@ module Aws::NetworkFirewall
|
|
2232
2261
|
# resp.firewall_policy.stateful_rule_group_references[0].resource_arn #=> String
|
2233
2262
|
# resp.firewall_policy.stateful_rule_group_references[0].priority #=> Integer
|
2234
2263
|
# resp.firewall_policy.stateful_rule_group_references[0].override.action #=> String, one of "DROP_TO_ALERT"
|
2264
|
+
# resp.firewall_policy.stateful_rule_group_references[0].deep_threat_inspection #=> Boolean
|
2235
2265
|
# resp.firewall_policy.stateful_default_actions #=> Array
|
2236
2266
|
# resp.firewall_policy.stateful_default_actions[0] #=> String
|
2237
2267
|
# resp.firewall_policy.stateful_engine_options.rule_order #=> String, one of "DEFAULT_ACTION_ORDER", "STRICT_ORDER"
|
@@ -2523,6 +2553,8 @@ module Aws::NetworkFirewall
|
|
2523
2553
|
# resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
|
2524
2554
|
# resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
|
2525
2555
|
# resp.rule_group_response.analysis_results[0].analysis_detail #=> String
|
2556
|
+
# resp.rule_group_response.summary_configuration.rule_options #=> Array
|
2557
|
+
# resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
|
2526
2558
|
#
|
2527
2559
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroup AWS API Documentation
|
2528
2560
|
#
|
@@ -2597,6 +2629,69 @@ module Aws::NetworkFirewall
|
|
2597
2629
|
req.send_request(options)
|
2598
2630
|
end
|
2599
2631
|
|
2632
|
+
# Returns detailed information for a stateful rule group.
|
2633
|
+
#
|
2634
|
+
# For active threat defense Amazon Web Services managed rule groups,
|
2635
|
+
# this operation provides insight into the protections enabled by the
|
2636
|
+
# rule group, based on Suricata rule metadata fields. Summaries are
|
2637
|
+
# available for rule groups you manage and for active threat defense
|
2638
|
+
# Amazon Web Services managed rule groups.
|
2639
|
+
#
|
2640
|
+
# To modify how threat information appears in summaries, use the
|
2641
|
+
# `SummaryConfiguration` parameter in UpdateRuleGroup.
|
2642
|
+
#
|
2643
|
+
# @option params [String] :rule_group_name
|
2644
|
+
# The descriptive name of the rule group. You can't change the name of
|
2645
|
+
# a rule group after you create it.
|
2646
|
+
#
|
2647
|
+
# You must specify the ARN or the name, and you can specify both.
|
2648
|
+
#
|
2649
|
+
# @option params [String] :rule_group_arn
|
2650
|
+
# Required. The Amazon Resource Name (ARN) of the rule group.
|
2651
|
+
#
|
2652
|
+
# You must specify the ARN or the name, and you can specify both.
|
2653
|
+
#
|
2654
|
+
# @option params [String] :type
|
2655
|
+
# The type of rule group you want a summary for. This is a required
|
2656
|
+
# field.
|
2657
|
+
#
|
2658
|
+
# Valid value: `STATEFUL`
|
2659
|
+
#
|
2660
|
+
# Note that `STATELESS` exists but is not currently supported. If you
|
2661
|
+
# provide `STATELESS`, an exception is returned.
|
2662
|
+
#
|
2663
|
+
# @return [Types::DescribeRuleGroupSummaryResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2664
|
+
#
|
2665
|
+
# * {Types::DescribeRuleGroupSummaryResponse#rule_group_name #rule_group_name} => String
|
2666
|
+
# * {Types::DescribeRuleGroupSummaryResponse#description #description} => String
|
2667
|
+
# * {Types::DescribeRuleGroupSummaryResponse#summary #summary} => Types::Summary
|
2668
|
+
#
|
2669
|
+
# @example Request syntax with placeholder values
|
2670
|
+
#
|
2671
|
+
# resp = client.describe_rule_group_summary({
|
2672
|
+
# rule_group_name: "ResourceName",
|
2673
|
+
# rule_group_arn: "ResourceArn",
|
2674
|
+
# type: "STATELESS", # accepts STATELESS, STATEFUL
|
2675
|
+
# })
|
2676
|
+
#
|
2677
|
+
# @example Response structure
|
2678
|
+
#
|
2679
|
+
# resp.rule_group_name #=> String
|
2680
|
+
# resp.description #=> String
|
2681
|
+
# resp.summary.rule_summaries #=> Array
|
2682
|
+
# resp.summary.rule_summaries[0].sid #=> String
|
2683
|
+
# resp.summary.rule_summaries[0].msg #=> String
|
2684
|
+
# resp.summary.rule_summaries[0].metadata #=> String
|
2685
|
+
#
|
2686
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroupSummary AWS API Documentation
|
2687
|
+
#
|
2688
|
+
# @overload describe_rule_group_summary(params = {})
|
2689
|
+
# @param [Hash] params ({})
|
2690
|
+
def describe_rule_group_summary(params = {}, options = {})
|
2691
|
+
req = build_request(:describe_rule_group_summary, params)
|
2692
|
+
req.send_request(options)
|
2693
|
+
end
|
2694
|
+
|
2600
2695
|
# Returns the data objects for the specified TLS inspection
|
2601
2696
|
# configuration.
|
2602
2697
|
#
|
@@ -3352,7 +3447,7 @@ module Aws::NetworkFirewall
|
|
3352
3447
|
# next_token: "PaginationToken",
|
3353
3448
|
# max_results: 1,
|
3354
3449
|
# scope: "MANAGED", # accepts MANAGED, ACCOUNT
|
3355
|
-
# managed_type: "AWS_MANAGED_THREAT_SIGNATURES", # accepts AWS_MANAGED_THREAT_SIGNATURES, AWS_MANAGED_DOMAIN_LISTS
|
3450
|
+
# managed_type: "AWS_MANAGED_THREAT_SIGNATURES", # accepts AWS_MANAGED_THREAT_SIGNATURES, AWS_MANAGED_DOMAIN_LISTS, ACTIVE_THREAT_DEFENSE
|
3356
3451
|
# type: "STATELESS", # accepts STATELESS, STATEFUL
|
3357
3452
|
# })
|
3358
3453
|
#
|
@@ -3630,9 +3725,8 @@ module Aws::NetworkFirewall
|
|
3630
3725
|
# creation of routing components between the transit gateway and
|
3631
3726
|
# firewall endpoints.
|
3632
3727
|
#
|
3633
|
-
# Only the
|
3634
|
-
#
|
3635
|
-
# this attachment.
|
3728
|
+
# Only the firewall owner can reject the attachment. After rejection, no
|
3729
|
+
# traffic will flow through the firewall endpoints for this attachment.
|
3636
3730
|
#
|
3637
3731
|
# Use DescribeFirewall to monitor the rejection status. To accept the
|
3638
3732
|
# attachment instead of rejecting it, use
|
@@ -4431,6 +4525,7 @@ module Aws::NetworkFirewall
|
|
4431
4525
|
# override: {
|
4432
4526
|
# action: "DROP_TO_ALERT", # accepts DROP_TO_ALERT
|
4433
4527
|
# },
|
4528
|
+
# deep_threat_inspection: false,
|
4434
4529
|
# },
|
4435
4530
|
# ],
|
4436
4531
|
# stateful_default_actions: ["CollectionMember_String"],
|
@@ -4757,6 +4852,11 @@ module Aws::NetworkFirewall
|
|
4757
4852
|
# the rule group for you. To run the stateless rule group analyzer
|
4758
4853
|
# without updating the rule group, set `DryRun` to `TRUE`.
|
4759
4854
|
#
|
4855
|
+
# @option params [Types::SummaryConfiguration] :summary_configuration
|
4856
|
+
# Updates the selected summary configuration for a rule group.
|
4857
|
+
#
|
4858
|
+
# Changes affect subsequent responses from DescribeRuleGroupSummary.
|
4859
|
+
#
|
4760
4860
|
# @return [Types::UpdateRuleGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
4761
4861
|
#
|
4762
4862
|
# * {Types::UpdateRuleGroupResponse#update_token #update_token} => String
|
@@ -4887,6 +4987,9 @@ module Aws::NetworkFirewall
|
|
4887
4987
|
# source_update_token: "UpdateToken",
|
4888
4988
|
# },
|
4889
4989
|
# analyze_rule_group: false,
|
4990
|
+
# summary_configuration: {
|
4991
|
+
# rule_options: ["SID"], # accepts SID, MSG, METADATA
|
4992
|
+
# },
|
4890
4993
|
# })
|
4891
4994
|
#
|
4892
4995
|
# @example Response structure
|
@@ -4915,6 +5018,8 @@ module Aws::NetworkFirewall
|
|
4915
5018
|
# resp.rule_group_response.analysis_results[0].identified_rule_ids[0] #=> String
|
4916
5019
|
# resp.rule_group_response.analysis_results[0].identified_type #=> String, one of "STATELESS_RULE_FORWARDING_ASYMMETRICALLY", "STATELESS_RULE_CONTAINS_TCP_FLAGS"
|
4917
5020
|
# resp.rule_group_response.analysis_results[0].analysis_detail #=> String
|
5021
|
+
# resp.rule_group_response.summary_configuration.rule_options #=> Array
|
5022
|
+
# resp.rule_group_response.summary_configuration.rule_options[0] #=> String, one of "SID", "MSG", "METADATA"
|
4918
5023
|
#
|
4919
5024
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/UpdateRuleGroup AWS API Documentation
|
4920
5025
|
#
|
@@ -5171,7 +5276,7 @@ module Aws::NetworkFirewall
|
|
5171
5276
|
tracer: tracer
|
5172
5277
|
)
|
5173
5278
|
context[:gem_name] = 'aws-sdk-networkfirewall'
|
5174
|
-
context[:gem_version] = '1.
|
5279
|
+
context[:gem_version] = '1.71.0'
|
5175
5280
|
Seahorse::Client::Request.new(handlers, context)
|
5176
5281
|
end
|
5177
5282
|
|
@@ -71,6 +71,7 @@ module Aws::NetworkFirewall
|
|
71
71
|
CreateVpcEndpointAssociationResponse = Shapes::StructureShape.new(name: 'CreateVpcEndpointAssociationResponse')
|
72
72
|
CustomAction = Shapes::StructureShape.new(name: 'CustomAction')
|
73
73
|
CustomActions = Shapes::ListShape.new(name: 'CustomActions')
|
74
|
+
DeepThreatInspection = Shapes::BooleanShape.new(name: 'DeepThreatInspection')
|
74
75
|
DeleteFirewallPolicyRequest = Shapes::StructureShape.new(name: 'DeleteFirewallPolicyRequest')
|
75
76
|
DeleteFirewallPolicyResponse = Shapes::StructureShape.new(name: 'DeleteFirewallPolicyResponse')
|
76
77
|
DeleteFirewallRequest = Shapes::StructureShape.new(name: 'DeleteFirewallRequest')
|
@@ -101,6 +102,8 @@ module Aws::NetworkFirewall
|
|
101
102
|
DescribeRuleGroupMetadataResponse = Shapes::StructureShape.new(name: 'DescribeRuleGroupMetadataResponse')
|
102
103
|
DescribeRuleGroupRequest = Shapes::StructureShape.new(name: 'DescribeRuleGroupRequest')
|
103
104
|
DescribeRuleGroupResponse = Shapes::StructureShape.new(name: 'DescribeRuleGroupResponse')
|
105
|
+
DescribeRuleGroupSummaryRequest = Shapes::StructureShape.new(name: 'DescribeRuleGroupSummaryRequest')
|
106
|
+
DescribeRuleGroupSummaryResponse = Shapes::StructureShape.new(name: 'DescribeRuleGroupSummaryResponse')
|
104
107
|
DescribeTLSInspectionConfigurationRequest = Shapes::StructureShape.new(name: 'DescribeTLSInspectionConfigurationRequest')
|
105
108
|
DescribeTLSInspectionConfigurationResponse = Shapes::StructureShape.new(name: 'DescribeTLSInspectionConfigurationResponse')
|
106
109
|
DescribeVpcEndpointAssociationRequest = Shapes::StructureShape.new(name: 'DescribeVpcEndpointAssociationRequest')
|
@@ -247,6 +250,8 @@ module Aws::NetworkFirewall
|
|
247
250
|
RuleOption = Shapes::StructureShape.new(name: 'RuleOption')
|
248
251
|
RuleOptions = Shapes::ListShape.new(name: 'RuleOptions')
|
249
252
|
RuleOrder = Shapes::StringShape.new(name: 'RuleOrder')
|
253
|
+
RuleSummaries = Shapes::ListShape.new(name: 'RuleSummaries')
|
254
|
+
RuleSummary = Shapes::StructureShape.new(name: 'RuleSummary')
|
250
255
|
RuleTargets = Shapes::ListShape.new(name: 'RuleTargets')
|
251
256
|
RuleVariableName = Shapes::StringShape.new(name: 'RuleVariableName')
|
252
257
|
RuleVariables = Shapes::StructureShape.new(name: 'RuleVariables')
|
@@ -293,6 +298,10 @@ module Aws::NetworkFirewall
|
|
293
298
|
StreamExceptionPolicy = Shapes::StringShape.new(name: 'StreamExceptionPolicy')
|
294
299
|
SubnetMapping = Shapes::StructureShape.new(name: 'SubnetMapping')
|
295
300
|
SubnetMappings = Shapes::ListShape.new(name: 'SubnetMappings')
|
301
|
+
Summary = Shapes::StructureShape.new(name: 'Summary')
|
302
|
+
SummaryConfiguration = Shapes::StructureShape.new(name: 'SummaryConfiguration')
|
303
|
+
SummaryRuleOption = Shapes::StringShape.new(name: 'SummaryRuleOption')
|
304
|
+
SummaryRuleOptions = Shapes::ListShape.new(name: 'SummaryRuleOptions')
|
296
305
|
SupportedAvailabilityZones = Shapes::MapShape.new(name: 'SupportedAvailabilityZones')
|
297
306
|
SyncState = Shapes::StructureShape.new(name: 'SyncState')
|
298
307
|
SyncStateConfig = Shapes::MapShape.new(name: 'SyncStateConfig')
|
@@ -514,6 +523,7 @@ module Aws::NetworkFirewall
|
|
514
523
|
CreateRuleGroupRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
|
515
524
|
CreateRuleGroupRequest.add_member(:source_metadata, Shapes::ShapeRef.new(shape: SourceMetadata, location_name: "SourceMetadata"))
|
516
525
|
CreateRuleGroupRequest.add_member(:analyze_rule_group, Shapes::ShapeRef.new(shape: Boolean, location_name: "AnalyzeRuleGroup"))
|
526
|
+
CreateRuleGroupRequest.add_member(:summary_configuration, Shapes::ShapeRef.new(shape: SummaryConfiguration, location_name: "SummaryConfiguration"))
|
517
527
|
CreateRuleGroupRequest.struct_class = Types::CreateRuleGroupRequest
|
518
528
|
|
519
529
|
CreateRuleGroupResponse.add_member(:update_token, Shapes::ShapeRef.new(shape: UpdateToken, required: true, location_name: "UpdateToken"))
|
@@ -685,6 +695,16 @@ module Aws::NetworkFirewall
|
|
685
695
|
DescribeRuleGroupResponse.add_member(:rule_group_response, Shapes::ShapeRef.new(shape: RuleGroupResponse, required: true, location_name: "RuleGroupResponse"))
|
686
696
|
DescribeRuleGroupResponse.struct_class = Types::DescribeRuleGroupResponse
|
687
697
|
|
698
|
+
DescribeRuleGroupSummaryRequest.add_member(:rule_group_name, Shapes::ShapeRef.new(shape: ResourceName, location_name: "RuleGroupName"))
|
699
|
+
DescribeRuleGroupSummaryRequest.add_member(:rule_group_arn, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "RuleGroupArn"))
|
700
|
+
DescribeRuleGroupSummaryRequest.add_member(:type, Shapes::ShapeRef.new(shape: RuleGroupType, location_name: "Type"))
|
701
|
+
DescribeRuleGroupSummaryRequest.struct_class = Types::DescribeRuleGroupSummaryRequest
|
702
|
+
|
703
|
+
DescribeRuleGroupSummaryResponse.add_member(:rule_group_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "RuleGroupName"))
|
704
|
+
DescribeRuleGroupSummaryResponse.add_member(:description, Shapes::ShapeRef.new(shape: Description, location_name: "Description"))
|
705
|
+
DescribeRuleGroupSummaryResponse.add_member(:summary, Shapes::ShapeRef.new(shape: Summary, location_name: "Summary"))
|
706
|
+
DescribeRuleGroupSummaryResponse.struct_class = Types::DescribeRuleGroupSummaryResponse
|
707
|
+
|
688
708
|
DescribeTLSInspectionConfigurationRequest.add_member(:tls_inspection_configuration_arn, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "TLSInspectionConfigurationArn"))
|
689
709
|
DescribeTLSInspectionConfigurationRequest.add_member(:tls_inspection_configuration_name, Shapes::ShapeRef.new(shape: ResourceName, location_name: "TLSInspectionConfigurationName"))
|
690
710
|
DescribeTLSInspectionConfigurationRequest.struct_class = Types::DescribeTLSInspectionConfigurationRequest
|
@@ -1103,6 +1123,7 @@ module Aws::NetworkFirewall
|
|
1103
1123
|
RuleGroupResponse.add_member(:sns_topic, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "SnsTopic"))
|
1104
1124
|
RuleGroupResponse.add_member(:last_modified_time, Shapes::ShapeRef.new(shape: LastUpdateTime, location_name: "LastModifiedTime"))
|
1105
1125
|
RuleGroupResponse.add_member(:analysis_results, Shapes::ShapeRef.new(shape: AnalysisResultList, location_name: "AnalysisResults"))
|
1126
|
+
RuleGroupResponse.add_member(:summary_configuration, Shapes::ShapeRef.new(shape: SummaryConfiguration, location_name: "SummaryConfiguration"))
|
1106
1127
|
RuleGroupResponse.struct_class = Types::RuleGroupResponse
|
1107
1128
|
|
1108
1129
|
RuleGroups.member = Shapes::ShapeRef.new(shape: RuleGroupMetadata)
|
@@ -1115,6 +1136,13 @@ module Aws::NetworkFirewall
|
|
1115
1136
|
|
1116
1137
|
RuleOptions.member = Shapes::ShapeRef.new(shape: RuleOption)
|
1117
1138
|
|
1139
|
+
RuleSummaries.member = Shapes::ShapeRef.new(shape: RuleSummary)
|
1140
|
+
|
1141
|
+
RuleSummary.add_member(:sid, Shapes::ShapeRef.new(shape: CollectionMember_String, location_name: "SID"))
|
1142
|
+
RuleSummary.add_member(:msg, Shapes::ShapeRef.new(shape: CollectionMember_String, location_name: "Msg"))
|
1143
|
+
RuleSummary.add_member(:metadata, Shapes::ShapeRef.new(shape: CollectionMember_String, location_name: "Metadata"))
|
1144
|
+
RuleSummary.struct_class = Types::RuleSummary
|
1145
|
+
|
1118
1146
|
RuleTargets.member = Shapes::ShapeRef.new(shape: CollectionMember_String)
|
1119
1147
|
|
1120
1148
|
RuleVariables.add_member(:ip_sets, Shapes::ShapeRef.new(shape: IPSets, location_name: "IPSets"))
|
@@ -1212,6 +1240,7 @@ module Aws::NetworkFirewall
|
|
1212
1240
|
StatefulRuleGroupReference.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceArn"))
|
1213
1241
|
StatefulRuleGroupReference.add_member(:priority, Shapes::ShapeRef.new(shape: Priority, location_name: "Priority", metadata: {"box" => true}))
|
1214
1242
|
StatefulRuleGroupReference.add_member(:override, Shapes::ShapeRef.new(shape: StatefulRuleGroupOverride, location_name: "Override"))
|
1243
|
+
StatefulRuleGroupReference.add_member(:deep_threat_inspection, Shapes::ShapeRef.new(shape: DeepThreatInspection, location_name: "DeepThreatInspection"))
|
1215
1244
|
StatefulRuleGroupReference.struct_class = Types::StatefulRuleGroupReference
|
1216
1245
|
|
1217
1246
|
StatefulRuleGroupReferences.member = Shapes::ShapeRef.new(shape: StatefulRuleGroupReference)
|
@@ -1245,6 +1274,14 @@ module Aws::NetworkFirewall
|
|
1245
1274
|
|
1246
1275
|
SubnetMappings.member = Shapes::ShapeRef.new(shape: SubnetMapping)
|
1247
1276
|
|
1277
|
+
Summary.add_member(:rule_summaries, Shapes::ShapeRef.new(shape: RuleSummaries, location_name: "RuleSummaries"))
|
1278
|
+
Summary.struct_class = Types::Summary
|
1279
|
+
|
1280
|
+
SummaryConfiguration.add_member(:rule_options, Shapes::ShapeRef.new(shape: SummaryRuleOptions, location_name: "RuleOptions"))
|
1281
|
+
SummaryConfiguration.struct_class = Types::SummaryConfiguration
|
1282
|
+
|
1283
|
+
SummaryRuleOptions.member = Shapes::ShapeRef.new(shape: SummaryRuleOption)
|
1284
|
+
|
1248
1285
|
SupportedAvailabilityZones.key = Shapes::ShapeRef.new(shape: AvailabilityZone)
|
1249
1286
|
SupportedAvailabilityZones.value = Shapes::ShapeRef.new(shape: AvailabilityZoneMetadata)
|
1250
1287
|
|
@@ -1436,6 +1473,7 @@ module Aws::NetworkFirewall
|
|
1436
1473
|
UpdateRuleGroupRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
|
1437
1474
|
UpdateRuleGroupRequest.add_member(:source_metadata, Shapes::ShapeRef.new(shape: SourceMetadata, location_name: "SourceMetadata"))
|
1438
1475
|
UpdateRuleGroupRequest.add_member(:analyze_rule_group, Shapes::ShapeRef.new(shape: Boolean, location_name: "AnalyzeRuleGroup"))
|
1476
|
+
UpdateRuleGroupRequest.add_member(:summary_configuration, Shapes::ShapeRef.new(shape: SummaryConfiguration, location_name: "SummaryConfiguration"))
|
1439
1477
|
UpdateRuleGroupRequest.struct_class = Types::UpdateRuleGroupRequest
|
1440
1478
|
|
1441
1479
|
UpdateRuleGroupResponse.add_member(:update_token, Shapes::ShapeRef.new(shape: UpdateToken, required: true, location_name: "UpdateToken"))
|
@@ -1823,6 +1861,18 @@ module Aws::NetworkFirewall
|
|
1823
1861
|
o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
|
1824
1862
|
end)
|
1825
1863
|
|
1864
|
+
api.add_operation(:describe_rule_group_summary, Seahorse::Model::Operation.new.tap do |o|
|
1865
|
+
o.name = "DescribeRuleGroupSummary"
|
1866
|
+
o.http_method = "POST"
|
1867
|
+
o.http_request_uri = "/"
|
1868
|
+
o.input = Shapes::ShapeRef.new(shape: DescribeRuleGroupSummaryRequest)
|
1869
|
+
o.output = Shapes::ShapeRef.new(shape: DescribeRuleGroupSummaryResponse)
|
1870
|
+
o.errors << Shapes::ShapeRef.new(shape: InvalidRequestException)
|
1871
|
+
o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
|
1872
|
+
o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
|
1873
|
+
o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
|
1874
|
+
end)
|
1875
|
+
|
1826
1876
|
api.add_operation(:describe_tls_inspection_configuration, Seahorse::Model::Operation.new.tap do |o|
|
1827
1877
|
o.name = "DescribeTLSInspectionConfiguration"
|
1828
1878
|
o.http_method = "POST"
|
@@ -1146,6 +1146,18 @@ module Aws::NetworkFirewall
|
|
1146
1146
|
# analyzer without creating the rule group, set `DryRun` to `TRUE`.
|
1147
1147
|
# @return [Boolean]
|
1148
1148
|
#
|
1149
|
+
# @!attribute [rw] summary_configuration
|
1150
|
+
# An object that contains a `RuleOptions` array of strings. You use
|
1151
|
+
# `RuleOptions` to determine which of the following RuleSummary values
|
1152
|
+
# are returned in response to `DescribeRuleGroupSummary`.
|
1153
|
+
#
|
1154
|
+
# * `Metadata` - returns
|
1155
|
+
#
|
1156
|
+
# * `Msg`
|
1157
|
+
#
|
1158
|
+
# * `SID`
|
1159
|
+
# @return [Types::SummaryConfiguration]
|
1160
|
+
#
|
1149
1161
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/CreateRuleGroupRequest AWS API Documentation
|
1150
1162
|
#
|
1151
1163
|
class CreateRuleGroupRequest < Struct.new(
|
@@ -1159,7 +1171,8 @@ module Aws::NetworkFirewall
|
|
1159
1171
|
:dry_run,
|
1160
1172
|
:encryption_configuration,
|
1161
1173
|
:source_metadata,
|
1162
|
-
:analyze_rule_group
|
1174
|
+
:analyze_rule_group,
|
1175
|
+
:summary_configuration)
|
1163
1176
|
SENSITIVE = []
|
1164
1177
|
include Aws::Structure
|
1165
1178
|
end
|
@@ -2233,6 +2246,73 @@ module Aws::NetworkFirewall
|
|
2233
2246
|
include Aws::Structure
|
2234
2247
|
end
|
2235
2248
|
|
2249
|
+
# @!attribute [rw] rule_group_name
|
2250
|
+
# The descriptive name of the rule group. You can't change the name
|
2251
|
+
# of a rule group after you create it.
|
2252
|
+
#
|
2253
|
+
# You must specify the ARN or the name, and you can specify both.
|
2254
|
+
# @return [String]
|
2255
|
+
#
|
2256
|
+
# @!attribute [rw] rule_group_arn
|
2257
|
+
# Required. The Amazon Resource Name (ARN) of the rule group.
|
2258
|
+
#
|
2259
|
+
# You must specify the ARN or the name, and you can specify both.
|
2260
|
+
# @return [String]
|
2261
|
+
#
|
2262
|
+
# @!attribute [rw] type
|
2263
|
+
# The type of rule group you want a summary for. This is a required
|
2264
|
+
# field.
|
2265
|
+
#
|
2266
|
+
# Valid value: `STATEFUL`
|
2267
|
+
#
|
2268
|
+
# Note that `STATELESS` exists but is not currently supported. If you
|
2269
|
+
# provide `STATELESS`, an exception is returned.
|
2270
|
+
# @return [String]
|
2271
|
+
#
|
2272
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroupSummaryRequest AWS API Documentation
|
2273
|
+
#
|
2274
|
+
class DescribeRuleGroupSummaryRequest < Struct.new(
|
2275
|
+
:rule_group_name,
|
2276
|
+
:rule_group_arn,
|
2277
|
+
:type)
|
2278
|
+
SENSITIVE = []
|
2279
|
+
include Aws::Structure
|
2280
|
+
end
|
2281
|
+
|
2282
|
+
# @!attribute [rw] rule_group_name
|
2283
|
+
# The descriptive name of the rule group. You can't change the name
|
2284
|
+
# of a rule group after you create it.
|
2285
|
+
# @return [String]
|
2286
|
+
#
|
2287
|
+
# @!attribute [rw] description
|
2288
|
+
# A description of the rule group.
|
2289
|
+
# @return [String]
|
2290
|
+
#
|
2291
|
+
# @!attribute [rw] summary
|
2292
|
+
# A complex type that contains rule information based on the rule
|
2293
|
+
# group's configured summary settings. The content varies depending
|
2294
|
+
# on the fields that you specified to extract in your
|
2295
|
+
# SummaryConfiguration. When you haven't configured any summary
|
2296
|
+
# settings, this returns an empty array. The response might include:
|
2297
|
+
#
|
2298
|
+
# * Rule identifiers
|
2299
|
+
#
|
2300
|
+
# * Rule descriptions
|
2301
|
+
#
|
2302
|
+
# * Any metadata fields that you specified in your
|
2303
|
+
# SummaryConfiguration
|
2304
|
+
# @return [Types::Summary]
|
2305
|
+
#
|
2306
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeRuleGroupSummaryResponse AWS API Documentation
|
2307
|
+
#
|
2308
|
+
class DescribeRuleGroupSummaryResponse < Struct.new(
|
2309
|
+
:rule_group_name,
|
2310
|
+
:description,
|
2311
|
+
:summary)
|
2312
|
+
SENSITIVE = []
|
2313
|
+
include Aws::Structure
|
2314
|
+
end
|
2315
|
+
|
2236
2316
|
# @!attribute [rw] tls_inspection_configuration_arn
|
2237
2317
|
# The Amazon Resource Name (ARN) of the TLS inspection configuration.
|
2238
2318
|
#
|
@@ -4911,6 +4991,16 @@ module Aws::NetworkFirewall
|
|
4911
4991
|
# in the list of analysis results.
|
4912
4992
|
# @return [Array<Types::AnalysisResult>]
|
4913
4993
|
#
|
4994
|
+
# @!attribute [rw] summary_configuration
|
4995
|
+
# A complex type containing the currently selected rule option fields
|
4996
|
+
# that will be displayed for rule summarization returned by
|
4997
|
+
# DescribeRuleGroupSummary.
|
4998
|
+
#
|
4999
|
+
# * The `RuleOptions` specified in SummaryConfiguration
|
5000
|
+
#
|
5001
|
+
# * Rule metadata organization preferences
|
5002
|
+
# @return [Types::SummaryConfiguration]
|
5003
|
+
#
|
4914
5004
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/RuleGroupResponse AWS API Documentation
|
4915
5005
|
#
|
4916
5006
|
class RuleGroupResponse < Struct.new(
|
@@ -4928,7 +5018,8 @@ module Aws::NetworkFirewall
|
|
4928
5018
|
:source_metadata,
|
4929
5019
|
:sns_topic,
|
4930
5020
|
:last_modified_time,
|
4931
|
-
:analysis_results
|
5021
|
+
:analysis_results,
|
5022
|
+
:summary_configuration)
|
4932
5023
|
SENSITIVE = []
|
4933
5024
|
include Aws::Structure
|
4934
5025
|
end
|
@@ -4967,6 +5058,39 @@ module Aws::NetworkFirewall
|
|
4967
5058
|
include Aws::Structure
|
4968
5059
|
end
|
4969
5060
|
|
5061
|
+
# A complex type containing details about a Suricata rule. Contains:
|
5062
|
+
#
|
5063
|
+
# * `SID`
|
5064
|
+
#
|
5065
|
+
# * `Msg`
|
5066
|
+
#
|
5067
|
+
# * `Metadata`
|
5068
|
+
#
|
5069
|
+
# Summaries are available for rule groups you manage and for active
|
5070
|
+
# threat defense Amazon Web Services managed rule groups.
|
5071
|
+
#
|
5072
|
+
# @!attribute [rw] sid
|
5073
|
+
# The unique identifier (Signature ID) of the Suricata rule.
|
5074
|
+
# @return [String]
|
5075
|
+
#
|
5076
|
+
# @!attribute [rw] msg
|
5077
|
+
# The contents taken from the rule's msg field.
|
5078
|
+
# @return [String]
|
5079
|
+
#
|
5080
|
+
# @!attribute [rw] metadata
|
5081
|
+
# The contents of the rule's metadata.
|
5082
|
+
# @return [String]
|
5083
|
+
#
|
5084
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/RuleSummary AWS API Documentation
|
5085
|
+
#
|
5086
|
+
class RuleSummary < Struct.new(
|
5087
|
+
:sid,
|
5088
|
+
:msg,
|
5089
|
+
:metadata)
|
5090
|
+
SENSITIVE = []
|
5091
|
+
include Aws::Structure
|
5092
|
+
end
|
5093
|
+
|
4970
5094
|
# Settings that are available for use in the rules in the RuleGroup
|
4971
5095
|
# where this is defined. See CreateRuleGroup or UpdateRuleGroup for
|
4972
5096
|
# usage.
|
@@ -5644,12 +5768,32 @@ module Aws::NetworkFirewall
|
|
5644
5768
|
# the rule group within a policy.
|
5645
5769
|
# @return [Types::StatefulRuleGroupOverride]
|
5646
5770
|
#
|
5771
|
+
# @!attribute [rw] deep_threat_inspection
|
5772
|
+
# Network Firewall plans to augment the active threat defense managed
|
5773
|
+
# rule group with an additional deep threat inspection capability.
|
5774
|
+
# When this capability is released, Amazon Web Services will analyze
|
5775
|
+
# service logs of network traffic processed by these rule groups to
|
5776
|
+
# identify threat indicators across customers. Amazon Web Services
|
5777
|
+
# will use these threat indicators to improve the active threat
|
5778
|
+
# defense managed rule groups and protect the security of Amazon Web
|
5779
|
+
# Services customers and services.
|
5780
|
+
#
|
5781
|
+
# <note markdown="1"> Customers can opt-out of deep threat inspection at any time through
|
5782
|
+
# the Network Firewall console or API. When customers opt out, Network
|
5783
|
+
# Firewall will not use the network traffic processed by those
|
5784
|
+
# customers' active threat defense rule groups for rule group
|
5785
|
+
# improvement.
|
5786
|
+
#
|
5787
|
+
# </note>
|
5788
|
+
# @return [Boolean]
|
5789
|
+
#
|
5647
5790
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/StatefulRuleGroupReference AWS API Documentation
|
5648
5791
|
#
|
5649
5792
|
class StatefulRuleGroupReference < Struct.new(
|
5650
5793
|
:resource_arn,
|
5651
5794
|
:priority,
|
5652
|
-
:override
|
5795
|
+
:override,
|
5796
|
+
:deep_threat_inspection)
|
5653
5797
|
SENSITIVE = []
|
5654
5798
|
include Aws::Structure
|
5655
5799
|
end
|
@@ -5787,6 +5931,52 @@ module Aws::NetworkFirewall
|
|
5787
5931
|
include Aws::Structure
|
5788
5932
|
end
|
5789
5933
|
|
5934
|
+
# A complex type containing summaries of security protections provided
|
5935
|
+
# by a rule group.
|
5936
|
+
#
|
5937
|
+
# Network Firewall extracts this information from selected fields in the
|
5938
|
+
# rule group's Suricata rules, based on your SummaryConfiguration
|
5939
|
+
# settings.
|
5940
|
+
#
|
5941
|
+
# @!attribute [rw] rule_summaries
|
5942
|
+
# An array of RuleSummary objects containing individual rule details
|
5943
|
+
# that had been configured by the rulegroup's SummaryConfiguration.
|
5944
|
+
# @return [Array<Types::RuleSummary>]
|
5945
|
+
#
|
5946
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/Summary AWS API Documentation
|
5947
|
+
#
|
5948
|
+
class Summary < Struct.new(
|
5949
|
+
:rule_summaries)
|
5950
|
+
SENSITIVE = []
|
5951
|
+
include Aws::Structure
|
5952
|
+
end
|
5953
|
+
|
5954
|
+
# A complex type that specifies which Suricata rule metadata fields to
|
5955
|
+
# use when displaying threat information. Contains:
|
5956
|
+
#
|
5957
|
+
# * `RuleOptions` - The Suricata rule options fields to extract and
|
5958
|
+
# display
|
5959
|
+
#
|
5960
|
+
# ^
|
5961
|
+
#
|
5962
|
+
# These settings affect how threat information appears in both the
|
5963
|
+
# console and API responses. Summaries are available for rule groups you
|
5964
|
+
# manage and for active threat defense Amazon Web Services managed rule
|
5965
|
+
# groups.
|
5966
|
+
#
|
5967
|
+
# @!attribute [rw] rule_options
|
5968
|
+
# Specifies the selected rule options returned by
|
5969
|
+
# DescribeRuleGroupSummary.
|
5970
|
+
# @return [Array<String>]
|
5971
|
+
#
|
5972
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/SummaryConfiguration AWS API Documentation
|
5973
|
+
#
|
5974
|
+
class SummaryConfiguration < Struct.new(
|
5975
|
+
:rule_options)
|
5976
|
+
SENSITIVE = []
|
5977
|
+
include Aws::Structure
|
5978
|
+
end
|
5979
|
+
|
5790
5980
|
# The status of the firewall endpoint and firewall policy configuration
|
5791
5981
|
# for a single VPC subnet. This is part of the FirewallStatus.
|
5792
5982
|
#
|
@@ -7102,6 +7292,12 @@ module Aws::NetworkFirewall
|
|
7102
7292
|
# analyzer without updating the rule group, set `DryRun` to `TRUE`.
|
7103
7293
|
# @return [Boolean]
|
7104
7294
|
#
|
7295
|
+
# @!attribute [rw] summary_configuration
|
7296
|
+
# Updates the selected summary configuration for a rule group.
|
7297
|
+
#
|
7298
|
+
# Changes affect subsequent responses from DescribeRuleGroupSummary.
|
7299
|
+
# @return [Types::SummaryConfiguration]
|
7300
|
+
#
|
7105
7301
|
# @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/UpdateRuleGroupRequest AWS API Documentation
|
7106
7302
|
#
|
7107
7303
|
class UpdateRuleGroupRequest < Struct.new(
|
@@ -7115,7 +7311,8 @@ module Aws::NetworkFirewall
|
|
7115
7311
|
:dry_run,
|
7116
7312
|
:encryption_configuration,
|
7117
7313
|
:source_metadata,
|
7118
|
-
:analyze_rule_group
|
7314
|
+
:analyze_rule_group,
|
7315
|
+
:summary_configuration)
|
7119
7316
|
SENSITIVE = []
|
7120
7317
|
include Aws::Structure
|
7121
7318
|
end
|
data/sig/client.rbs
CHANGED
@@ -18,6 +18,7 @@ module Aws
|
|
18
18
|
?account_id: String,
|
19
19
|
?active_endpoint_cache: bool,
|
20
20
|
?adaptive_retry_wait_to_fill: bool,
|
21
|
+
?auth_scheme_preference: Array[String],
|
21
22
|
?client_side_monitoring: bool,
|
22
23
|
?client_side_monitoring_client_id: String,
|
23
24
|
?client_side_monitoring_host: String,
|
@@ -224,7 +225,8 @@ module Aws
|
|
224
225
|
priority: ::Integer?,
|
225
226
|
override: {
|
226
227
|
action: ("DROP_TO_ALERT")?
|
227
|
-
}
|
228
|
+
}?,
|
229
|
+
deep_threat_inspection: bool?
|
228
230
|
},
|
229
231
|
]?,
|
230
232
|
stateful_default_actions: Array[::String]?,
|
@@ -384,7 +386,10 @@ module Aws
|
|
384
386
|
source_arn: ::String?,
|
385
387
|
source_update_token: ::String?
|
386
388
|
},
|
387
|
-
?analyze_rule_group: bool
|
389
|
+
?analyze_rule_group: bool,
|
390
|
+
?summary_configuration: {
|
391
|
+
rule_options: Array[("SID" | "MSG" | "METADATA")]?
|
392
|
+
}
|
388
393
|
) -> _CreateRuleGroupResponseSuccess
|
389
394
|
| (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateRuleGroupResponseSuccess
|
390
395
|
|
@@ -673,6 +678,20 @@ module Aws
|
|
673
678
|
) -> _DescribeRuleGroupMetadataResponseSuccess
|
674
679
|
| (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupMetadataResponseSuccess
|
675
680
|
|
681
|
+
interface _DescribeRuleGroupSummaryResponseSuccess
|
682
|
+
include ::Seahorse::Client::_ResponseSuccess[Types::DescribeRuleGroupSummaryResponse]
|
683
|
+
def rule_group_name: () -> ::String
|
684
|
+
def description: () -> ::String
|
685
|
+
def summary: () -> Types::Summary
|
686
|
+
end
|
687
|
+
# https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#describe_rule_group_summary-instance_method
|
688
|
+
def describe_rule_group_summary: (
|
689
|
+
?rule_group_name: ::String,
|
690
|
+
?rule_group_arn: ::String,
|
691
|
+
?type: ("STATELESS" | "STATEFUL")
|
692
|
+
) -> _DescribeRuleGroupSummaryResponseSuccess
|
693
|
+
| (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeRuleGroupSummaryResponseSuccess
|
694
|
+
|
676
695
|
interface _DescribeTLSInspectionConfigurationResponseSuccess
|
677
696
|
include ::Seahorse::Client::_ResponseSuccess[Types::DescribeTLSInspectionConfigurationResponse]
|
678
697
|
def update_token: () -> ::String
|
@@ -844,7 +863,7 @@ module Aws
|
|
844
863
|
?next_token: ::String,
|
845
864
|
?max_results: ::Integer,
|
846
865
|
?scope: ("MANAGED" | "ACCOUNT"),
|
847
|
-
?managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS"),
|
866
|
+
?managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE"),
|
848
867
|
?type: ("STATELESS" | "STATEFUL")
|
849
868
|
) -> _ListRuleGroupsResponseSuccess
|
850
869
|
| (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListRuleGroupsResponseSuccess
|
@@ -1125,7 +1144,8 @@ module Aws
|
|
1125
1144
|
priority: ::Integer?,
|
1126
1145
|
override: {
|
1127
1146
|
action: ("DROP_TO_ALERT")?
|
1128
|
-
}
|
1147
|
+
}?,
|
1148
|
+
deep_threat_inspection: bool?
|
1129
1149
|
},
|
1130
1150
|
]?,
|
1131
1151
|
stateful_default_actions: Array[::String]?,
|
@@ -1314,7 +1334,10 @@ module Aws
|
|
1314
1334
|
source_arn: ::String?,
|
1315
1335
|
source_update_token: ::String?
|
1316
1336
|
},
|
1317
|
-
?analyze_rule_group: bool
|
1337
|
+
?analyze_rule_group: bool,
|
1338
|
+
?summary_configuration: {
|
1339
|
+
rule_options: Array[("SID" | "MSG" | "METADATA")]?
|
1340
|
+
}
|
1318
1341
|
) -> _UpdateRuleGroupResponseSuccess
|
1319
1342
|
| (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateRuleGroupResponseSuccess
|
1320
1343
|
|
data/sig/resource.rbs
CHANGED
@@ -18,6 +18,7 @@ module Aws
|
|
18
18
|
?account_id: String,
|
19
19
|
?active_endpoint_cache: bool,
|
20
20
|
?adaptive_retry_wait_to_fill: bool,
|
21
|
+
?auth_scheme_preference: Array[String],
|
21
22
|
?client_side_monitoring: bool,
|
22
23
|
?client_side_monitoring_client_id: String,
|
23
24
|
?client_side_monitoring_host: String,
|
data/sig/types.rbs
CHANGED
@@ -195,6 +195,7 @@ module Aws::NetworkFirewall
|
|
195
195
|
attr_accessor encryption_configuration: Types::EncryptionConfiguration
|
196
196
|
attr_accessor source_metadata: Types::SourceMetadata
|
197
197
|
attr_accessor analyze_rule_group: bool
|
198
|
+
attr_accessor summary_configuration: Types::SummaryConfiguration
|
198
199
|
SENSITIVE: []
|
199
200
|
end
|
200
201
|
|
@@ -436,6 +437,20 @@ module Aws::NetworkFirewall
|
|
436
437
|
SENSITIVE: []
|
437
438
|
end
|
438
439
|
|
440
|
+
class DescribeRuleGroupSummaryRequest
|
441
|
+
attr_accessor rule_group_name: ::String
|
442
|
+
attr_accessor rule_group_arn: ::String
|
443
|
+
attr_accessor type: ("STATELESS" | "STATEFUL")
|
444
|
+
SENSITIVE: []
|
445
|
+
end
|
446
|
+
|
447
|
+
class DescribeRuleGroupSummaryResponse
|
448
|
+
attr_accessor rule_group_name: ::String
|
449
|
+
attr_accessor description: ::String
|
450
|
+
attr_accessor summary: Types::Summary
|
451
|
+
SENSITIVE: []
|
452
|
+
end
|
453
|
+
|
439
454
|
class DescribeTLSInspectionConfigurationRequest
|
440
455
|
attr_accessor tls_inspection_configuration_arn: ::String
|
441
456
|
attr_accessor tls_inspection_configuration_name: ::String
|
@@ -785,7 +800,7 @@ module Aws::NetworkFirewall
|
|
785
800
|
attr_accessor next_token: ::String
|
786
801
|
attr_accessor max_results: ::Integer
|
787
802
|
attr_accessor scope: ("MANAGED" | "ACCOUNT")
|
788
|
-
attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS")
|
803
|
+
attr_accessor managed_type: ("AWS_MANAGED_THREAT_SIGNATURES" | "AWS_MANAGED_DOMAIN_LISTS" | "ACTIVE_THREAT_DEFENSE")
|
789
804
|
attr_accessor type: ("STATELESS" | "STATEFUL")
|
790
805
|
SENSITIVE: []
|
791
806
|
end
|
@@ -959,6 +974,7 @@ module Aws::NetworkFirewall
|
|
959
974
|
attr_accessor sns_topic: ::String
|
960
975
|
attr_accessor last_modified_time: ::Time
|
961
976
|
attr_accessor analysis_results: ::Array[Types::AnalysisResult]
|
977
|
+
attr_accessor summary_configuration: Types::SummaryConfiguration
|
962
978
|
SENSITIVE: []
|
963
979
|
end
|
964
980
|
|
@@ -968,6 +984,13 @@ module Aws::NetworkFirewall
|
|
968
984
|
SENSITIVE: []
|
969
985
|
end
|
970
986
|
|
987
|
+
class RuleSummary
|
988
|
+
attr_accessor sid: ::String
|
989
|
+
attr_accessor msg: ::String
|
990
|
+
attr_accessor metadata: ::String
|
991
|
+
SENSITIVE: []
|
992
|
+
end
|
993
|
+
|
971
994
|
class RuleVariables
|
972
995
|
attr_accessor ip_sets: ::Hash[::String, Types::IPSet]
|
973
996
|
attr_accessor port_sets: ::Hash[::String, Types::PortSet]
|
@@ -1086,6 +1109,7 @@ module Aws::NetworkFirewall
|
|
1086
1109
|
attr_accessor resource_arn: ::String
|
1087
1110
|
attr_accessor priority: ::Integer
|
1088
1111
|
attr_accessor override: Types::StatefulRuleGroupOverride
|
1112
|
+
attr_accessor deep_threat_inspection: bool
|
1089
1113
|
SENSITIVE: []
|
1090
1114
|
end
|
1091
1115
|
|
@@ -1118,6 +1142,16 @@ module Aws::NetworkFirewall
|
|
1118
1142
|
SENSITIVE: []
|
1119
1143
|
end
|
1120
1144
|
|
1145
|
+
class Summary
|
1146
|
+
attr_accessor rule_summaries: ::Array[Types::RuleSummary]
|
1147
|
+
SENSITIVE: []
|
1148
|
+
end
|
1149
|
+
|
1150
|
+
class SummaryConfiguration
|
1151
|
+
attr_accessor rule_options: ::Array[("SID" | "MSG" | "METADATA")]
|
1152
|
+
SENSITIVE: []
|
1153
|
+
end
|
1154
|
+
|
1121
1155
|
class SyncState
|
1122
1156
|
attr_accessor attachment: Types::Attachment
|
1123
1157
|
attr_accessor config: ::Hash[::String, Types::PerObjectStatus]
|
@@ -1351,6 +1385,7 @@ module Aws::NetworkFirewall
|
|
1351
1385
|
attr_accessor encryption_configuration: Types::EncryptionConfiguration
|
1352
1386
|
attr_accessor source_metadata: Types::SourceMetadata
|
1353
1387
|
attr_accessor analyze_rule_group: bool
|
1388
|
+
attr_accessor summary_configuration: Types::SummaryConfiguration
|
1354
1389
|
SENSITIVE: []
|
1355
1390
|
end
|
1356
1391
|
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-networkfirewall
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.71.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
@@ -18,7 +18,7 @@ dependencies:
|
|
18
18
|
version: '3'
|
19
19
|
- - ">="
|
20
20
|
- !ruby/object:Gem::Version
|
21
|
-
version: 3.
|
21
|
+
version: 3.227.0
|
22
22
|
type: :runtime
|
23
23
|
prerelease: false
|
24
24
|
version_requirements: !ruby/object:Gem::Requirement
|
@@ -28,7 +28,7 @@ dependencies:
|
|
28
28
|
version: '3'
|
29
29
|
- - ">="
|
30
30
|
- !ruby/object:Gem::Version
|
31
|
-
version: 3.
|
31
|
+
version: 3.227.0
|
32
32
|
- !ruby/object:Gem::Dependency
|
33
33
|
name: aws-sigv4
|
34
34
|
requirement: !ruby/object:Gem::Requirement
|