aws-sdk-networkfirewall 1.55.0 → 1.56.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b2b7677fa98f8f7d1ad38b65bd6d340afe65a7c3834bbbd52207b44cce5194b7
-  data.tar.gz: 6ea44510fe448aa9ff67e5744d61f8f631302e945ecd8208bd6d0bf2c542e497
+  metadata.gz: d377b97b0266e3fb5945898c8b89b617b0ade5789365deeae077a86a039a75d8
+  data.tar.gz: 792d56761eaaaeed2f3886cd99983e1e4e3a5373c749d7984f4044b87099c91d
 SHA512:
-  metadata.gz: 7183c883c191a79d1014e52474dc1e25a494257bba020561e6e800989a9516655a00ea2b59c1eeff866025648b25df8643c0c800e36a346d2d7fba8c7fd11928
-  data.tar.gz: e2b4749a09352f031eea60d9cf02b5a09e73d9afc28d22f66088d8cd49361f4432c06073807420e1959bc90d1cb691ad3800059e5be8a3cf26612c7bc327dbc7
+  metadata.gz: 9ef2d952a2c764907196adad4adcd0a7671c4a8adcff9c602cd2c62d8dac0169e77f4af2ff267d727c2b58009e0e9bbaa72acb941211bff74343c2ce4492a549
+  data.tar.gz: c28ca0bbf17f32fd46ef35972979786d951febda0b36b97a25b6bf2bbd69389a52a9e72156a84bd04a9705cc4eda751754344e8e81ae1c4caaae9fa395a09f70

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.56.0 (2024-10-30)
+------------------
+
+* Feature - AWS Network Firewall now supports configuring TCP idle timeout
+
 1.55.0 (2024-10-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.55.0
+1.56.0

data/lib/aws-sdk-networkfirewall/client.rb

@@ -843,6 +843,9 @@ module Aws::NetworkFirewall
     #       stateful_engine_options: {
     #         rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
     #         stream_exception_policy: "DROP", # accepts DROP, CONTINUE, REJECT
+    #         flow_timeouts: {
+    #           tcp_idle_timeout_seconds: 1,
+    #         },
     #       },
     #       tls_inspection_configuration_arn: "ResourceArn",
     #       policy_variables: {
@@ -1784,6 +1787,7 @@ module Aws::NetworkFirewall
     #   resp.firewall_policy.stateful_default_actions[0] #=> String
     #   resp.firewall_policy.stateful_engine_options.rule_order #=> String, one of "DEFAULT_ACTION_ORDER", "STRICT_ORDER"
     #   resp.firewall_policy.stateful_engine_options.stream_exception_policy #=> String, one of "DROP", "CONTINUE", "REJECT"
+    #   resp.firewall_policy.stateful_engine_options.flow_timeouts.tcp_idle_timeout_seconds #=> Integer
     #   resp.firewall_policy.tls_inspection_configuration_arn #=> String
     #   resp.firewall_policy.policy_variables.rule_variables #=> Hash
     #   resp.firewall_policy.policy_variables.rule_variables["RuleVariableName"].definition #=> Array
@@ -2963,6 +2967,9 @@ module Aws::NetworkFirewall
     #       stateful_engine_options: {
     #         rule_order: "DEFAULT_ACTION_ORDER", # accepts DEFAULT_ACTION_ORDER, STRICT_ORDER
     #         stream_exception_policy: "DROP", # accepts DROP, CONTINUE, REJECT
+    #         flow_timeouts: {
+    #           tcp_idle_timeout_seconds: 1,
+    #         },
     #       },
     #       tls_inspection_configuration_arn: "ResourceArn",
     #       policy_variables: {
@@ -3678,7 +3685,7 @@ module Aws::NetworkFirewall
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-networkfirewall'
-      context[:gem_version] = '1.55.0'
+      context[:gem_version] = '1.56.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-networkfirewall/client_api.rb

@@ -93,6 +93,7 @@ module Aws::NetworkFirewall
     FirewallStatusValue = Shapes::StringShape.new(name: 'FirewallStatusValue')
     Firewalls = Shapes::ListShape.new(name: 'Firewalls')
     Flags = Shapes::ListShape.new(name: 'Flags')
+    FlowTimeouts = Shapes::StructureShape.new(name: 'FlowTimeouts')
     GeneratedRulesType = Shapes::StringShape.new(name: 'GeneratedRulesType')
     HashMapKey = Shapes::StringShape.new(name: 'HashMapKey')
     HashMapValue = Shapes::StringShape.new(name: 'HashMapValue')
@@ -234,6 +235,7 @@ module Aws::NetworkFirewall
     TagsPaginationMaxResults = Shapes::IntegerShape.new(name: 'TagsPaginationMaxResults')
     TargetType = Shapes::StringShape.new(name: 'TargetType')
     TargetTypes = Shapes::ListShape.new(name: 'TargetTypes')
+    TcpIdleTimeoutRangeBound = Shapes::IntegerShape.new(name: 'TcpIdleTimeoutRangeBound')
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
     TlsCertificateData = Shapes::StructureShape.new(name: 'TlsCertificateData')
     UnsupportedOperationException = Shapes::StructureShape.new(name: 'UnsupportedOperationException')
@@ -566,6 +568,9 @@ module Aws::NetworkFirewall
 
     Flags.member = Shapes::ShapeRef.new(shape: TCPFlag)
 
+    FlowTimeouts.add_member(:tcp_idle_timeout_seconds, Shapes::ShapeRef.new(shape: TcpIdleTimeoutRangeBound, location_name: "TcpIdleTimeoutSeconds"))
+    FlowTimeouts.struct_class = Types::FlowTimeouts
+
     Header.add_member(:protocol, Shapes::ShapeRef.new(shape: StatefulRuleProtocol, required: true, location_name: "Protocol"))
     Header.add_member(:source, Shapes::ShapeRef.new(shape: Source, required: true, location_name: "Source"))
     Header.add_member(:source_port, Shapes::ShapeRef.new(shape: Port, required: true, location_name: "SourcePort"))
@@ -811,6 +816,7 @@ module Aws::NetworkFirewall
 
     StatefulEngineOptions.add_member(:rule_order, Shapes::ShapeRef.new(shape: RuleOrder, location_name: "RuleOrder"))
     StatefulEngineOptions.add_member(:stream_exception_policy, Shapes::ShapeRef.new(shape: StreamExceptionPolicy, location_name: "StreamExceptionPolicy"))
+    StatefulEngineOptions.add_member(:flow_timeouts, Shapes::ShapeRef.new(shape: FlowTimeouts, location_name: "FlowTimeouts"))
     StatefulEngineOptions.struct_class = Types::StatefulEngineOptions
 
     StatefulRule.add_member(:action, Shapes::ShapeRef.new(shape: StatefulAction, required: true, location_name: "Action"))

data/lib/aws-sdk-networkfirewall/types.rb

@@ -2150,6 +2150,34 @@ module Aws::NetworkFirewall
       include Aws::Structure
     end
 
+    # Describes the amount of time that can pass without any traffic sent
+    # through the firewall before the firewall determines that the
+    # connection is idle and Network Firewall removes the flow entry from
+    # its flow table. Existing connections and flows are not impacted when
+    # you update this value. Only new connections after you update this
+    # value are impacted.
+    #
+    # @!attribute [rw] tcp_idle_timeout_seconds
+    #   The number of seconds that can pass without any TCP traffic sent
+    #   through the firewall before the firewall determines that the
+    #   connection is idle. After the idle timeout passes, data packets are
+    #   dropped, however, the next TCP SYN packet is considered a new flow
+    #   and is processed by the firewall. Clients or targets can use TCP
+    #   keepalive packets to reset the idle timeout.
+    #
+    #   You can define the `TcpIdleTimeoutSeconds` value to be between 60
+    #   and 6000 seconds. If no value is provided, it defaults to 350
+    #   seconds.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/FlowTimeouts AWS API Documentation
+    #
+    class FlowTimeouts < Struct.new(
+      :tcp_idle_timeout_seconds)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The basic rule criteria for Network Firewall to use to inspect packet
     # headers in stateful traffic flow inspection. Traffic flows that match
     # the criteria are a match for the corresponding StatefulRule.
@@ -3687,11 +3715,18 @@ module Aws::NetworkFirewall
     #     subsequent traffic.
     #   @return [String]
     #
+    # @!attribute [rw] flow_timeouts
+    #   Configures the amount of time that can pass without any traffic sent
+    #   through the firewall before the firewall determines that the
+    #   connection is idle.
+    #   @return [Types::FlowTimeouts]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/StatefulEngineOptions AWS API Documentation
     #
     class StatefulEngineOptions < Struct.new(
       :rule_order,
-      :stream_exception_policy)
+      :stream_exception_policy,
+      :flow_timeouts)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-networkfirewall.rb

@@ -54,7 +54,7 @@ module Aws::NetworkFirewall
   autoload :EndpointProvider, 'aws-sdk-networkfirewall/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-networkfirewall/endpoints'
 
-  GEM_VERSION = '1.55.0'
+  GEM_VERSION = '1.56.0'
 
 end
 

data/sig/client.rbs

@@ -189,7 +189,10 @@ module Aws
                                       stateful_default_actions: Array[::String]?,
                                       stateful_engine_options: {
                                         rule_order: ("DEFAULT_ACTION_ORDER" | "STRICT_ORDER")?,
-                                        stream_exception_policy: ("DROP" | "CONTINUE" | "REJECT")?
+                                        stream_exception_policy: ("DROP" | "CONTINUE" | "REJECT")?,
+                                        flow_timeouts: {
+                                          tcp_idle_timeout_seconds: ::Integer?
+                                        }?
                                       }?,
                                       tls_inspection_configuration_arn: ::String?,
                                       policy_variables: {
@@ -770,7 +773,10 @@ module Aws
                                       stateful_default_actions: Array[::String]?,
                                       stateful_engine_options: {
                                         rule_order: ("DEFAULT_ACTION_ORDER" | "STRICT_ORDER")?,
-                                        stream_exception_policy: ("DROP" | "CONTINUE" | "REJECT")?
+                                        stream_exception_policy: ("DROP" | "CONTINUE" | "REJECT")?,
+                                        flow_timeouts: {
+                                          tcp_idle_timeout_seconds: ::Integer?
+                                        }?
                                       }?,
                                       tls_inspection_configuration_arn: ::String?,
                                       policy_variables: {

data/sig/types.rbs

@@ -400,6 +400,11 @@ module Aws::NetworkFirewall
       SENSITIVE: []
     end
 
+    class FlowTimeouts
+      attr_accessor tcp_idle_timeout_seconds: ::Integer
+      SENSITIVE: []
+    end
+
     class Header
       attr_accessor protocol: ("IP" | "TCP" | "UDP" | "ICMP" | "HTTP" | "FTP" | "TLS" | "SMB" | "DNS" | "DCERPC" | "SSH" | "SMTP" | "IMAP" | "MSN" | "KRB5" | "IKEV2" | "TFTP" | "NTP" | "DHCP")
       attr_accessor source: ::String
@@ -700,6 +705,7 @@ module Aws::NetworkFirewall
     class StatefulEngineOptions
       attr_accessor rule_order: ("DEFAULT_ACTION_ORDER" | "STRICT_ORDER")
       attr_accessor stream_exception_policy: ("DROP" | "CONTINUE" | "REJECT")
+      attr_accessor flow_timeouts: Types::FlowTimeouts
       SENSITIVE: []
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-networkfirewall
 version: !ruby/object:Gem::Version
-  version: 1.55.0
+  version: 1.56.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-10-18 00:00:00.000000000 Z
+date: 2024-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core