aws-sdk-networkfirewall 1.76.0 → 1.77.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d936459df2b08a670efa388fb6cc4cf7f12e94826bbdac256af86b3a11538e94
-  data.tar.gz: 8d0fd2bab8a5e15f155b791dd3e01d30449f09127c46be8d4fd033b1881a9bd0
+  metadata.gz: ede64ef386739ee353b1302c14b192a02b89812a4a8b8259b9a2158ca473001a
+  data.tar.gz: 9513247b0b520a6a91543eb03998d3dbaaf58b907f7fabfd196c5f69690b9e26
 SHA512:
-  metadata.gz: 86d75b7c026a73450f5084e8b87e04af2d6ba3d67ae46797bea0d12099894b3c395c439780b7e9a54ae488827c3b9b3ef0cdd4ae56d2883be957842165a9ca32
-  data.tar.gz: 258b2c22dba477d6ac2601ae020b6218b50bc06d6222b831df98bd1ca405f6339091550d39c08bfa9de52310ecd9013af7579f62c8105f022211c667ca289fb8
+  metadata.gz: 43f5bfe571ffeaa10cbc635fd5debfa40cee2cd42c19004208055fcbf5866bc908dcfbdc6c77e1f2c6a691120231a5c3720680b77c851ddb63f9c2020cd9da56
+  data.tar.gz: c24a6fde89ab499fe37f75211426bde470362b23d59280cf9b9c7f903add191e99915168a2c5e02d8c0dea5e54a09d682fb7d9c084811fcefedf0b692506828d

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.77.0 (2025-09-25)
+------------------
+
+* Feature - Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic.
+
 1.76.0 (2025-09-17)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.76.0
+1.77.0

data/lib/aws-sdk-networkfirewall/client.rb

@@ -1292,7 +1292,7 @@ module Aws::NetworkFirewall
     #         rules_source_list: {
     #           targets: ["CollectionMember_String"], # required
     #           target_types: ["TLS_SNI"], # required, accepts TLS_SNI, HTTP_HOST
-    #           generated_rules_type: "ALLOWLIST", # required, accepts ALLOWLIST, DENYLIST
+    #           generated_rules_type: "ALLOWLIST", # required, accepts ALLOWLIST, DENYLIST, REJECTLIST, ALERTLIST
     #         },
     #         stateful_rules: [
     #           {
@@ -2490,7 +2490,7 @@ module Aws::NetworkFirewall
     #   resp.rule_group.rules_source.rules_source_list.targets[0] #=> String
     #   resp.rule_group.rules_source.rules_source_list.target_types #=> Array
     #   resp.rule_group.rules_source.rules_source_list.target_types[0] #=> String, one of "TLS_SNI", "HTTP_HOST"
-    #   resp.rule_group.rules_source.rules_source_list.generated_rules_type #=> String, one of "ALLOWLIST", "DENYLIST"
+    #   resp.rule_group.rules_source.rules_source_list.generated_rules_type #=> String, one of "ALLOWLIST", "DENYLIST", "REJECTLIST", "ALERTLIST"
     #   resp.rule_group.rules_source.stateful_rules #=> Array
     #   resp.rule_group.rules_source.stateful_rules[0].action #=> String, one of "PASS", "DROP", "ALERT", "REJECT"
     #   resp.rule_group.rules_source.stateful_rules[0].header.protocol #=> String, one of "IP", "TCP", "UDP", "ICMP", "HTTP", "FTP", "TLS", "SMB", "DNS", "DCERPC", "SSH", "SMTP", "IMAP", "MSN", "KRB5", "IKEV2", "TFTP", "NTP", "DHCP", "HTTP2", "QUIC"
@@ -4894,7 +4894,7 @@ module Aws::NetworkFirewall
     #         rules_source_list: {
     #           targets: ["CollectionMember_String"], # required
     #           target_types: ["TLS_SNI"], # required, accepts TLS_SNI, HTTP_HOST
-    #           generated_rules_type: "ALLOWLIST", # required, accepts ALLOWLIST, DENYLIST
+    #           generated_rules_type: "ALLOWLIST", # required, accepts ALLOWLIST, DENYLIST, REJECTLIST, ALERTLIST
     #         },
     #         stateful_rules: [
     #           {
@@ -5277,7 +5277,7 @@ module Aws::NetworkFirewall
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-networkfirewall'
-      context[:gem_version] = '1.76.0'
+      context[:gem_version] = '1.77.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-networkfirewall/types.rb

@@ -5205,8 +5205,15 @@ module Aws::NetworkFirewall
     #   @return [Array<String>]
     #
     # @!attribute [rw] generated_rules_type
-    #   Whether you want to allow or deny access to the domains in your
-    #   target list.
+    #   Whether you want to apply allow, reject, alert, or drop behavior to
+    #   the domains in your target list.
+    #
+    #   <note markdown="1"> When logging is enabled and you choose Alert, traffic that matches
+    #   the domain specifications generates an alert in the firewall's
+    #   logs. Then, traffic either passes, is rejected, or drops based on
+    #   other rules in the firewall policy.
+    #
+    #    </note>
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/RulesSourceList AWS API Documentation

data/lib/aws-sdk-networkfirewall.rb

@@ -54,7 +54,7 @@ module Aws::NetworkFirewall
   autoload :EndpointProvider, 'aws-sdk-networkfirewall/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-networkfirewall/endpoints'
 
-  GEM_VERSION = '1.76.0'
+  GEM_VERSION = '1.77.0'
 
 end
 

data/sig/client.rbs

@@ -287,7 +287,7 @@ module Aws
                                    rules_source_list: {
                                      targets: Array[::String],
                                      target_types: Array[("TLS_SNI" | "HTTP_HOST")],
-                                     generated_rules_type: ("ALLOWLIST" | "DENYLIST")
+                                     generated_rules_type: ("ALLOWLIST" | "DENYLIST" | "REJECTLIST" | "ALERTLIST")
                                    }?,
                                    stateful_rules: Array[
                                      {
@@ -1243,7 +1243,7 @@ module Aws
                                    rules_source_list: {
                                      targets: Array[::String],
                                      target_types: Array[("TLS_SNI" | "HTTP_HOST")],
-                                     generated_rules_type: ("ALLOWLIST" | "DENYLIST")
+                                     generated_rules_type: ("ALLOWLIST" | "DENYLIST" | "REJECTLIST" | "ALERTLIST")
                                    }?,
                                    stateful_rules: Array[
                                      {

data/sig/types.rbs

@@ -1009,7 +1009,7 @@ module Aws::NetworkFirewall
     class RulesSourceList
       attr_accessor targets: ::Array[::String]
       attr_accessor target_types: ::Array[("TLS_SNI" | "HTTP_HOST")]
-      attr_accessor generated_rules_type: ("ALLOWLIST" | "DENYLIST")
+      attr_accessor generated_rules_type: ("ALLOWLIST" | "DENYLIST" | "REJECTLIST" | "ALERTLIST")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-networkfirewall
 version: !ruby/object:Gem::Version
-  version: 1.76.0
+  version: 1.77.0
 platform: ruby
 authors:
 - Amazon Web Services