@aws-sdk/client-fms 3.554.0 → 3.563.0

package/dist-cjs/index.js

@@ -37,6 +37,8 @@ __export(src_exports, {
   DestinationType: () => DestinationType,
   DisassociateAdminAccountCommand: () => DisassociateAdminAccountCommand,
   DisassociateThirdPartyFirewallCommand: () => DisassociateThirdPartyFirewallCommand,
+  EntryType: () => EntryType,
+  EntryViolationReason: () => EntryViolationReason,
   FMS: () => FMS,
   FMSClient: () => FMSClient,
   FMSServiceException: () => FMSServiceException,
@@ -71,6 +73,7 @@ __export(src_exports, {
   ListTagsForResourceCommand: () => ListTagsForResourceCommand,
   ListThirdPartyFirewallFirewallPoliciesCommand: () => ListThirdPartyFirewallFirewallPoliciesCommand,
   MarketplaceSubscriptionOnboardingStatus: () => MarketplaceSubscriptionOnboardingStatus,
+  NetworkAclRuleAction: () => NetworkAclRuleAction,
   NetworkFirewallOverrideAction: () => NetworkFirewallOverrideAction,
   OrganizationStatus: () => OrganizationStatus,
   PolicyComplianceStatusType: () => PolicyComplianceStatusType,
@@ -291,6 +294,7 @@ var OrganizationStatus = {
 var SecurityServiceType = {
   DNS_FIREWALL: "DNS_FIREWALL",
   IMPORT_NETWORK_FIREWALL: "IMPORT_NETWORK_FIREWALL",
+  NETWORK_ACL_COMMON: "NETWORK_ACL_COMMON",
   NETWORK_FIREWALL: "NETWORK_FIREWALL",
   SECURITY_GROUPS_COMMON: "SECURITY_GROUPS_COMMON",
   SECURITY_GROUPS_CONTENT_AUDIT: "SECURITY_GROUPS_CONTENT_AUDIT",
@@ -424,6 +428,7 @@ var ViolationReason = {
   FirewallSubnetMissingVPCEndpoint: "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT",
   InternetGatewayMissingExpectedRoute: "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE",
   InternetTrafficNotInspected: "INTERNET_TRAFFIC_NOT_INSPECTED",
+  InvalidNetworkAclEntry: "INVALID_NETWORK_ACL_ENTRY",
   InvalidRouteConfiguration: "INVALID_ROUTE_CONFIGURATION",
   MissingExpectedRouteTable: "MISSING_EXPECTED_ROUTE_TABLE",
   MissingFirewall: "MISSING_FIREWALL",
@@ -453,6 +458,10 @@ var CustomerPolicyStatus = {
   ACTIVE: "ACTIVE",
   OUT_OF_ADMIN_SCOPE: "OUT_OF_ADMIN_SCOPE"
 };
+var NetworkAclRuleAction = {
+  ALLOW: "allow",
+  DENY: "deny"
+};
 var FirewallDeploymentModel = {
   CENTRALIZED: "CENTRALIZED",
   DISTRIBUTED: "DISTRIBUTED"
@@ -488,6 +497,16 @@ var RemediationActionType = {
   Modify: "MODIFY",
   Remove: "REMOVE"
 };
+var EntryType = {
+  CustomEntry: "CUSTOM_ENTRY",
+  FMSManagedFirstEntry: "FMS_MANAGED_FIRST_ENTRY",
+  FMSManagedLastEntry: "FMS_MANAGED_LAST_ENTRY"
+};
+var EntryViolationReason = {
+  EntryConflict: "ENTRY_CONFLICT",
+  IncorrectEntryOrder: "INCORRECT_ENTRY_ORDER",
+  MissingExpectedEntry: "MISSING_EXPECTED_ENTRY"
+};
 var DestinationType = {
   IPV4: "IPV4",
   IPV6: "IPV6",
@@ -1517,6 +1536,12 @@ var de_PolicyComplianceStatusList = /* @__PURE__ */ __name((output, context) =>
   });
   return retVal;
 }, "de_PolicyComplianceStatusList");
+var de_PossibleRemediationActions = /* @__PURE__ */ __name((output, context) => {
+  return (0, import_smithy_client.take)(output, {
+    Actions: import_smithy_client._json,
+    Description: import_smithy_client.expectString
+  });
+}, "de_PossibleRemediationActions");
 var de_ProtocolsListData = /* @__PURE__ */ __name((output, context) => {
   return (0, import_smithy_client.take)(output, {
     CreateTime: (_) => (0, import_smithy_client.expectNonNull)((0, import_smithy_client.parseEpochTimestamp)((0, import_smithy_client.expectNumber)(_))),
@@ -1572,6 +1597,40 @@ var de_ResourceSetSummaryList = /* @__PURE__ */ __name((output, context) => {
   });
   return retVal;
 }, "de_ResourceSetSummaryList");
+var de_ResourceViolation = /* @__PURE__ */ __name((output, context) => {
+  return (0, import_smithy_client.take)(output, {
+    AwsEc2InstanceViolation: import_smithy_client._json,
+    AwsEc2NetworkInterfaceViolation: import_smithy_client._json,
+    AwsVPCSecurityGroupViolation: import_smithy_client._json,
+    DnsDuplicateRuleGroupViolation: import_smithy_client._json,
+    DnsRuleGroupLimitExceededViolation: import_smithy_client._json,
+    DnsRuleGroupPriorityConflictViolation: import_smithy_client._json,
+    FirewallSubnetIsOutOfScopeViolation: import_smithy_client._json,
+    FirewallSubnetMissingVPCEndpointViolation: import_smithy_client._json,
+    InvalidNetworkAclEntriesViolation: import_smithy_client._json,
+    NetworkFirewallBlackHoleRouteDetectedViolation: import_smithy_client._json,
+    NetworkFirewallInternetTrafficNotInspectedViolation: import_smithy_client._json,
+    NetworkFirewallInvalidRouteConfigurationViolation: import_smithy_client._json,
+    NetworkFirewallMissingExpectedRTViolation: import_smithy_client._json,
+    NetworkFirewallMissingExpectedRoutesViolation: import_smithy_client._json,
+    NetworkFirewallMissingFirewallViolation: import_smithy_client._json,
+    NetworkFirewallMissingSubnetViolation: import_smithy_client._json,
+    NetworkFirewallPolicyModifiedViolation: import_smithy_client._json,
+    NetworkFirewallUnexpectedFirewallRoutesViolation: import_smithy_client._json,
+    NetworkFirewallUnexpectedGatewayRoutesViolation: import_smithy_client._json,
+    PossibleRemediationActions: (_) => de_PossibleRemediationActions(_, context),
+    RouteHasOutOfScopeEndpointViolation: import_smithy_client._json,
+    ThirdPartyFirewallMissingExpectedRouteTableViolation: import_smithy_client._json,
+    ThirdPartyFirewallMissingFirewallViolation: import_smithy_client._json,
+    ThirdPartyFirewallMissingSubnetViolation: import_smithy_client._json
+  });
+}, "de_ResourceViolation");
+var de_ResourceViolations = /* @__PURE__ */ __name((output, context) => {
+  const retVal = (output || []).filter((e) => e != null).map((entry) => {
+    return de_ResourceViolation(entry, context);
+  });
+  return retVal;
+}, "de_ResourceViolations");
 var de_ViolationDetail = /* @__PURE__ */ __name((output, context) => {
   return (0, import_smithy_client.take)(output, {
     MemberAccount: import_smithy_client.expectString,
@@ -1580,7 +1639,7 @@ var de_ViolationDetail = /* @__PURE__ */ __name((output, context) => {
     ResourceId: import_smithy_client.expectString,
     ResourceTags: import_smithy_client._json,
     ResourceType: import_smithy_client.expectString,
-    ResourceViolations: import_smithy_client._json
+    ResourceViolations: (_) => de_ResourceViolations(_, context)
   });
 }, "de_ViolationDetail");
 var deserializeMetadata = /* @__PURE__ */ __name((output) => ({
@@ -2481,11 +2540,14 @@ var paginateListThirdPartyFirewallFirewallPolicies = (0, import_core.createPagin
   ViolationReason,
   CustomerPolicyScopeIdType,
   CustomerPolicyStatus,
+  NetworkAclRuleAction,
   FirewallDeploymentModel,
   InvalidTypeException,
   ResourceSetStatus,
   MarketplaceSubscriptionOnboardingStatus,
   RemediationActionType,
+  EntryType,
+  EntryViolationReason,
   DestinationType,
   TargetType,
   RuleOrder,

package/dist-es/models/models_0.js

@@ -15,6 +15,7 @@ export const OrganizationStatus = {
 export const SecurityServiceType = {
     DNS_FIREWALL: "DNS_FIREWALL",
     IMPORT_NETWORK_FIREWALL: "IMPORT_NETWORK_FIREWALL",
+    NETWORK_ACL_COMMON: "NETWORK_ACL_COMMON",
     NETWORK_FIREWALL: "NETWORK_FIREWALL",
     SECURITY_GROUPS_COMMON: "SECURITY_GROUPS_COMMON",
     SECURITY_GROUPS_CONTENT_AUDIT: "SECURITY_GROUPS_CONTENT_AUDIT",
@@ -123,6 +124,7 @@ export const ViolationReason = {
     FirewallSubnetMissingVPCEndpoint: "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT",
     InternetGatewayMissingExpectedRoute: "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE",
     InternetTrafficNotInspected: "INTERNET_TRAFFIC_NOT_INSPECTED",
+    InvalidNetworkAclEntry: "INVALID_NETWORK_ACL_ENTRY",
     InvalidRouteConfiguration: "INVALID_ROUTE_CONFIGURATION",
     MissingExpectedRouteTable: "MISSING_EXPECTED_ROUTE_TABLE",
     MissingFirewall: "MISSING_FIREWALL",
@@ -152,6 +154,10 @@ export const CustomerPolicyStatus = {
     ACTIVE: "ACTIVE",
     OUT_OF_ADMIN_SCOPE: "OUT_OF_ADMIN_SCOPE",
 };
+export const NetworkAclRuleAction = {
+    ALLOW: "allow",
+    DENY: "deny",
+};
 export const FirewallDeploymentModel = {
     CENTRALIZED: "CENTRALIZED",
     DISTRIBUTED: "DISTRIBUTED",
@@ -182,6 +188,16 @@ export const RemediationActionType = {
     Modify: "MODIFY",
     Remove: "REMOVE",
 };
+export const EntryType = {
+    CustomEntry: "CUSTOM_ENTRY",
+    FMSManagedFirstEntry: "FMS_MANAGED_FIRST_ENTRY",
+    FMSManagedLastEntry: "FMS_MANAGED_LAST_ENTRY",
+};
+export const EntryViolationReason = {
+    EntryConflict: "ENTRY_CONFLICT",
+    IncorrectEntryOrder: "INCORRECT_ENTRY_ORDER",
+    MissingExpectedEntry: "MISSING_EXPECTED_ENTRY",
+};
 export const DestinationType = {
     IPV4: "IPV4",
     IPV6: "IPV6",

package/dist-es/protocols/Aws_json1_1.js

@@ -1004,6 +1004,12 @@ const de_PolicyComplianceStatusList = (output, context) => {
     });
     return retVal;
 };
+const de_PossibleRemediationActions = (output, context) => {
+    return take(output, {
+        Actions: _json,
+        Description: __expectString,
+    });
+};
 const de_ProtocolsListData = (output, context) => {
     return take(output, {
         CreateTime: (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
@@ -1061,6 +1067,42 @@ const de_ResourceSetSummaryList = (output, context) => {
     });
     return retVal;
 };
+const de_ResourceViolation = (output, context) => {
+    return take(output, {
+        AwsEc2InstanceViolation: _json,
+        AwsEc2NetworkInterfaceViolation: _json,
+        AwsVPCSecurityGroupViolation: _json,
+        DnsDuplicateRuleGroupViolation: _json,
+        DnsRuleGroupLimitExceededViolation: _json,
+        DnsRuleGroupPriorityConflictViolation: _json,
+        FirewallSubnetIsOutOfScopeViolation: _json,
+        FirewallSubnetMissingVPCEndpointViolation: _json,
+        InvalidNetworkAclEntriesViolation: _json,
+        NetworkFirewallBlackHoleRouteDetectedViolation: _json,
+        NetworkFirewallInternetTrafficNotInspectedViolation: _json,
+        NetworkFirewallInvalidRouteConfigurationViolation: _json,
+        NetworkFirewallMissingExpectedRTViolation: _json,
+        NetworkFirewallMissingExpectedRoutesViolation: _json,
+        NetworkFirewallMissingFirewallViolation: _json,
+        NetworkFirewallMissingSubnetViolation: _json,
+        NetworkFirewallPolicyModifiedViolation: _json,
+        NetworkFirewallUnexpectedFirewallRoutesViolation: _json,
+        NetworkFirewallUnexpectedGatewayRoutesViolation: _json,
+        PossibleRemediationActions: (_) => de_PossibleRemediationActions(_, context),
+        RouteHasOutOfScopeEndpointViolation: _json,
+        ThirdPartyFirewallMissingExpectedRouteTableViolation: _json,
+        ThirdPartyFirewallMissingFirewallViolation: _json,
+        ThirdPartyFirewallMissingSubnetViolation: _json,
+    });
+};
+const de_ResourceViolations = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        return de_ResourceViolation(entry, context);
+    });
+    return retVal;
+};
 const de_ViolationDetail = (output, context) => {
     return take(output, {
         MemberAccount: __expectString,
@@ -1069,7 +1111,7 @@ const de_ViolationDetail = (output, context) => {
         ResourceId: __expectString,
         ResourceTags: _json,
         ResourceType: __expectString,
-        ResourceViolations: _json,
+        ResourceViolations: (_) => de_ResourceViolations(_, context),
     });
 };
 const deserializeMetadata = (output) => ({

package/dist-types/commands/GetAdminScopeCommand.d.ts

@@ -26,7 +26,7 @@ declare const GetAdminScopeCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Returns information about the specified account's administrative scope. The admistrative scope defines the resources that an Firewall Manager administrator can manage.</p>
+ * <p>Returns information about the specified account's administrative scope. The administrative scope defines the resources that an Firewall Manager administrator can manage.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -62,7 +62,7 @@ declare const GetAdminScopeCommand_base: {
  * //     },
  * //     PolicyTypeScope: { // PolicyTypeScope
  * //       PolicyTypes: [ // SecurityServiceTypeList
- * //         "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL",
+ * //         "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL" || "NETWORK_ACL_COMMON",
  * //       ],
  * //       AllPolicyTypesEnabled: true || false,
  * //     },

package/dist-types/commands/GetComplianceDetailCommand.d.ts

@@ -28,28 +28,7 @@ declare const GetComplianceDetailCommand_base: {
 /**
  * <p>Returns detailed compliance information about the specified member account. Details
  *       include resources that are in and out of compliance with the specified policy. </p>
- *          <ul>
- *             <li>
- *                <p>Resources are
- *               considered noncompliant for WAF and Shield Advanced policies if the specified policy has
- *               not been applied to them.</p>
- *             </li>
- *             <li>
- *                <p>Resources are considered noncompliant for security group policies if
- *               they are in scope of the policy, they violate one or more of the policy rules, and remediation
- *               is disabled or not possible.</p>
- *             </li>
- *             <li>
- *                <p>Resources are considered noncompliant for Network Firewall policies
- *                 if a firewall is missing in the VPC, if the firewall endpoint isn't set up in an expected Availability Zone and subnet,
- *                 if a subnet created by the Firewall Manager doesn't have the expected route table,
- *                 and for modifications to a firewall policy that violate the Firewall Manager policy's rules.</p>
- *             </li>
- *             <li>
- *                <p>Resources are considered noncompliant for DNS Firewall policies
- *               if a DNS Firewall rule group is missing from the rule group associations for the VPC. </p>
- *             </li>
- *          </ul>
+ *          <p>The reasons for resources being considered compliant depend on the Firewall Manager policy type. </p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -70,7 +49,7 @@ declare const GetComplianceDetailCommand_base: {
  * //     Violators: [ // ComplianceViolators
  * //       { // ComplianceViolator
  * //         ResourceId: "STRING_VALUE",
- * //         ViolationReason: "WEB_ACL_MISSING_RULE_GROUP" || "RESOURCE_MISSING_WEB_ACL" || "RESOURCE_INCORRECT_WEB_ACL" || "RESOURCE_MISSING_SHIELD_PROTECTION" || "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION" || "RESOURCE_MISSING_SECURITY_GROUP" || "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP" || "SECURITY_GROUP_UNUSED" || "SECURITY_GROUP_REDUNDANT" || "FMS_CREATED_SECURITY_GROUP_EDITED" || "MISSING_FIREWALL" || "MISSING_FIREWALL_SUBNET_IN_AZ" || "MISSING_EXPECTED_ROUTE_TABLE" || "NETWORK_FIREWALL_POLICY_MODIFIED" || "FIREWALL_SUBNET_IS_OUT_OF_SCOPE" || "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE" || "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE" || "UNEXPECTED_FIREWALL_ROUTES" || "UNEXPECTED_TARGET_GATEWAY_ROUTES" || "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY" || "INVALID_ROUTE_CONFIGURATION" || "MISSING_TARGET_GATEWAY" || "INTERNET_TRAFFIC_NOT_INSPECTED" || "BLACK_HOLE_ROUTE_DETECTED" || "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET" || "RESOURCE_MISSING_DNS_FIREWALL" || "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT" || "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT",
+ * //         ViolationReason: "WEB_ACL_MISSING_RULE_GROUP" || "RESOURCE_MISSING_WEB_ACL" || "RESOURCE_INCORRECT_WEB_ACL" || "RESOURCE_MISSING_SHIELD_PROTECTION" || "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION" || "RESOURCE_MISSING_SECURITY_GROUP" || "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP" || "SECURITY_GROUP_UNUSED" || "SECURITY_GROUP_REDUNDANT" || "FMS_CREATED_SECURITY_GROUP_EDITED" || "MISSING_FIREWALL" || "MISSING_FIREWALL_SUBNET_IN_AZ" || "MISSING_EXPECTED_ROUTE_TABLE" || "NETWORK_FIREWALL_POLICY_MODIFIED" || "FIREWALL_SUBNET_IS_OUT_OF_SCOPE" || "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE" || "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE" || "UNEXPECTED_FIREWALL_ROUTES" || "UNEXPECTED_TARGET_GATEWAY_ROUTES" || "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY" || "INVALID_ROUTE_CONFIGURATION" || "MISSING_TARGET_GATEWAY" || "INTERNET_TRAFFIC_NOT_INSPECTED" || "BLACK_HOLE_ROUTE_DETECTED" || "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET" || "RESOURCE_MISSING_DNS_FIREWALL" || "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT" || "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT" || "INVALID_NETWORK_ACL_ENTRY",
  * //         ResourceType: "STRING_VALUE",
  * //         Metadata: { // ComplianceViolatorMetadata
  * //           "<keys>": "STRING_VALUE",

package/dist-types/commands/GetPolicyCommand.d.ts

@@ -44,7 +44,7 @@ declare const GetPolicyCommand_base: {
  * //     PolicyName: "STRING_VALUE", // required
  * //     PolicyUpdateToken: "STRING_VALUE",
  * //     SecurityServicePolicyData: { // SecurityServicePolicyData
- * //       Type: "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL", // required
+ * //       Type: "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL" || "NETWORK_ACL_COMMON", // required
  * //       ManagedServiceData: "STRING_VALUE",
  * //       PolicyOption: { // PolicyOption
  * //         NetworkFirewallPolicy: { // NetworkFirewallPolicy
@@ -53,6 +53,46 @@ declare const GetPolicyCommand_base: {
  * //         ThirdPartyFirewallPolicy: { // ThirdPartyFirewallPolicy
  * //           FirewallDeploymentModel: "CENTRALIZED" || "DISTRIBUTED",
  * //         },
+ * //         NetworkAclCommonPolicy: { // NetworkAclCommonPolicy
+ * //           NetworkAclEntrySet: { // NetworkAclEntrySet
+ * //             FirstEntries: [ // NetworkAclEntries
+ * //               { // NetworkAclEntry
+ * //                 IcmpTypeCode: { // NetworkAclIcmpTypeCode
+ * //                   Code: Number("int"),
+ * //                   Type: Number("int"),
+ * //                 },
+ * //                 Protocol: "STRING_VALUE", // required
+ * //                 PortRange: { // NetworkAclPortRange
+ * //                   From: Number("int"),
+ * //                   To: Number("int"),
+ * //                 },
+ * //                 CidrBlock: "STRING_VALUE",
+ * //                 Ipv6CidrBlock: "STRING_VALUE",
+ * //                 RuleAction: "allow" || "deny", // required
+ * //                 Egress: true || false, // required
+ * //               },
+ * //             ],
+ * //             ForceRemediateForFirstEntries: true || false, // required
+ * //             LastEntries: [
+ * //               {
+ * //                 IcmpTypeCode: {
+ * //                   Code: Number("int"),
+ * //                   Type: Number("int"),
+ * //                 },
+ * //                 Protocol: "STRING_VALUE", // required
+ * //                 PortRange: {
+ * //                   From: Number("int"),
+ * //                   To: Number("int"),
+ * //                 },
+ * //                 CidrBlock: "STRING_VALUE",
+ * //                 Ipv6CidrBlock: "STRING_VALUE",
+ * //                 RuleAction: "allow" || "deny", // required
+ * //                 Egress: true || false, // required
+ * //               },
+ * //             ],
+ * //             ForceRemediateForLastEntries: true || false, // required
+ * //           },
+ * //         },
  * //       },
  * //     },
  * //     ResourceType: "STRING_VALUE", // required

package/dist-types/commands/GetProtectionStatusCommand.d.ts

@@ -46,7 +46,7 @@ declare const GetProtectionStatusCommand_base: {
  * const response = await client.send(command);
  * // { // GetProtectionStatusResponse
  * //   AdminAccountId: "STRING_VALUE",
- * //   ServiceType: "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL",
+ * //   ServiceType: "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL" || "NETWORK_ACL_COMMON",
  * //   Data: "STRING_VALUE",
  * //   NextToken: "STRING_VALUE",
  * // };

package/dist-types/commands/GetViolationDetailsCommand.d.ts

@@ -350,6 +350,126 @@ declare const GetViolationDetailsCommand_base: {
  * //           ViolationTargetDescription: "STRING_VALUE",
  * //           NumberOfRuleGroupsAlreadyAssociated: Number("int"),
  * //         },
+ * //         FirewallSubnetIsOutOfScopeViolation: { // FirewallSubnetIsOutOfScopeViolation
+ * //           FirewallSubnetId: "STRING_VALUE",
+ * //           VpcId: "STRING_VALUE",
+ * //           SubnetAvailabilityZone: "STRING_VALUE",
+ * //           SubnetAvailabilityZoneId: "STRING_VALUE",
+ * //           VpcEndpointId: "STRING_VALUE",
+ * //         },
+ * //         RouteHasOutOfScopeEndpointViolation: { // RouteHasOutOfScopeEndpointViolation
+ * //           SubnetId: "STRING_VALUE",
+ * //           VpcId: "STRING_VALUE",
+ * //           RouteTableId: "STRING_VALUE",
+ * //           ViolatingRoutes: "<Routes>",
+ * //           SubnetAvailabilityZone: "STRING_VALUE",
+ * //           SubnetAvailabilityZoneId: "STRING_VALUE",
+ * //           CurrentFirewallSubnetRouteTable: "STRING_VALUE",
+ * //           FirewallSubnetId: "STRING_VALUE",
+ * //           FirewallSubnetRoutes: "<Routes>",
+ * //           InternetGatewayId: "STRING_VALUE",
+ * //           CurrentInternetGatewayRouteTable: "STRING_VALUE",
+ * //           InternetGatewayRoutes: "<Routes>",
+ * //         },
+ * //         ThirdPartyFirewallMissingFirewallViolation: { // ThirdPartyFirewallMissingFirewallViolation
+ * //           ViolationTarget: "STRING_VALUE",
+ * //           VPC: "STRING_VALUE",
+ * //           AvailabilityZone: "STRING_VALUE",
+ * //           TargetViolationReason: "STRING_VALUE",
+ * //         },
+ * //         ThirdPartyFirewallMissingSubnetViolation: { // ThirdPartyFirewallMissingSubnetViolation
+ * //           ViolationTarget: "STRING_VALUE",
+ * //           VPC: "STRING_VALUE",
+ * //           AvailabilityZone: "STRING_VALUE",
+ * //           TargetViolationReason: "STRING_VALUE",
+ * //         },
+ * //         ThirdPartyFirewallMissingExpectedRouteTableViolation: { // ThirdPartyFirewallMissingExpectedRouteTableViolation
+ * //           ViolationTarget: "STRING_VALUE",
+ * //           VPC: "STRING_VALUE",
+ * //           AvailabilityZone: "STRING_VALUE",
+ * //           CurrentRouteTable: "STRING_VALUE",
+ * //           ExpectedRouteTable: "STRING_VALUE",
+ * //         },
+ * //         FirewallSubnetMissingVPCEndpointViolation: { // FirewallSubnetMissingVPCEndpointViolation
+ * //           FirewallSubnetId: "STRING_VALUE",
+ * //           VpcId: "STRING_VALUE",
+ * //           SubnetAvailabilityZone: "STRING_VALUE",
+ * //           SubnetAvailabilityZoneId: "STRING_VALUE",
+ * //         },
+ * //         InvalidNetworkAclEntriesViolation: { // InvalidNetworkAclEntriesViolation
+ * //           Vpc: "STRING_VALUE",
+ * //           Subnet: "STRING_VALUE",
+ * //           SubnetAvailabilityZone: "STRING_VALUE",
+ * //           CurrentAssociatedNetworkAcl: "STRING_VALUE",
+ * //           EntryViolations: [ // EntryViolations
+ * //             { // EntryViolation
+ * //               ExpectedEntry: { // EntryDescription
+ * //                 EntryDetail: { // NetworkAclEntry
+ * //                   IcmpTypeCode: { // NetworkAclIcmpTypeCode
+ * //                     Code: Number("int"),
+ * //                     Type: Number("int"),
+ * //                   },
+ * //                   Protocol: "STRING_VALUE", // required
+ * //                   PortRange: { // NetworkAclPortRange
+ * //                     From: Number("int"),
+ * //                     To: Number("int"),
+ * //                   },
+ * //                   CidrBlock: "STRING_VALUE",
+ * //                   Ipv6CidrBlock: "STRING_VALUE",
+ * //                   RuleAction: "allow" || "deny", // required
+ * //                   Egress: true || false, // required
+ * //                 },
+ * //                 EntryRuleNumber: Number("int"),
+ * //                 EntryType: "FMS_MANAGED_FIRST_ENTRY" || "FMS_MANAGED_LAST_ENTRY" || "CUSTOM_ENTRY",
+ * //               },
+ * //               ExpectedEvaluationOrder: "STRING_VALUE",
+ * //               ActualEvaluationOrder: "STRING_VALUE",
+ * //               EntryAtExpectedEvaluationOrder: {
+ * //                 EntryDetail: {
+ * //                   IcmpTypeCode: {
+ * //                     Code: Number("int"),
+ * //                     Type: Number("int"),
+ * //                   },
+ * //                   Protocol: "STRING_VALUE", // required
+ * //                   PortRange: {
+ * //                     From: Number("int"),
+ * //                     To: Number("int"),
+ * //                   },
+ * //                   CidrBlock: "STRING_VALUE",
+ * //                   Ipv6CidrBlock: "STRING_VALUE",
+ * //                   RuleAction: "allow" || "deny", // required
+ * //                   Egress: true || false, // required
+ * //                 },
+ * //                 EntryRuleNumber: Number("int"),
+ * //                 EntryType: "FMS_MANAGED_FIRST_ENTRY" || "FMS_MANAGED_LAST_ENTRY" || "CUSTOM_ENTRY",
+ * //               },
+ * //               EntriesWithConflicts: [ // EntriesWithConflicts
+ * //                 {
+ * //                   EntryDetail: {
+ * //                     IcmpTypeCode: {
+ * //                       Code: Number("int"),
+ * //                       Type: Number("int"),
+ * //                     },
+ * //                     Protocol: "STRING_VALUE", // required
+ * //                     PortRange: {
+ * //                       From: Number("int"),
+ * //                       To: Number("int"),
+ * //                     },
+ * //                     CidrBlock: "STRING_VALUE",
+ * //                     Ipv6CidrBlock: "STRING_VALUE",
+ * //                     RuleAction: "allow" || "deny", // required
+ * //                     Egress: true || false, // required
+ * //                   },
+ * //                   EntryRuleNumber: Number("int"),
+ * //                   EntryType: "FMS_MANAGED_FIRST_ENTRY" || "FMS_MANAGED_LAST_ENTRY" || "CUSTOM_ENTRY",
+ * //                 },
+ * //               ],
+ * //               EntryViolationReasons: [ // EntryViolationReasons
+ * //                 "MISSING_EXPECTED_ENTRY" || "INCORRECT_ENTRY_ORDER" || "ENTRY_CONFLICT",
+ * //               ],
+ * //             },
+ * //           ],
+ * //         },
  * //         PossibleRemediationActions: { // PossibleRemediationActions
  * //           Description: "STRING_VALUE",
  * //           Actions: [ // PossibleRemediationActionList
@@ -422,6 +542,33 @@ declare const GetViolationDetailsCommand_base: {
  * //                       Description: "STRING_VALUE",
  * //                       FirewallCreationConfig: "STRING_VALUE",
  * //                     },
+ * //                     CreateNetworkAclAction: { // CreateNetworkAclAction
+ * //                       Description: "STRING_VALUE",
+ * //                       Vpc: "<ActionTarget>",
+ * //                       FMSCanRemediate: true || false,
+ * //                     },
+ * //                     ReplaceNetworkAclAssociationAction: { // ReplaceNetworkAclAssociationAction
+ * //                       Description: "STRING_VALUE",
+ * //                       AssociationId: "<ActionTarget>",
+ * //                       NetworkAclId: "<ActionTarget>",
+ * //                       FMSCanRemediate: true || false,
+ * //                     },
+ * //                     CreateNetworkAclEntriesAction: { // CreateNetworkAclEntriesAction
+ * //                       Description: "STRING_VALUE",
+ * //                       NetworkAclId: "<ActionTarget>",
+ * //                       NetworkAclEntriesToBeCreated: [ // EntriesDescription
+ * //                         "<EntryDescription>",
+ * //                       ],
+ * //                       FMSCanRemediate: true || false,
+ * //                     },
+ * //                     DeleteNetworkAclEntriesAction: { // DeleteNetworkAclEntriesAction
+ * //                       Description: "STRING_VALUE",
+ * //                       NetworkAclId: "<ActionTarget>",
+ * //                       NetworkAclEntriesToBeDeleted: [
+ * //                         "<EntryDescription>",
+ * //                       ],
+ * //                       FMSCanRemediate: true || false,
+ * //                     },
  * //                   },
  * //                   Order: Number("int"),
  * //                 },
@@ -430,52 +577,6 @@ declare const GetViolationDetailsCommand_base: {
  * //             },
  * //           ],
  * //         },
- * //         FirewallSubnetIsOutOfScopeViolation: { // FirewallSubnetIsOutOfScopeViolation
- * //           FirewallSubnetId: "STRING_VALUE",
- * //           VpcId: "STRING_VALUE",
- * //           SubnetAvailabilityZone: "STRING_VALUE",
- * //           SubnetAvailabilityZoneId: "STRING_VALUE",
- * //           VpcEndpointId: "STRING_VALUE",
- * //         },
- * //         RouteHasOutOfScopeEndpointViolation: { // RouteHasOutOfScopeEndpointViolation
- * //           SubnetId: "STRING_VALUE",
- * //           VpcId: "STRING_VALUE",
- * //           RouteTableId: "STRING_VALUE",
- * //           ViolatingRoutes: "<Routes>",
- * //           SubnetAvailabilityZone: "STRING_VALUE",
- * //           SubnetAvailabilityZoneId: "STRING_VALUE",
- * //           CurrentFirewallSubnetRouteTable: "STRING_VALUE",
- * //           FirewallSubnetId: "STRING_VALUE",
- * //           FirewallSubnetRoutes: "<Routes>",
- * //           InternetGatewayId: "STRING_VALUE",
- * //           CurrentInternetGatewayRouteTable: "STRING_VALUE",
- * //           InternetGatewayRoutes: "<Routes>",
- * //         },
- * //         ThirdPartyFirewallMissingFirewallViolation: { // ThirdPartyFirewallMissingFirewallViolation
- * //           ViolationTarget: "STRING_VALUE",
- * //           VPC: "STRING_VALUE",
- * //           AvailabilityZone: "STRING_VALUE",
- * //           TargetViolationReason: "STRING_VALUE",
- * //         },
- * //         ThirdPartyFirewallMissingSubnetViolation: { // ThirdPartyFirewallMissingSubnetViolation
- * //           ViolationTarget: "STRING_VALUE",
- * //           VPC: "STRING_VALUE",
- * //           AvailabilityZone: "STRING_VALUE",
- * //           TargetViolationReason: "STRING_VALUE",
- * //         },
- * //         ThirdPartyFirewallMissingExpectedRouteTableViolation: { // ThirdPartyFirewallMissingExpectedRouteTableViolation
- * //           ViolationTarget: "STRING_VALUE",
- * //           VPC: "STRING_VALUE",
- * //           AvailabilityZone: "STRING_VALUE",
- * //           CurrentRouteTable: "STRING_VALUE",
- * //           ExpectedRouteTable: "STRING_VALUE",
- * //         },
- * //         FirewallSubnetMissingVPCEndpointViolation: { // FirewallSubnetMissingVPCEndpointViolation
- * //           FirewallSubnetId: "STRING_VALUE",
- * //           VpcId: "STRING_VALUE",
- * //           SubnetAvailabilityZone: "STRING_VALUE",
- * //           SubnetAvailabilityZoneId: "STRING_VALUE",
- * //         },
  * //       },
  * //     ],
  * //     ResourceTags: [ // TagList

package/dist-types/commands/ListPoliciesCommand.d.ts

@@ -46,7 +46,7 @@ declare const ListPoliciesCommand_base: {
  * //       PolicyId: "STRING_VALUE",
  * //       PolicyName: "STRING_VALUE",
  * //       ResourceType: "STRING_VALUE",
- * //       SecurityServiceType: "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL",
+ * //       SecurityServiceType: "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL" || "NETWORK_ACL_COMMON",
  * //       RemediationEnabled: true || false,
  * //       DeleteUnusedFMManagedResources: true || false,
  * //       PolicyStatus: "ACTIVE" || "OUT_OF_ADMIN_SCOPE",

package/dist-types/commands/PutAdminAccountCommand.d.ts

@@ -59,7 +59,7 @@ declare const PutAdminAccountCommand_base: {
  *     },
  *     PolicyTypeScope: { // PolicyTypeScope
  *       PolicyTypes: [ // SecurityServiceTypeList
- *         "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL",
+ *         "WAF" || "WAFV2" || "SHIELD_ADVANCED" || "SECURITY_GROUPS_COMMON" || "SECURITY_GROUPS_CONTENT_AUDIT" || "SECURITY_GROUPS_USAGE_AUDIT" || "NETWORK_FIREWALL" || "DNS_FIREWALL" || "THIRD_PARTY_FIREWALL" || "IMPORT_NETWORK_FIREWALL" || "NETWORK_ACL_COMMON",
  *       ],
  *       AllPolicyTypesEnabled: true || false,
  *     },