@aws-sdk/client-network-firewall 3.131.0 → 3.141.0

package/dist-types/models/models_0.d.ts

@@ -16,12 +16,6 @@ export interface Dimension {
      */
     Value: string | undefined;
 }
-export declare namespace Dimension {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Dimension) => any;
-}
 /**
  * <p>Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the
  *          matching packet. This setting defines a CloudWatch dimension value to be published.</p>
@@ -32,12 +26,6 @@ export interface PublishMetricAction {
      */
     Dimensions: Dimension[] | undefined;
 }
-export declare namespace PublishMetricAction {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PublishMetricAction) => any;
-}
 /**
  * <p>A custom action to use in stateless rule actions settings. This is used in <a>CustomAction</a>.</p>
  */
@@ -52,12 +40,6 @@ export interface ActionDefinition {
      */
     PublishMetricAction?: PublishMetricAction;
 }
-export declare namespace ActionDefinition {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ActionDefinition) => any;
-}
 /**
  * <p>A single IP address specification. This is used in the <a>MatchAttributes</a>
  *          source and destination specifications.</p>
@@ -79,12 +61,6 @@ export interface Address {
      */
     AddressDefinition: string | undefined;
 }
-export declare namespace Address {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Address) => any;
-}
 export interface AssociateFirewallPolicyRequest {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -107,12 +83,6 @@ export interface AssociateFirewallPolicyRequest {
      */
     FirewallPolicyArn: string | undefined;
 }
-export declare namespace AssociateFirewallPolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AssociateFirewallPolicyRequest) => any;
-}
 export interface AssociateFirewallPolicyResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -133,12 +103,6 @@ export interface AssociateFirewallPolicyResponse {
      */
     UpdateToken?: string;
 }
-export declare namespace AssociateFirewallPolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AssociateFirewallPolicyResponse) => any;
-}
 /**
  * <p>Your request is valid, but Network Firewall couldn’t perform the operation because of a
  *          system problem. Retry your request. </p>
@@ -238,12 +202,6 @@ export interface SubnetMapping {
      */
     SubnetId: string | undefined;
 }
-export declare namespace SubnetMapping {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: SubnetMapping) => any;
-}
 export interface AssociateSubnetsRequest {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -266,12 +224,6 @@ export interface AssociateSubnetsRequest {
      */
     SubnetMappings: SubnetMapping[] | undefined;
 }
-export declare namespace AssociateSubnetsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AssociateSubnetsRequest) => any;
-}
 export interface AssociateSubnetsResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -292,12 +244,6 @@ export interface AssociateSubnetsResponse {
      */
     UpdateToken?: string;
 }
-export declare namespace AssociateSubnetsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AssociateSubnetsResponse) => any;
-}
 /**
  * <p>Amazon Web Services doesn't currently have enough available capacity to fulfill your request. Try your
  *          request later. </p>
@@ -343,13 +289,43 @@ export interface Attachment {
      */
     Status?: AttachmentStatus | string;
 }
-export declare namespace Attachment {
+/**
+ * <p>General information about the IP set.</p>
+ */
+export interface IPSetMetadata {
     /**
-     * @internal
+     * <p>Describes the total number of CIDR blocks currently in use by the IP set references in a firewall. To determine how many CIDR blocks are available for you to use in a firewall, you can call <code>AvailableCIDRCount</code>.</p>
+     */
+    ResolvedCIDRCount?: number;
+}
+/**
+ * <p>Summarizes the CIDR blocks used by the IP set references in a firewall. Network Firewall calculates the number of CIDRs by taking an aggregated count of all CIDRs used by the IP sets you are referencing.</p>
+ */
+export interface CIDRSummary {
+    /**
+     * <p>The number of CIDR blocks available for use by the IP set references in a firewall.</p>
+     */
+    AvailableCIDRCount?: number;
+    /**
+     * <p>The number of CIDR blocks used by the IP set references in a firewall.</p>
+     */
+    UtilizedCIDRCount?: number;
+    /**
+     * <p>The list of the IP set references used by a firewall.</p>
      */
-    const filterSensitiveLog: (obj: Attachment) => any;
+    IPSetReferences?: Record<string, IPSetMetadata>;
+}
+/**
+ * <p>The capacity usage summary of the resources used by the <a>ReferenceSets</a> in a firewall.</p>
+ */
+export interface CapacityUsageSummary {
+    /**
+     * <p>Describes the capacity usage of the CIDR blocks used by the IP set references in a firewall.</p>
+     */
+    CIDRs?: CIDRSummary;
 }
 export declare enum ConfigurationSyncState {
+    CAPACITY_CONSTRAINED = "CAPACITY_CONSTRAINED",
     IN_SYNC = "IN_SYNC",
     PENDING = "PENDING"
 }
@@ -370,12 +346,6 @@ export interface EncryptionConfiguration {
      */
     Type: EncryptionType | string | undefined;
 }
-export declare namespace EncryptionConfiguration {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: EncryptionConfiguration) => any;
-}
 /**
  * <p>A key:value pair associated with an Amazon Web Services resource. The key:value pair can be anything you
  *          define. Typically, the tag key represents a category (such as "environment") and the tag
@@ -395,12 +365,6 @@ export interface Tag {
      */
     Value: string | undefined;
 }
-export declare namespace Tag {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Tag) => any;
-}
 export interface CreateFirewallRequest {
     /**
      * <p>The descriptive name of the firewall. You can't change the name of a firewall after you create it.</p>
@@ -453,12 +417,6 @@ export interface CreateFirewallRequest {
      */
     EncryptionConfiguration?: EncryptionConfiguration;
 }
-export declare namespace CreateFirewallRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateFirewallRequest) => any;
-}
 /**
  * <p>The firewall defines the configuration settings for an Network Firewall firewall. These settings include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall Amazon Web Services resource. </p>
  *          <p>The status of the firewall, for example whether it's ready to filter network traffic,
@@ -525,18 +483,13 @@ export interface Firewall {
      */
     EncryptionConfiguration?: EncryptionConfiguration;
 }
-export declare namespace Firewall {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Firewall) => any;
-}
 export declare enum FirewallStatusValue {
     DELETING = "DELETING",
     PROVISIONING = "PROVISIONING",
     READY = "READY"
 }
 export declare enum PerObjectSyncStatus {
+    CAPACITY_CONSTRAINED = "CAPACITY_CONSTRAINED",
     IN_SYNC = "IN_SYNC",
     PENDING = "PENDING"
 }
@@ -556,12 +509,6 @@ export interface PerObjectStatus {
      */
     UpdateToken?: string;
 }
-export declare namespace PerObjectStatus {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PerObjectStatus) => any;
-}
 /**
  * <p>The status of the firewall endpoint and firewall policy configuration for a single VPC
  *          subnet. </p>
@@ -595,12 +542,6 @@ export interface SyncState {
      */
     Config?: Record<string, PerObjectStatus>;
 }
-export declare namespace SyncState {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: SyncState) => any;
-}
 /**
  * <p>Detailed information about the current status of a <a>Firewall</a>. You can retrieve this for a firewall by calling <a>DescribeFirewall</a> and providing the firewall name and ARN.</p>
  */
@@ -635,12 +576,10 @@ export interface FirewallStatus {
      *          and configuration object. </p>
      */
     SyncStates?: Record<string, SyncState>;
-}
-export declare namespace FirewallStatus {
     /**
-     * @internal
+     * <p>Describes the capacity usage of the resources contained in a firewall's reference sets. Network Firewall calclulates the capacity usage by taking an aggregated count of all of the resources used by all of the reference sets in a firewall.</p>
      */
-    const filterSensitiveLog: (obj: FirewallStatus) => any;
+    CapacityUsageSummary?: CapacityUsageSummary;
 }
 export interface CreateFirewallResponse {
     /**
@@ -652,12 +591,6 @@ export interface CreateFirewallResponse {
      */
     FirewallStatus?: FirewallStatus;
 }
-export declare namespace CreateFirewallResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateFirewallResponse) => any;
-}
 /**
  * <p>Unable to perform the operation because doing so would violate a limit setting. </p>
  */
@@ -687,12 +620,6 @@ export interface StatefulEngineOptions {
      */
     RuleOrder?: RuleOrder | string;
 }
-export declare namespace StatefulEngineOptions {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatefulEngineOptions) => any;
-}
 export declare enum OverrideAction {
     DROP_TO_ALERT = "DROP_TO_ALERT"
 }
@@ -706,12 +633,6 @@ export interface StatefulRuleGroupOverride {
      */
     Action?: OverrideAction | string;
 }
-export declare namespace StatefulRuleGroupOverride {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatefulRuleGroupOverride) => any;
-}
 /**
  * <p>Identifier for a single stateful rule group, used in a firewall policy to refer to a
  *          rule group. </p>
@@ -738,12 +659,6 @@ export interface StatefulRuleGroupReference {
      */
     Override?: StatefulRuleGroupOverride;
 }
-export declare namespace StatefulRuleGroupReference {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatefulRuleGroupReference) => any;
-}
 /**
  * <p>An optional, non-standard action to use for stateless packet handling. You can define
  *          this in addition to the standard action that you must specify. </p>
@@ -777,12 +692,6 @@ export interface CustomAction {
      */
     ActionDefinition: ActionDefinition | undefined;
 }
-export declare namespace CustomAction {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CustomAction) => any;
-}
 /**
  * <p>Identifier for a single stateless rule group, used in a firewall policy to refer to the
  *          rule group. </p>
@@ -800,12 +709,6 @@ export interface StatelessRuleGroupReference {
      */
     Priority: number | undefined;
 }
-export declare namespace StatelessRuleGroupReference {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatelessRuleGroupReference) => any;
-}
 /**
  * <p>The firewall policy defines the behavior of a firewall using a collection of stateless
  *          and stateful rule groups and other settings. You can use one firewall policy for multiple
@@ -884,12 +787,6 @@ export interface FirewallPolicy {
      */
     StatefulEngineOptions?: StatefulEngineOptions;
 }
-export declare namespace FirewallPolicy {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: FirewallPolicy) => any;
-}
 export interface CreateFirewallPolicyRequest {
     /**
      * <p>The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it.</p>
@@ -921,12 +818,6 @@ export interface CreateFirewallPolicyRequest {
      */
     EncryptionConfiguration?: EncryptionConfiguration;
 }
-export declare namespace CreateFirewallPolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateFirewallPolicyRequest) => any;
-}
 export declare enum ResourceStatus {
     ACTIVE = "ACTIVE",
     DELETING = "DELETING"
@@ -987,12 +878,6 @@ export interface FirewallPolicyResponse {
      */
     LastModifiedTime?: Date;
 }
-export declare namespace FirewallPolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: FirewallPolicyResponse) => any;
-}
 export interface CreateFirewallPolicyResponse {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the firewall policy. The token marks the state of the policy resource at the time of the request. </p>
@@ -1004,11 +889,26 @@ export interface CreateFirewallPolicyResponse {
      */
     FirewallPolicyResponse: FirewallPolicyResponse | undefined;
 }
-export declare namespace CreateFirewallPolicyResponse {
+/**
+ * <p>Configures one or more IP set references for a Suricata-compatible rule group. This is used in <a>CreateRuleGroup</a> or <a>UpdateRuleGroup</a>. An IP set reference is a rule variable that references a resource that you create and manage in another Amazon Web Services service, such as an Amazon VPC prefix list. Network Firewall IP set references enable you to dynamically update the contents of your rules. When you create, update, or delete the IP set you are referencing in your rule, Network Firewall automatically updates the rule's content with the changes. For more information about IP set references in Network Firewall, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups-ip-set-references">Using IP set references</a> in the <i>Network Firewall Developer Guide</i>.</p>
+ *          <p>
+ *         Network Firewall currently supports only <a href="https://docs.aws.amazon.com/vpc/latest/userguide/managed-prefix-lists.html">Amazon VPC prefix lists</a> as IP set references.
+ *       </p>
+ */
+export interface IPSetReference {
     /**
-     * @internal
+     * <p>The Amazon Resource Name (ARN) of the resource that you are referencing in your rule group.</p>
+     */
+    ReferenceArn?: string;
+}
+/**
+ * <p>Contains a set of IP set references.</p>
+ */
+export interface ReferenceSets {
+    /**
+     * <p>The list of IP set references.</p>
      */
-    const filterSensitiveLog: (obj: CreateFirewallPolicyResponse) => any;
+    IPSetReferences?: Record<string, IPSetReference>;
 }
 export declare enum GeneratedRulesType {
     ALLOWLIST = "ALLOWLIST",
@@ -1045,12 +945,6 @@ export interface RulesSourceList {
      */
     GeneratedRulesType: GeneratedRulesType | string | undefined;
 }
-export declare namespace RulesSourceList {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RulesSourceList) => any;
-}
 export declare enum StatefulAction {
     ALERT = "ALERT",
     DROP = "DROP",
@@ -1147,12 +1041,6 @@ export interface Header {
      */
     DestinationPort: string | undefined;
 }
-export declare namespace Header {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Header) => any;
-}
 /**
  * <p>Additional settings for a stateful rule. This is part of the <a>StatefulRule</a> configuration.</p>
  */
@@ -1166,12 +1054,6 @@ export interface RuleOption {
      */
     Settings?: string[];
 }
-export declare namespace RuleOption {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RuleOption) => any;
-}
 /**
  * <p>A single Suricata rules specification, for use in a stateful rule group.
  *        Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options.
@@ -1218,12 +1100,6 @@ export interface StatefulRule {
      */
     RuleOptions: RuleOption[] | undefined;
 }
-export declare namespace StatefulRule {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatefulRule) => any;
-}
 /**
  * <p>A single port range specification. This is used for source and destination port ranges
  *          in the stateless rule <a>MatchAttributes</a>, <code>SourcePorts</code>, and
@@ -1241,12 +1117,6 @@ export interface PortRange {
      */
     ToPort: number | undefined;
 }
-export declare namespace PortRange {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PortRange) => any;
-}
 export declare enum TCPFlag {
     ACK = "ACK",
     CWR = "CWR",
@@ -1279,12 +1149,6 @@ export interface TCPFlagField {
      */
     Masks?: (TCPFlag | string)[];
 }
-export declare namespace TCPFlagField {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: TCPFlagField) => any;
-}
 /**
  * <p>Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags. </p>
  */
@@ -1324,12 +1188,6 @@ export interface MatchAttributes {
      */
     TCPFlags?: TCPFlagField[];
 }
-export declare namespace MatchAttributes {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: MatchAttributes) => any;
-}
 /**
  * <p>The inspection criteria and action for a single stateless rule. Network Firewall inspects each packet for the specified matching
  *          criteria. When a packet matches the criteria, Network Firewall performs the rule's actions on
@@ -1381,12 +1239,6 @@ export interface RuleDefinition {
      */
     Actions: string[] | undefined;
 }
-export declare namespace RuleDefinition {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RuleDefinition) => any;
-}
 /**
  * <p>A single stateless rule. This is used in <a>StatelessRulesAndCustomActions</a>.</p>
  */
@@ -1412,12 +1264,6 @@ export interface StatelessRule {
      */
     Priority: number | undefined;
 }
-export declare namespace StatelessRule {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatelessRule) => any;
-}
 /**
  * <p>Stateless inspection criteria. Each stateless rule group uses exactly one of these data
  *          types to define its stateless rules. </p>
@@ -1436,12 +1282,6 @@ export interface StatelessRulesAndCustomActions {
      */
     CustomActions?: CustomAction[];
 }
-export declare namespace StatelessRulesAndCustomActions {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatelessRulesAndCustomActions) => any;
-}
 /**
  * <p>The stateless or stateful rules definitions for use in a single rule group. Each rule
  *          group requires a single <code>RulesSource</code>. You can use an instance of this for
@@ -1473,12 +1313,6 @@ export interface RulesSource {
      */
     StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
 }
-export declare namespace RulesSource {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RulesSource) => any;
-}
 /**
  * <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
  */
@@ -1490,12 +1324,6 @@ export interface IPSet {
      */
     Definition: string[] | undefined;
 }
-export declare namespace IPSet {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: IPSet) => any;
-}
 /**
  * <p>A set of port ranges for use in the rules in a rule group. </p>
  */
@@ -1506,12 +1334,6 @@ export interface PortSet {
      */
     Definition?: string[];
 }
-export declare namespace PortSet {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PortSet) => any;
-}
 /**
  * <p>Settings that are available for use in the rules in the <a>RuleGroup</a>
  *          where this is defined. </p>
@@ -1526,12 +1348,6 @@ export interface RuleVariables {
      */
     PortSets?: Record<string, PortSet>;
 }
-export declare namespace RuleVariables {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RuleVariables) => any;
-}
 /**
  * <p>Additional options governing how Network Firewall handles the rule group. You can only use these for stateful rule groups.</p>
  */
@@ -1545,12 +1361,6 @@ export interface StatefulRuleOptions {
      */
     RuleOrder?: RuleOrder | string;
 }
-export declare namespace StatefulRuleOptions {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StatefulRuleOptions) => any;
-}
 /**
  * <p>The object that defines the rules in a rule group. This, along with <a>RuleGroupResponse</a>, define the rule group. You can retrieve all objects for a rule group by calling <a>DescribeRuleGroup</a>. </p>
  *          <p>Network Firewall uses a rule group to inspect and control network traffic.
@@ -1565,6 +1375,10 @@ export interface RuleGroup {
      *          these for stateful rule groups. </p>
      */
     RuleVariables?: RuleVariables;
+    /**
+     * <p>The list of a rule group's reference sets.</p>
+     */
+    ReferenceSets?: ReferenceSets;
     /**
      * <p>The stateful rules or stateless rules for the rule group. </p>
      */
@@ -1575,12 +1389,6 @@ export interface RuleGroup {
      */
     StatefulRuleOptions?: StatefulRuleOptions;
 }
-export declare namespace RuleGroup {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RuleGroup) => any;
-}
 /**
  * <p>High-level information about the managed rule group that your own rule group is copied from. You can use the the metadata to track version updates made to the originating rule group. You can retrieve all objects for a rule group by calling <a href="https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeRuleGroup.html">DescribeRuleGroup</a>.</p>
  */
@@ -1594,12 +1402,6 @@ export interface SourceMetadata {
      */
     SourceUpdateToken?: string;
 }
-export declare namespace SourceMetadata {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: SourceMetadata) => any;
-}
 export declare enum RuleGroupType {
     STATEFUL = "STATEFUL",
     STATELESS = "STATELESS"
@@ -1701,12 +1503,6 @@ export interface CreateRuleGroupRequest {
      */
     SourceMetadata?: SourceMetadata;
 }
-export declare namespace CreateRuleGroupRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateRuleGroupRequest) => any;
-}
 /**
  * <p>The high-level properties of a rule group. This, along with the <a>RuleGroup</a>, define the rule group. You can retrieve all objects for a rule group by calling <a>DescribeRuleGroup</a>. </p>
  */
@@ -1781,12 +1577,6 @@ export interface RuleGroupResponse {
      */
     LastModifiedTime?: Date;
 }
-export declare namespace RuleGroupResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RuleGroupResponse) => any;
-}
 export interface CreateRuleGroupResponse {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the rule group. The token marks the state of the rule group resource at the time of the request. </p>
@@ -1798,12 +1588,6 @@ export interface CreateRuleGroupResponse {
      */
     RuleGroupResponse: RuleGroupResponse | undefined;
 }
-export declare namespace CreateRuleGroupResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateRuleGroupResponse) => any;
-}
 export interface DeleteFirewallRequest {
     /**
      * <p>The descriptive name of the firewall. You can't change the name of a firewall after you create it.</p>
@@ -1816,12 +1600,6 @@ export interface DeleteFirewallRequest {
      */
     FirewallArn?: string;
 }
-export declare namespace DeleteFirewallRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteFirewallRequest) => any;
-}
 export interface DeleteFirewallResponse {
     /**
      * <p>The firewall defines the configuration settings for an Network Firewall firewall. These settings include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall Amazon Web Services resource. </p>
@@ -1835,12 +1613,6 @@ export interface DeleteFirewallResponse {
      */
     FirewallStatus?: FirewallStatus;
 }
-export declare namespace DeleteFirewallResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteFirewallResponse) => any;
-}
 /**
  * <p>The operation you requested isn't supported by Network Firewall. </p>
  */
@@ -1865,12 +1637,6 @@ export interface DeleteFirewallPolicyRequest {
      */
     FirewallPolicyArn?: string;
 }
-export declare namespace DeleteFirewallPolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteFirewallPolicyRequest) => any;
-}
 export interface DeleteFirewallPolicyResponse {
     /**
      * <p>The object containing the definition of the <a>FirewallPolicyResponse</a>
@@ -1878,32 +1644,14 @@ export interface DeleteFirewallPolicyResponse {
      */
     FirewallPolicyResponse: FirewallPolicyResponse | undefined;
 }
-export declare namespace DeleteFirewallPolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteFirewallPolicyResponse) => any;
-}
 export interface DeleteResourcePolicyRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the rule group or firewall policy whose resource policy you want to delete. </p>
      */
     ResourceArn: string | undefined;
 }
-export declare namespace DeleteResourcePolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteResourcePolicyRequest) => any;
-}
 export interface DeleteResourcePolicyResponse {
 }
-export declare namespace DeleteResourcePolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteResourcePolicyResponse) => any;
-}
 /**
  * <p>The policy statement failed validation.</p>
  */
@@ -1936,24 +1684,12 @@ export interface DeleteRuleGroupRequest {
      */
     Type?: RuleGroupType | string;
 }
-export declare namespace DeleteRuleGroupRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteRuleGroupRequest) => any;
-}
 export interface DeleteRuleGroupResponse {
     /**
      * <p>The high-level properties of a rule group. This, along with the <a>RuleGroup</a>, define the rule group. You can retrieve all objects for a rule group by calling <a>DescribeRuleGroup</a>. </p>
      */
     RuleGroupResponse: RuleGroupResponse | undefined;
 }
-export declare namespace DeleteRuleGroupResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteRuleGroupResponse) => any;
-}
 export interface DescribeFirewallRequest {
     /**
      * <p>The descriptive name of the firewall. You can't change the name of a firewall after you create it.</p>
@@ -1966,12 +1702,6 @@ export interface DescribeFirewallRequest {
      */
     FirewallArn?: string;
 }
-export declare namespace DescribeFirewallRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeFirewallRequest) => any;
-}
 export interface DescribeFirewallResponse {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -1988,12 +1718,6 @@ export interface DescribeFirewallResponse {
      */
     FirewallStatus?: FirewallStatus;
 }
-export declare namespace DescribeFirewallResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeFirewallResponse) => any;
-}
 export interface DescribeFirewallPolicyRequest {
     /**
      * <p>The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it.</p>
@@ -2006,12 +1730,6 @@ export interface DescribeFirewallPolicyRequest {
      */
     FirewallPolicyArn?: string;
 }
-export declare namespace DescribeFirewallPolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeFirewallPolicyRequest) => any;
-}
 export interface DescribeFirewallPolicyResponse {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the firewall policy. The token marks the state of the policy resource at the time of the request. </p>
@@ -2027,12 +1745,6 @@ export interface DescribeFirewallPolicyResponse {
      */
     FirewallPolicy?: FirewallPolicy;
 }
-export declare namespace DescribeFirewallPolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeFirewallPolicyResponse) => any;
-}
 export interface DescribeLoggingConfigurationRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -2045,12 +1757,6 @@ export interface DescribeLoggingConfigurationRequest {
      */
     FirewallName?: string;
 }
-export declare namespace DescribeLoggingConfigurationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeLoggingConfigurationRequest) => any;
-}
 export declare enum LogDestinationType {
     CLOUDWATCH_LOGS = "CloudWatchLogs",
     KINESIS_DATA_FIREHOSE = "KinesisDataFirehose",
@@ -2114,12 +1820,6 @@ export interface LogDestinationConfig {
      */
     LogDestination: Record<string, string> | undefined;
 }
-export declare namespace LogDestinationConfig {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: LogDestinationConfig) => any;
-}
 /**
  * <p>Defines how Network Firewall performs logging for a <a>Firewall</a>. </p>
  */
@@ -2130,12 +1830,6 @@ export interface LoggingConfiguration {
      */
     LogDestinationConfigs: LogDestinationConfig[] | undefined;
 }
-export declare namespace LoggingConfiguration {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: LoggingConfiguration) => any;
-}
 export interface DescribeLoggingConfigurationResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -2146,36 +1840,18 @@ export interface DescribeLoggingConfigurationResponse {
      */
     LoggingConfiguration?: LoggingConfiguration;
 }
-export declare namespace DescribeLoggingConfigurationResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeLoggingConfigurationResponse) => any;
-}
 export interface DescribeResourcePolicyRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the rule group or firewall policy whose resource policy you want to retrieve. </p>
      */
     ResourceArn: string | undefined;
 }
-export declare namespace DescribeResourcePolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeResourcePolicyRequest) => any;
-}
 export interface DescribeResourcePolicyResponse {
     /**
      * <p>The IAM policy for the resource. </p>
      */
     Policy?: string;
 }
-export declare namespace DescribeResourcePolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeResourcePolicyResponse) => any;
-}
 export interface DescribeRuleGroupRequest {
     /**
      * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
@@ -2196,12 +1872,6 @@ export interface DescribeRuleGroupRequest {
      */
     Type?: RuleGroupType | string;
 }
-export declare namespace DescribeRuleGroupRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeRuleGroupRequest) => any;
-}
 export interface DescribeRuleGroupResponse {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the rule group. The token marks the state of the rule group resource at the time of the request. </p>
@@ -2222,12 +1892,6 @@ export interface DescribeRuleGroupResponse {
      */
     RuleGroupResponse: RuleGroupResponse | undefined;
 }
-export declare namespace DescribeRuleGroupResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeRuleGroupResponse) => any;
-}
 export interface DescribeRuleGroupMetadataRequest {
     /**
      * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
@@ -2248,12 +1912,6 @@ export interface DescribeRuleGroupMetadataRequest {
      */
     Type?: RuleGroupType | string;
 }
-export declare namespace DescribeRuleGroupMetadataRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeRuleGroupMetadataRequest) => any;
-}
 export interface DescribeRuleGroupMetadataResponse {
     /**
      * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
@@ -2295,12 +1953,6 @@ export interface DescribeRuleGroupMetadataResponse {
      */
     LastModifiedTime?: Date;
 }
-export declare namespace DescribeRuleGroupMetadataResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeRuleGroupMetadataResponse) => any;
-}
 export interface DisassociateSubnetsRequest {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -2323,12 +1975,6 @@ export interface DisassociateSubnetsRequest {
      */
     SubnetIds: string[] | undefined;
 }
-export declare namespace DisassociateSubnetsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DisassociateSubnetsRequest) => any;
-}
 export interface DisassociateSubnetsResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -2349,12 +1995,6 @@ export interface DisassociateSubnetsResponse {
      */
     UpdateToken?: string;
 }
-export declare namespace DisassociateSubnetsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DisassociateSubnetsResponse) => any;
-}
 /**
  * <p>High-level information about a firewall, returned by operations like create and
  *          describe. You can use the information provided in the metadata to retrieve and manage a
@@ -2370,12 +2010,6 @@ export interface FirewallMetadata {
      */
     FirewallArn?: string;
 }
-export declare namespace FirewallMetadata {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: FirewallMetadata) => any;
-}
 /**
  * <p>High-level information about a firewall policy, returned by operations like create and
  *          describe. You can use the information provided in the metadata to retrieve and manage a
@@ -2391,12 +2025,6 @@ export interface FirewallPolicyMetadata {
      */
     Arn?: string;
 }
-export declare namespace FirewallPolicyMetadata {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: FirewallPolicyMetadata) => any;
-}
 export interface ListFirewallPoliciesRequest {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2411,12 +2039,6 @@ export interface ListFirewallPoliciesRequest {
      */
     MaxResults?: number;
 }
-export declare namespace ListFirewallPoliciesRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListFirewallPoliciesRequest) => any;
-}
 export interface ListFirewallPoliciesResponse {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2430,12 +2052,6 @@ export interface ListFirewallPoliciesResponse {
      */
     FirewallPolicies?: FirewallPolicyMetadata[];
 }
-export declare namespace ListFirewallPoliciesResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListFirewallPoliciesResponse) => any;
-}
 export interface ListFirewallsRequest {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2455,12 +2071,6 @@ export interface ListFirewallsRequest {
      */
     MaxResults?: number;
 }
-export declare namespace ListFirewallsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListFirewallsRequest) => any;
-}
 export interface ListFirewallsResponse {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2475,12 +2085,6 @@ export interface ListFirewallsResponse {
      */
     Firewalls?: FirewallMetadata[];
 }
-export declare namespace ListFirewallsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListFirewallsResponse) => any;
-}
 export declare enum ResourceManagedType {
     AWS_MANAGED_DOMAIN_LISTS = "AWS_MANAGED_DOMAIN_LISTS",
     AWS_MANAGED_THREAT_SIGNATURES = "AWS_MANAGED_THREAT_SIGNATURES"
@@ -2517,12 +2121,6 @@ export interface ListRuleGroupsRequest {
      */
     Type?: RuleGroupType | string;
 }
-export declare namespace ListRuleGroupsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListRuleGroupsRequest) => any;
-}
 /**
  * <p>High-level information about a rule group, returned by <a>ListRuleGroups</a>.
  *          You can use the information provided in the metadata to retrieve and manage a
@@ -2538,12 +2136,6 @@ export interface RuleGroupMetadata {
      */
     Arn?: string;
 }
-export declare namespace RuleGroupMetadata {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RuleGroupMetadata) => any;
-}
 export interface ListRuleGroupsResponse {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2557,12 +2149,6 @@ export interface ListRuleGroupsResponse {
      */
     RuleGroups?: RuleGroupMetadata[];
 }
-export declare namespace ListRuleGroupsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListRuleGroupsResponse) => any;
-}
 export interface ListTagsForResourceRequest {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2581,12 +2167,6 @@ export interface ListTagsForResourceRequest {
      */
     ResourceArn: string | undefined;
 }
-export declare namespace ListTagsForResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListTagsForResourceRequest) => any;
-}
 export interface ListTagsForResourceResponse {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2599,12 +2179,6 @@ export interface ListTagsForResourceResponse {
      */
     Tags?: Tag[];
 }
-export declare namespace ListTagsForResourceResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListTagsForResourceResponse) => any;
-}
 /**
  * <p>Unable to send logs to a configured logging destination. </p>
  */
@@ -2656,20 +2230,8 @@ export interface PutResourcePolicyRequest {
      */
     Policy: string | undefined;
 }
-export declare namespace PutResourcePolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PutResourcePolicyRequest) => any;
-}
 export interface PutResourcePolicyResponse {
 }
-export declare namespace PutResourcePolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PutResourcePolicyResponse) => any;
-}
 export interface TagResourceRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the resource.</p>
@@ -2680,20 +2242,8 @@ export interface TagResourceRequest {
      */
     Tags: Tag[] | undefined;
 }
-export declare namespace TagResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: TagResourceRequest) => any;
-}
 export interface TagResourceResponse {
 }
-export declare namespace TagResourceResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: TagResourceResponse) => any;
-}
 export interface UntagResourceRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the resource.</p>
@@ -2704,20 +2254,8 @@ export interface UntagResourceRequest {
      */
     TagKeys: string[] | undefined;
 }
-export declare namespace UntagResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UntagResourceRequest) => any;
-}
 export interface UntagResourceResponse {
 }
-export declare namespace UntagResourceResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UntagResourceResponse) => any;
-}
 /**
  * <p>Unable to change the resource because your account doesn't own it. </p>
  */
@@ -2754,12 +2292,6 @@ export interface UpdateFirewallDeleteProtectionRequest {
      */
     DeleteProtection: boolean | undefined;
 }
-export declare namespace UpdateFirewallDeleteProtectionRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallDeleteProtectionRequest) => any;
-}
 export interface UpdateFirewallDeleteProtectionResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -2782,12 +2314,6 @@ export interface UpdateFirewallDeleteProtectionResponse {
      */
     UpdateToken?: string;
 }
-export declare namespace UpdateFirewallDeleteProtectionResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallDeleteProtectionResponse) => any;
-}
 export interface UpdateFirewallDescriptionRequest {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -2811,12 +2337,6 @@ export interface UpdateFirewallDescriptionRequest {
      */
     Description?: string;
 }
-export declare namespace UpdateFirewallDescriptionRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallDescriptionRequest) => any;
-}
 export interface UpdateFirewallDescriptionResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -2837,12 +2357,6 @@ export interface UpdateFirewallDescriptionResponse {
      */
     UpdateToken?: string;
 }
-export declare namespace UpdateFirewallDescriptionResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallDescriptionResponse) => any;
-}
 export interface UpdateFirewallEncryptionConfigurationRequest {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -2863,12 +2377,6 @@ export interface UpdateFirewallEncryptionConfigurationRequest {
      */
     EncryptionConfiguration?: EncryptionConfiguration;
 }
-export declare namespace UpdateFirewallEncryptionConfigurationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallEncryptionConfigurationRequest) => any;
-}
 export interface UpdateFirewallEncryptionConfigurationResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -2889,12 +2397,6 @@ export interface UpdateFirewallEncryptionConfigurationResponse {
      */
     EncryptionConfiguration?: EncryptionConfiguration;
 }
-export declare namespace UpdateFirewallEncryptionConfigurationResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallEncryptionConfigurationResponse) => any;
-}
 export interface UpdateFirewallPolicyRequest {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the firewall policy. The token marks the state of the policy resource at the time of the request. </p>
@@ -2933,12 +2435,6 @@ export interface UpdateFirewallPolicyRequest {
      */
     EncryptionConfiguration?: EncryptionConfiguration;
 }
-export declare namespace UpdateFirewallPolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallPolicyRequest) => any;
-}
 export interface UpdateFirewallPolicyResponse {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the firewall policy. The token marks the state of the policy resource at the time of the request. </p>
@@ -2950,12 +2446,6 @@ export interface UpdateFirewallPolicyResponse {
      */
     FirewallPolicyResponse: FirewallPolicyResponse | undefined;
 }
-export declare namespace UpdateFirewallPolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallPolicyResponse) => any;
-}
 export interface UpdateFirewallPolicyChangeProtectionRequest {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -2980,12 +2470,6 @@ export interface UpdateFirewallPolicyChangeProtectionRequest {
      */
     FirewallPolicyChangeProtection: boolean | undefined;
 }
-export declare namespace UpdateFirewallPolicyChangeProtectionRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallPolicyChangeProtectionRequest) => any;
-}
 export interface UpdateFirewallPolicyChangeProtectionResponse {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -3008,12 +2492,6 @@ export interface UpdateFirewallPolicyChangeProtectionResponse {
      */
     FirewallPolicyChangeProtection?: boolean;
 }
-export declare namespace UpdateFirewallPolicyChangeProtectionResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateFirewallPolicyChangeProtectionResponse) => any;
-}
 export interface UpdateLoggingConfigurationRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -3031,12 +2509,6 @@ export interface UpdateLoggingConfigurationRequest {
      */
     LoggingConfiguration?: LoggingConfiguration;
 }
-export declare namespace UpdateLoggingConfigurationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateLoggingConfigurationRequest) => any;
-}
 export interface UpdateLoggingConfigurationResponse {
     /**
      * <p>The Amazon Resource Name (ARN) of the firewall.</p>
@@ -3051,12 +2523,6 @@ export interface UpdateLoggingConfigurationResponse {
      */
     LoggingConfiguration?: LoggingConfiguration;
 }
-export declare namespace UpdateLoggingConfigurationResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateLoggingConfigurationResponse) => any;
-}
 export interface UpdateRuleGroupRequest {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the rule group. The token marks the state of the rule group resource at the time of the request. </p>
@@ -3120,12 +2586,6 @@ export interface UpdateRuleGroupRequest {
      */
     SourceMetadata?: SourceMetadata;
 }
-export declare namespace UpdateRuleGroupRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateRuleGroupRequest) => any;
-}
 export interface UpdateRuleGroupResponse {
     /**
      * <p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the rule group. The token marks the state of the rule group resource at the time of the request. </p>
@@ -3137,12 +2597,6 @@ export interface UpdateRuleGroupResponse {
      */
     RuleGroupResponse: RuleGroupResponse | undefined;
 }
-export declare namespace UpdateRuleGroupResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateRuleGroupResponse) => any;
-}
 export interface UpdateSubnetChangeProtectionRequest {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -3167,12 +2621,6 @@ export interface UpdateSubnetChangeProtectionRequest {
      */
     SubnetChangeProtection: boolean | undefined;
 }
-export declare namespace UpdateSubnetChangeProtectionRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateSubnetChangeProtectionRequest) => any;
-}
 export interface UpdateSubnetChangeProtectionResponse {
     /**
      * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -3195,9 +2643,439 @@ export interface UpdateSubnetChangeProtectionResponse {
      */
     SubnetChangeProtection?: boolean;
 }
-export declare namespace UpdateSubnetChangeProtectionResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateSubnetChangeProtectionResponse) => any;
-}
+/**
+ * @internal
+ */
+export declare const DimensionFilterSensitiveLog: (obj: Dimension) => any;
+/**
+ * @internal
+ */
+export declare const PublishMetricActionFilterSensitiveLog: (obj: PublishMetricAction) => any;
+/**
+ * @internal
+ */
+export declare const ActionDefinitionFilterSensitiveLog: (obj: ActionDefinition) => any;
+/**
+ * @internal
+ */
+export declare const AddressFilterSensitiveLog: (obj: Address) => any;
+/**
+ * @internal
+ */
+export declare const AssociateFirewallPolicyRequestFilterSensitiveLog: (obj: AssociateFirewallPolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const AssociateFirewallPolicyResponseFilterSensitiveLog: (obj: AssociateFirewallPolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const SubnetMappingFilterSensitiveLog: (obj: SubnetMapping) => any;
+/**
+ * @internal
+ */
+export declare const AssociateSubnetsRequestFilterSensitiveLog: (obj: AssociateSubnetsRequest) => any;
+/**
+ * @internal
+ */
+export declare const AssociateSubnetsResponseFilterSensitiveLog: (obj: AssociateSubnetsResponse) => any;
+/**
+ * @internal
+ */
+export declare const AttachmentFilterSensitiveLog: (obj: Attachment) => any;
+/**
+ * @internal
+ */
+export declare const IPSetMetadataFilterSensitiveLog: (obj: IPSetMetadata) => any;
+/**
+ * @internal
+ */
+export declare const CIDRSummaryFilterSensitiveLog: (obj: CIDRSummary) => any;
+/**
+ * @internal
+ */
+export declare const CapacityUsageSummaryFilterSensitiveLog: (obj: CapacityUsageSummary) => any;
+/**
+ * @internal
+ */
+export declare const EncryptionConfigurationFilterSensitiveLog: (obj: EncryptionConfiguration) => any;
+/**
+ * @internal
+ */
+export declare const TagFilterSensitiveLog: (obj: Tag) => any;
+/**
+ * @internal
+ */
+export declare const CreateFirewallRequestFilterSensitiveLog: (obj: CreateFirewallRequest) => any;
+/**
+ * @internal
+ */
+export declare const FirewallFilterSensitiveLog: (obj: Firewall) => any;
+/**
+ * @internal
+ */
+export declare const PerObjectStatusFilterSensitiveLog: (obj: PerObjectStatus) => any;
+/**
+ * @internal
+ */
+export declare const SyncStateFilterSensitiveLog: (obj: SyncState) => any;
+/**
+ * @internal
+ */
+export declare const FirewallStatusFilterSensitiveLog: (obj: FirewallStatus) => any;
+/**
+ * @internal
+ */
+export declare const CreateFirewallResponseFilterSensitiveLog: (obj: CreateFirewallResponse) => any;
+/**
+ * @internal
+ */
+export declare const StatefulEngineOptionsFilterSensitiveLog: (obj: StatefulEngineOptions) => any;
+/**
+ * @internal
+ */
+export declare const StatefulRuleGroupOverrideFilterSensitiveLog: (obj: StatefulRuleGroupOverride) => any;
+/**
+ * @internal
+ */
+export declare const StatefulRuleGroupReferenceFilterSensitiveLog: (obj: StatefulRuleGroupReference) => any;
+/**
+ * @internal
+ */
+export declare const CustomActionFilterSensitiveLog: (obj: CustomAction) => any;
+/**
+ * @internal
+ */
+export declare const StatelessRuleGroupReferenceFilterSensitiveLog: (obj: StatelessRuleGroupReference) => any;
+/**
+ * @internal
+ */
+export declare const FirewallPolicyFilterSensitiveLog: (obj: FirewallPolicy) => any;
+/**
+ * @internal
+ */
+export declare const CreateFirewallPolicyRequestFilterSensitiveLog: (obj: CreateFirewallPolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const FirewallPolicyResponseFilterSensitiveLog: (obj: FirewallPolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const CreateFirewallPolicyResponseFilterSensitiveLog: (obj: CreateFirewallPolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const IPSetReferenceFilterSensitiveLog: (obj: IPSetReference) => any;
+/**
+ * @internal
+ */
+export declare const ReferenceSetsFilterSensitiveLog: (obj: ReferenceSets) => any;
+/**
+ * @internal
+ */
+export declare const RulesSourceListFilterSensitiveLog: (obj: RulesSourceList) => any;
+/**
+ * @internal
+ */
+export declare const HeaderFilterSensitiveLog: (obj: Header) => any;
+/**
+ * @internal
+ */
+export declare const RuleOptionFilterSensitiveLog: (obj: RuleOption) => any;
+/**
+ * @internal
+ */
+export declare const StatefulRuleFilterSensitiveLog: (obj: StatefulRule) => any;
+/**
+ * @internal
+ */
+export declare const PortRangeFilterSensitiveLog: (obj: PortRange) => any;
+/**
+ * @internal
+ */
+export declare const TCPFlagFieldFilterSensitiveLog: (obj: TCPFlagField) => any;
+/**
+ * @internal
+ */
+export declare const MatchAttributesFilterSensitiveLog: (obj: MatchAttributes) => any;
+/**
+ * @internal
+ */
+export declare const RuleDefinitionFilterSensitiveLog: (obj: RuleDefinition) => any;
+/**
+ * @internal
+ */
+export declare const StatelessRuleFilterSensitiveLog: (obj: StatelessRule) => any;
+/**
+ * @internal
+ */
+export declare const StatelessRulesAndCustomActionsFilterSensitiveLog: (obj: StatelessRulesAndCustomActions) => any;
+/**
+ * @internal
+ */
+export declare const RulesSourceFilterSensitiveLog: (obj: RulesSource) => any;
+/**
+ * @internal
+ */
+export declare const IPSetFilterSensitiveLog: (obj: IPSet) => any;
+/**
+ * @internal
+ */
+export declare const PortSetFilterSensitiveLog: (obj: PortSet) => any;
+/**
+ * @internal
+ */
+export declare const RuleVariablesFilterSensitiveLog: (obj: RuleVariables) => any;
+/**
+ * @internal
+ */
+export declare const StatefulRuleOptionsFilterSensitiveLog: (obj: StatefulRuleOptions) => any;
+/**
+ * @internal
+ */
+export declare const RuleGroupFilterSensitiveLog: (obj: RuleGroup) => any;
+/**
+ * @internal
+ */
+export declare const SourceMetadataFilterSensitiveLog: (obj: SourceMetadata) => any;
+/**
+ * @internal
+ */
+export declare const CreateRuleGroupRequestFilterSensitiveLog: (obj: CreateRuleGroupRequest) => any;
+/**
+ * @internal
+ */
+export declare const RuleGroupResponseFilterSensitiveLog: (obj: RuleGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const CreateRuleGroupResponseFilterSensitiveLog: (obj: CreateRuleGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteFirewallRequestFilterSensitiveLog: (obj: DeleteFirewallRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteFirewallResponseFilterSensitiveLog: (obj: DeleteFirewallResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteFirewallPolicyRequestFilterSensitiveLog: (obj: DeleteFirewallPolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteFirewallPolicyResponseFilterSensitiveLog: (obj: DeleteFirewallPolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteResourcePolicyRequestFilterSensitiveLog: (obj: DeleteResourcePolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteResourcePolicyResponseFilterSensitiveLog: (obj: DeleteResourcePolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteRuleGroupRequestFilterSensitiveLog: (obj: DeleteRuleGroupRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteRuleGroupResponseFilterSensitiveLog: (obj: DeleteRuleGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeFirewallRequestFilterSensitiveLog: (obj: DescribeFirewallRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeFirewallResponseFilterSensitiveLog: (obj: DescribeFirewallResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeFirewallPolicyRequestFilterSensitiveLog: (obj: DescribeFirewallPolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeFirewallPolicyResponseFilterSensitiveLog: (obj: DescribeFirewallPolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeLoggingConfigurationRequestFilterSensitiveLog: (obj: DescribeLoggingConfigurationRequest) => any;
+/**
+ * @internal
+ */
+export declare const LogDestinationConfigFilterSensitiveLog: (obj: LogDestinationConfig) => any;
+/**
+ * @internal
+ */
+export declare const LoggingConfigurationFilterSensitiveLog: (obj: LoggingConfiguration) => any;
+/**
+ * @internal
+ */
+export declare const DescribeLoggingConfigurationResponseFilterSensitiveLog: (obj: DescribeLoggingConfigurationResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeResourcePolicyRequestFilterSensitiveLog: (obj: DescribeResourcePolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeResourcePolicyResponseFilterSensitiveLog: (obj: DescribeResourcePolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeRuleGroupRequestFilterSensitiveLog: (obj: DescribeRuleGroupRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeRuleGroupResponseFilterSensitiveLog: (obj: DescribeRuleGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeRuleGroupMetadataRequestFilterSensitiveLog: (obj: DescribeRuleGroupMetadataRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeRuleGroupMetadataResponseFilterSensitiveLog: (obj: DescribeRuleGroupMetadataResponse) => any;
+/**
+ * @internal
+ */
+export declare const DisassociateSubnetsRequestFilterSensitiveLog: (obj: DisassociateSubnetsRequest) => any;
+/**
+ * @internal
+ */
+export declare const DisassociateSubnetsResponseFilterSensitiveLog: (obj: DisassociateSubnetsResponse) => any;
+/**
+ * @internal
+ */
+export declare const FirewallMetadataFilterSensitiveLog: (obj: FirewallMetadata) => any;
+/**
+ * @internal
+ */
+export declare const FirewallPolicyMetadataFilterSensitiveLog: (obj: FirewallPolicyMetadata) => any;
+/**
+ * @internal
+ */
+export declare const ListFirewallPoliciesRequestFilterSensitiveLog: (obj: ListFirewallPoliciesRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListFirewallPoliciesResponseFilterSensitiveLog: (obj: ListFirewallPoliciesResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListFirewallsRequestFilterSensitiveLog: (obj: ListFirewallsRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListFirewallsResponseFilterSensitiveLog: (obj: ListFirewallsResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListRuleGroupsRequestFilterSensitiveLog: (obj: ListRuleGroupsRequest) => any;
+/**
+ * @internal
+ */
+export declare const RuleGroupMetadataFilterSensitiveLog: (obj: RuleGroupMetadata) => any;
+/**
+ * @internal
+ */
+export declare const ListRuleGroupsResponseFilterSensitiveLog: (obj: ListRuleGroupsResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListTagsForResourceRequestFilterSensitiveLog: (obj: ListTagsForResourceRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListTagsForResourceResponseFilterSensitiveLog: (obj: ListTagsForResourceResponse) => any;
+/**
+ * @internal
+ */
+export declare const PutResourcePolicyRequestFilterSensitiveLog: (obj: PutResourcePolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const PutResourcePolicyResponseFilterSensitiveLog: (obj: PutResourcePolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const TagResourceRequestFilterSensitiveLog: (obj: TagResourceRequest) => any;
+/**
+ * @internal
+ */
+export declare const TagResourceResponseFilterSensitiveLog: (obj: TagResourceResponse) => any;
+/**
+ * @internal
+ */
+export declare const UntagResourceRequestFilterSensitiveLog: (obj: UntagResourceRequest) => any;
+/**
+ * @internal
+ */
+export declare const UntagResourceResponseFilterSensitiveLog: (obj: UntagResourceResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallDeleteProtectionRequestFilterSensitiveLog: (obj: UpdateFirewallDeleteProtectionRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallDeleteProtectionResponseFilterSensitiveLog: (obj: UpdateFirewallDeleteProtectionResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallDescriptionRequestFilterSensitiveLog: (obj: UpdateFirewallDescriptionRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallDescriptionResponseFilterSensitiveLog: (obj: UpdateFirewallDescriptionResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallEncryptionConfigurationRequestFilterSensitiveLog: (obj: UpdateFirewallEncryptionConfigurationRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallEncryptionConfigurationResponseFilterSensitiveLog: (obj: UpdateFirewallEncryptionConfigurationResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallPolicyRequestFilterSensitiveLog: (obj: UpdateFirewallPolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallPolicyResponseFilterSensitiveLog: (obj: UpdateFirewallPolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallPolicyChangeProtectionRequestFilterSensitiveLog: (obj: UpdateFirewallPolicyChangeProtectionRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateFirewallPolicyChangeProtectionResponseFilterSensitiveLog: (obj: UpdateFirewallPolicyChangeProtectionResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateLoggingConfigurationRequestFilterSensitiveLog: (obj: UpdateLoggingConfigurationRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateLoggingConfigurationResponseFilterSensitiveLog: (obj: UpdateLoggingConfigurationResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateRuleGroupRequestFilterSensitiveLog: (obj: UpdateRuleGroupRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateRuleGroupResponseFilterSensitiveLog: (obj: UpdateRuleGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateSubnetChangeProtectionRequestFilterSensitiveLog: (obj: UpdateSubnetChangeProtectionRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateSubnetChangeProtectionResponseFilterSensitiveLog: (obj: UpdateSubnetChangeProtectionResponse) => any;