@aws-sdk/client-network-firewall 3.183.0 → 3.185.0

package/dist-es/runtimeConfig.browser.js

@@ -1,3 +1,4 @@
+import { __assign, __awaiter, __generator } from "tslib";
 import packageInfo from "../package.json";
 import { Sha256 } from "@aws-crypto/sha256-browser";
 import { DEFAULT_USE_DUALSTACK_ENDPOINT, DEFAULT_USE_FIPS_ENDPOINT } from "@aws-sdk/config-resolver";
@@ -11,30 +12,15 @@ import { fromUtf8, toUtf8 } from "@aws-sdk/util-utf8-browser";
 import { getRuntimeConfig as getSharedRuntimeConfig } from "./runtimeConfig.shared";
 import { loadConfigsForDefaultMode } from "@aws-sdk/smithy-client";
 import { resolveDefaultsModeConfig } from "@aws-sdk/util-defaults-mode-browser";
-export const getRuntimeConfig = (config) => {
-    const defaultsMode = resolveDefaultsModeConfig(config);
-    const defaultConfigProvider = () => defaultsMode().then(loadConfigsForDefaultMode);
-    const clientSharedValues = getSharedRuntimeConfig(config);
-    return {
-        ...clientSharedValues,
-        ...config,
-        runtime: "browser",
-        defaultsMode,
-        base64Decoder: config?.base64Decoder ?? fromBase64,
-        base64Encoder: config?.base64Encoder ?? toBase64,
-        bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
-        credentialDefaultProvider: config?.credentialDefaultProvider ?? ((_) => () => Promise.reject(new Error("Credential is missing"))),
-        defaultUserAgentProvider: config?.defaultUserAgentProvider ??
-            defaultUserAgent({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
-        maxAttempts: config?.maxAttempts ?? DEFAULT_MAX_ATTEMPTS,
-        region: config?.region ?? invalidProvider("Region is missing"),
-        requestHandler: config?.requestHandler ?? new RequestHandler(defaultConfigProvider),
-        retryMode: config?.retryMode ?? (async () => (await defaultConfigProvider()).retryMode || DEFAULT_RETRY_MODE),
-        sha256: config?.sha256 ?? Sha256,
-        streamCollector: config?.streamCollector ?? streamCollector,
-        useDualstackEndpoint: config?.useDualstackEndpoint ?? (() => Promise.resolve(DEFAULT_USE_DUALSTACK_ENDPOINT)),
-        useFipsEndpoint: config?.useFipsEndpoint ?? (() => Promise.resolve(DEFAULT_USE_FIPS_ENDPOINT)),
-        utf8Decoder: config?.utf8Decoder ?? fromUtf8,
-        utf8Encoder: config?.utf8Encoder ?? toUtf8,
-    };
+export var getRuntimeConfig = function (config) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
+    var defaultsMode = resolveDefaultsModeConfig(config);
+    var defaultConfigProvider = function () { return defaultsMode().then(loadConfigsForDefaultMode); };
+    var clientSharedValues = getSharedRuntimeConfig(config);
+    return __assign(__assign(__assign({}, clientSharedValues), config), { runtime: "browser", defaultsMode: defaultsMode, base64Decoder: (_a = config === null || config === void 0 ? void 0 : config.base64Decoder) !== null && _a !== void 0 ? _a : fromBase64, base64Encoder: (_b = config === null || config === void 0 ? void 0 : config.base64Encoder) !== null && _b !== void 0 ? _b : toBase64, bodyLengthChecker: (_c = config === null || config === void 0 ? void 0 : config.bodyLengthChecker) !== null && _c !== void 0 ? _c : calculateBodyLength, credentialDefaultProvider: (_d = config === null || config === void 0 ? void 0 : config.credentialDefaultProvider) !== null && _d !== void 0 ? _d : (function (_) { return function () { return Promise.reject(new Error("Credential is missing")); }; }), defaultUserAgentProvider: (_e = config === null || config === void 0 ? void 0 : config.defaultUserAgentProvider) !== null && _e !== void 0 ? _e : defaultUserAgent({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }), maxAttempts: (_f = config === null || config === void 0 ? void 0 : config.maxAttempts) !== null && _f !== void 0 ? _f : DEFAULT_MAX_ATTEMPTS, region: (_g = config === null || config === void 0 ? void 0 : config.region) !== null && _g !== void 0 ? _g : invalidProvider("Region is missing"), requestHandler: (_h = config === null || config === void 0 ? void 0 : config.requestHandler) !== null && _h !== void 0 ? _h : new RequestHandler(defaultConfigProvider), retryMode: (_j = config === null || config === void 0 ? void 0 : config.retryMode) !== null && _j !== void 0 ? _j : (function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4, defaultConfigProvider()];
+                case 1: return [2, (_a.sent()).retryMode || DEFAULT_RETRY_MODE];
+            }
+        }); }); }), sha256: (_k = config === null || config === void 0 ? void 0 : config.sha256) !== null && _k !== void 0 ? _k : Sha256, streamCollector: (_l = config === null || config === void 0 ? void 0 : config.streamCollector) !== null && _l !== void 0 ? _l : streamCollector, useDualstackEndpoint: (_m = config === null || config === void 0 ? void 0 : config.useDualstackEndpoint) !== null && _m !== void 0 ? _m : (function () { return Promise.resolve(DEFAULT_USE_DUALSTACK_ENDPOINT); }), useFipsEndpoint: (_o = config === null || config === void 0 ? void 0 : config.useFipsEndpoint) !== null && _o !== void 0 ? _o : (function () { return Promise.resolve(DEFAULT_USE_FIPS_ENDPOINT); }), utf8Decoder: (_p = config === null || config === void 0 ? void 0 : config.utf8Decoder) !== null && _p !== void 0 ? _p : fromUtf8, utf8Encoder: (_q = config === null || config === void 0 ? void 0 : config.utf8Encoder) !== null && _q !== void 0 ? _q : toUtf8 });
 };

package/dist-es/runtimeConfig.js

@@ -1,3 +1,4 @@
+import { __assign, __awaiter, __generator } from "tslib";
 import packageInfo from "../package.json";
 import { decorateDefaultCredentialProvider } from "@aws-sdk/client-sts";
 import { NODE_REGION_CONFIG_FILE_OPTIONS, NODE_REGION_CONFIG_OPTIONS, NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, } from "@aws-sdk/config-resolver";
@@ -14,35 +15,16 @@ import { getRuntimeConfig as getSharedRuntimeConfig } from "./runtimeConfig.shar
 import { loadConfigsForDefaultMode } from "@aws-sdk/smithy-client";
 import { resolveDefaultsModeConfig } from "@aws-sdk/util-defaults-mode-node";
 import { emitWarningIfUnsupportedVersion } from "@aws-sdk/smithy-client";
-export const getRuntimeConfig = (config) => {
+export var getRuntimeConfig = function (config) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
     emitWarningIfUnsupportedVersion(process.version);
-    const defaultsMode = resolveDefaultsModeConfig(config);
-    const defaultConfigProvider = () => defaultsMode().then(loadConfigsForDefaultMode);
-    const clientSharedValues = getSharedRuntimeConfig(config);
-    return {
-        ...clientSharedValues,
-        ...config,
-        runtime: "node",
-        defaultsMode,
-        base64Decoder: config?.base64Decoder ?? fromBase64,
-        base64Encoder: config?.base64Encoder ?? toBase64,
-        bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
-        credentialDefaultProvider: config?.credentialDefaultProvider ?? decorateDefaultCredentialProvider(credentialDefaultProvider),
-        defaultUserAgentProvider: config?.defaultUserAgentProvider ??
-            defaultUserAgent({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
-        maxAttempts: config?.maxAttempts ?? loadNodeConfig(NODE_MAX_ATTEMPT_CONFIG_OPTIONS),
-        region: config?.region ?? loadNodeConfig(NODE_REGION_CONFIG_OPTIONS, NODE_REGION_CONFIG_FILE_OPTIONS),
-        requestHandler: config?.requestHandler ?? new RequestHandler(defaultConfigProvider),
-        retryMode: config?.retryMode ??
-            loadNodeConfig({
-                ...NODE_RETRY_MODE_CONFIG_OPTIONS,
-                default: async () => (await defaultConfigProvider()).retryMode || DEFAULT_RETRY_MODE,
-            }),
-        sha256: config?.sha256 ?? Hash.bind(null, "sha256"),
-        streamCollector: config?.streamCollector ?? streamCollector,
-        useDualstackEndpoint: config?.useDualstackEndpoint ?? loadNodeConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS),
-        useFipsEndpoint: config?.useFipsEndpoint ?? loadNodeConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS),
-        utf8Decoder: config?.utf8Decoder ?? fromUtf8,
-        utf8Encoder: config?.utf8Encoder ?? toUtf8,
-    };
+    var defaultsMode = resolveDefaultsModeConfig(config);
+    var defaultConfigProvider = function () { return defaultsMode().then(loadConfigsForDefaultMode); };
+    var clientSharedValues = getSharedRuntimeConfig(config);
+    return __assign(__assign(__assign({}, clientSharedValues), config), { runtime: "node", defaultsMode: defaultsMode, base64Decoder: (_a = config === null || config === void 0 ? void 0 : config.base64Decoder) !== null && _a !== void 0 ? _a : fromBase64, base64Encoder: (_b = config === null || config === void 0 ? void 0 : config.base64Encoder) !== null && _b !== void 0 ? _b : toBase64, bodyLengthChecker: (_c = config === null || config === void 0 ? void 0 : config.bodyLengthChecker) !== null && _c !== void 0 ? _c : calculateBodyLength, credentialDefaultProvider: (_d = config === null || config === void 0 ? void 0 : config.credentialDefaultProvider) !== null && _d !== void 0 ? _d : decorateDefaultCredentialProvider(credentialDefaultProvider), defaultUserAgentProvider: (_e = config === null || config === void 0 ? void 0 : config.defaultUserAgentProvider) !== null && _e !== void 0 ? _e : defaultUserAgent({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }), maxAttempts: (_f = config === null || config === void 0 ? void 0 : config.maxAttempts) !== null && _f !== void 0 ? _f : loadNodeConfig(NODE_MAX_ATTEMPT_CONFIG_OPTIONS), region: (_g = config === null || config === void 0 ? void 0 : config.region) !== null && _g !== void 0 ? _g : loadNodeConfig(NODE_REGION_CONFIG_OPTIONS, NODE_REGION_CONFIG_FILE_OPTIONS), requestHandler: (_h = config === null || config === void 0 ? void 0 : config.requestHandler) !== null && _h !== void 0 ? _h : new RequestHandler(defaultConfigProvider), retryMode: (_j = config === null || config === void 0 ? void 0 : config.retryMode) !== null && _j !== void 0 ? _j : loadNodeConfig(__assign(__assign({}, NODE_RETRY_MODE_CONFIG_OPTIONS), { default: function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4, defaultConfigProvider()];
+                    case 1: return [2, (_a.sent()).retryMode || DEFAULT_RETRY_MODE];
+                }
+            }); }); } })), sha256: (_k = config === null || config === void 0 ? void 0 : config.sha256) !== null && _k !== void 0 ? _k : Hash.bind(null, "sha256"), streamCollector: (_l = config === null || config === void 0 ? void 0 : config.streamCollector) !== null && _l !== void 0 ? _l : streamCollector, useDualstackEndpoint: (_m = config === null || config === void 0 ? void 0 : config.useDualstackEndpoint) !== null && _m !== void 0 ? _m : loadNodeConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS), useFipsEndpoint: (_o = config === null || config === void 0 ? void 0 : config.useFipsEndpoint) !== null && _o !== void 0 ? _o : loadNodeConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS), utf8Decoder: (_p = config === null || config === void 0 ? void 0 : config.utf8Decoder) !== null && _p !== void 0 ? _p : fromUtf8, utf8Encoder: (_q = config === null || config === void 0 ? void 0 : config.utf8Encoder) !== null && _q !== void 0 ? _q : toUtf8 });
 };

package/dist-es/runtimeConfig.native.js

@@ -1,11 +1,8 @@
+import { __assign } from "tslib";
 import { Sha256 } from "@aws-crypto/sha256-js";
 import { getRuntimeConfig as getBrowserRuntimeConfig } from "./runtimeConfig.browser";
-export const getRuntimeConfig = (config) => {
-    const browserDefaults = getBrowserRuntimeConfig(config);
-    return {
-        ...browserDefaults,
-        ...config,
-        runtime: "react-native",
-        sha256: config?.sha256 ?? Sha256,
-    };
+export var getRuntimeConfig = function (config) {
+    var _a;
+    var browserDefaults = getBrowserRuntimeConfig(config);
+    return __assign(__assign(__assign({}, browserDefaults), config), { runtime: "react-native", sha256: (_a = config === null || config === void 0 ? void 0 : config.sha256) !== null && _a !== void 0 ? _a : Sha256 });
 };

package/dist-es/runtimeConfig.shared.js

@@ -1,10 +1,13 @@
 import { parseUrl } from "@aws-sdk/url-parser";
 import { defaultRegionInfoProvider } from "./endpoints";
-export const getRuntimeConfig = (config) => ({
-    apiVersion: "2020-11-12",
-    disableHostPrefix: config?.disableHostPrefix ?? false,
-    logger: config?.logger ?? {},
-    regionInfoProvider: config?.regionInfoProvider ?? defaultRegionInfoProvider,
-    serviceId: config?.serviceId ?? "Network Firewall",
-    urlParser: config?.urlParser ?? parseUrl,
-});
+export var getRuntimeConfig = function (config) {
+    var _a, _b, _c, _d, _e;
+    return ({
+        apiVersion: "2020-11-12",
+        disableHostPrefix: (_a = config === null || config === void 0 ? void 0 : config.disableHostPrefix) !== null && _a !== void 0 ? _a : false,
+        logger: (_b = config === null || config === void 0 ? void 0 : config.logger) !== null && _b !== void 0 ? _b : {},
+        regionInfoProvider: (_c = config === null || config === void 0 ? void 0 : config.regionInfoProvider) !== null && _c !== void 0 ? _c : defaultRegionInfoProvider,
+        serviceId: (_d = config === null || config === void 0 ? void 0 : config.serviceId) !== null && _d !== void 0 ? _d : "Network Firewall",
+        urlParser: (_e = config === null || config === void 0 ? void 0 : config.urlParser) !== null && _e !== void 0 ? _e : parseUrl,
+    });
+};

package/dist-types/NetworkFirewall.d.ts

@@ -58,9 +58,9 @@ import { NetworkFirewallClient } from "./NetworkFirewallClient";
  *          prevention service for Amazon Virtual Private Cloud (Amazon VPC). With Network Firewall, you can filter traffic at the
  *          perimeter of your VPC. This includes filtering traffic going to and coming from an internet
  *          gateway, NAT gateway, or over VPN or Direct Connect. Network Firewall uses rules that are compatible
- *       with Suricata, a free, open source intrusion detection system (IDS) engine.
+ *       with Suricata, a free, open source network analysis and threat detection engine.
  *       Network Firewall supports Suricata version 5.0.2. For information about Suricata,
- *           see the <a href="https://suricata-ids.org/">Suricata website</a>.</p>
+ *           see the <a href="https://suricata.io/">Suricata website</a>.</p>
  *          <p>You can use Network Firewall to monitor and protect your VPC traffic in a number of ways.
  *          The following are just a few examples: </p>
  *          <ul>

package/dist-types/NetworkFirewallClient.d.ts

@@ -183,9 +183,9 @@ export interface NetworkFirewallClientResolvedConfig extends NetworkFirewallClie
  *          prevention service for Amazon Virtual Private Cloud (Amazon VPC). With Network Firewall, you can filter traffic at the
  *          perimeter of your VPC. This includes filtering traffic going to and coming from an internet
  *          gateway, NAT gateway, or over VPN or Direct Connect. Network Firewall uses rules that are compatible
- *       with Suricata, a free, open source intrusion detection system (IDS) engine.
+ *       with Suricata, a free, open source network analysis and threat detection engine.
  *       Network Firewall supports Suricata version 5.0.2. For information about Suricata,
- *           see the <a href="https://suricata-ids.org/">Suricata website</a>.</p>
+ *           see the <a href="https://suricata.io/">Suricata website</a>.</p>
  *          <p>You can use Network Firewall to monitor and protect your VPC traffic in a number of ways.
  *          The following are just a few examples: </p>
  *          <ul>

package/dist-types/models/models_0.d.ts

@@ -607,6 +607,10 @@ export declare enum RuleOrder {
     DEFAULT_ACTION_ORDER = "DEFAULT_ACTION_ORDER",
     STRICT_ORDER = "STRICT_ORDER"
 }
+export declare enum StreamExceptionPolicy {
+    CONTINUE = "CONTINUE",
+    DROP = "DROP"
+}
 /**
  * <p>Configuration settings for the handling of the stateful rule groups in a firewall policy. </p>
  */
@@ -619,6 +623,20 @@ export interface StatefulEngineOptions {
      *       </p>
      */
     RuleOrder?: RuleOrder | string;
+    /**
+     * <p>Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>DROP</code> - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>CONTINUE</code> - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to <code>drop http</code> traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a <code>flow:stateless</code> rule would still match, as would the <code>aws:drop_strict</code> default action.</p>
+     *             </li>
+     *          </ul>
+     */
+    StreamExceptionPolicy?: StreamExceptionPolicy | string;
 }
 export declare enum OverrideAction {
     DROP_TO_ALERT = "DROP_TO_ALERT"
@@ -1058,7 +1076,7 @@ export interface RuleOption {
  * <p>A single Suricata rules specification, for use in a stateful rule group.
  *        Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options.
  *        For information about the Suricata <code>Rules</code> format, see
- *                                         <a href="https://suricata.readthedocs.io/en/suricata-5.0.0/rules/intro.html#">Rules Format</a>. </p>
+ *                                         <a href="https://suricata.readthedocs.io/rules/intro.html#">Rules Format</a>. </p>
  */
 export interface StatefulRule {
     /**
@@ -1305,7 +1323,7 @@ export interface RulesSource {
      * <p>An array of individual stateful rules inspection criteria to be used together in a stateful rule group.
      *        Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options.
      *        For information about the Suricata <code>Rules</code> format, see
-     *                                         <a href="https://suricata.readthedocs.io/en/suricata-5.0.0/rules/intro.html#">Rules Format</a>. </p>
+     *                                         <a href="https://suricata.readthedocs.io/rules/intro.html#">Rules Format</a>. </p>
      */
     StatefulRules?: StatefulRule[];
     /**

package/dist-types/ts3.4/models/models_0.d.ts

@@ -200,8 +200,13 @@ export declare enum RuleOrder {
   DEFAULT_ACTION_ORDER = "DEFAULT_ACTION_ORDER",
   STRICT_ORDER = "STRICT_ORDER",
 }
+export declare enum StreamExceptionPolicy {
+  CONTINUE = "CONTINUE",
+  DROP = "DROP",
+}
 export interface StatefulEngineOptions {
   RuleOrder?: RuleOrder | string;
+  StreamExceptionPolicy?: StreamExceptionPolicy | string;
 }
 export declare enum OverrideAction {
   DROP_TO_ALERT = "DROP_TO_ALERT",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-network-firewall",
   "description": "AWS SDK for JavaScript Network Firewall Client for Node.js, Browser and React Native",
-  "version": "3.183.0",
+  "version": "3.185.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -19,9 +19,9 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "2.0.0",
     "@aws-crypto/sha256-js": "2.0.0",
-    "@aws-sdk/client-sts": "3.183.0",
+    "@aws-sdk/client-sts": "3.185.0",
     "@aws-sdk/config-resolver": "3.183.0",
-    "@aws-sdk/credential-provider-node": "3.183.0",
+    "@aws-sdk/credential-provider-node": "3.185.0",
     "@aws-sdk/fetch-http-handler": "3.183.0",
     "@aws-sdk/hash-node": "3.183.0",
     "@aws-sdk/invalid-dependency": "3.183.0",
@@ -29,13 +29,13 @@
     "@aws-sdk/middleware-host-header": "3.183.0",
     "@aws-sdk/middleware-logger": "3.183.0",
     "@aws-sdk/middleware-recursion-detection": "3.183.0",
-    "@aws-sdk/middleware-retry": "3.183.0",
+    "@aws-sdk/middleware-retry": "3.185.0",
     "@aws-sdk/middleware-serde": "3.183.0",
     "@aws-sdk/middleware-signing": "3.183.0",
     "@aws-sdk/middleware-stack": "3.183.0",
     "@aws-sdk/middleware-user-agent": "3.183.0",
     "@aws-sdk/node-config-provider": "3.183.0",
-    "@aws-sdk/node-http-handler": "3.183.0",
+    "@aws-sdk/node-http-handler": "3.185.0",
     "@aws-sdk/protocol-http": "3.183.0",
     "@aws-sdk/smithy-client": "3.183.0",
     "@aws-sdk/types": "3.183.0",