@aws-sdk/client-network-firewall 3.321.1 → 3.326.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/models/models_0.js +2 -0
- package/dist-es/models/models_0.js +2 -0
- package/dist-types/commands/AssociateFirewallPolicyCommand.d.ts +9 -0
- package/dist-types/commands/AssociateSubnetsCommand.d.ts +14 -0
- package/dist-types/commands/CreateFirewallCommand.d.ts +63 -0
- package/dist-types/commands/CreateFirewallPolicyCommand.d.ts +36 -0
- package/dist-types/commands/CreateRuleGroupCommand.d.ts +33 -0
- package/dist-types/commands/CreateTLSInspectionConfigurationCommand.d.ts +33 -0
- package/dist-types/commands/DeleteFirewallCommand.d.ts +63 -0
- package/dist-types/commands/DeleteFirewallPolicyCommand.d.ts +26 -0
- package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +4 -0
- package/dist-types/commands/DeleteRuleGroupCommand.d.ts +32 -0
- package/dist-types/commands/DeleteTLSInspectionConfigurationCommand.d.ts +32 -0
- package/dist-types/commands/DescribeFirewallCommand.d.ts +64 -0
- package/dist-types/commands/DescribeFirewallPolicyCommand.d.ts +81 -0
- package/dist-types/commands/DescribeLoggingConfigurationCommand.d.ts +17 -0
- package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +6 -0
- package/dist-types/commands/DescribeRuleGroupCommand.d.ts +157 -0
- package/dist-types/commands/DescribeRuleGroupMetadataCommand.d.ts +14 -0
- package/dist-types/commands/DescribeTLSInspectionConfigurationCommand.d.ts +73 -0
- package/dist-types/commands/DisassociateSubnetsCommand.d.ts +14 -0
- package/dist-types/commands/ListFirewallPoliciesCommand.d.ts +12 -0
- package/dist-types/commands/ListFirewallsCommand.d.ts +12 -0
- package/dist-types/commands/ListRuleGroupsCommand.d.ts +12 -0
- package/dist-types/commands/ListTLSInspectionConfigurationsCommand.d.ts +12 -0
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +12 -0
- package/dist-types/commands/PutResourcePolicyCommand.d.ts +4 -0
- package/dist-types/commands/TagResourceCommand.d.ts +4 -0
- package/dist-types/commands/UntagResourceCommand.d.ts +4 -0
- package/dist-types/commands/UpdateFirewallDeleteProtectionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateFirewallDescriptionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +12 -0
- package/dist-types/commands/UpdateFirewallPolicyChangeProtectionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateFirewallPolicyCommand.d.ts +36 -0
- package/dist-types/commands/UpdateLoggingConfigurationCommand.d.ts +18 -0
- package/dist-types/commands/UpdateRuleGroupCommand.d.ts +33 -0
- package/dist-types/commands/UpdateSubnetChangeProtectionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateTLSInspectionConfigurationCommand.d.ts +33 -0
- package/dist-types/models/models_0.d.ts +31 -28
- package/dist-types/ts3.4/models/models_0.d.ts +9 -3
- package/package.json +16 -16
|
@@ -37,6 +37,13 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
|
|
|
37
37
|
* };
|
|
38
38
|
* const command = new UpdateFirewallDeleteProtectionCommand(input);
|
|
39
39
|
* const response = await client.send(command);
|
|
40
|
+
* // { // UpdateFirewallDeleteProtectionResponse
|
|
41
|
+
* // FirewallArn: "STRING_VALUE",
|
|
42
|
+
* // FirewallName: "STRING_VALUE",
|
|
43
|
+
* // DeleteProtection: true || false,
|
|
44
|
+
* // UpdateToken: "STRING_VALUE",
|
|
45
|
+
* // };
|
|
46
|
+
*
|
|
40
47
|
* ```
|
|
41
48
|
*
|
|
42
49
|
* @param UpdateFirewallDeleteProtectionCommandInput - {@link UpdateFirewallDeleteProtectionCommandInput}
|
|
@@ -77,6 +84,8 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
|
|
|
77
84
|
* @throws {@link ThrottlingException} (client fault)
|
|
78
85
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
79
86
|
*
|
|
87
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
88
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
80
89
|
*
|
|
81
90
|
*/
|
|
82
91
|
export declare class UpdateFirewallDeleteProtectionCommand extends $Command<UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -35,6 +35,13 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
|
|
|
35
35
|
* };
|
|
36
36
|
* const command = new UpdateFirewallDescriptionCommand(input);
|
|
37
37
|
* const response = await client.send(command);
|
|
38
|
+
* // { // UpdateFirewallDescriptionResponse
|
|
39
|
+
* // FirewallArn: "STRING_VALUE",
|
|
40
|
+
* // FirewallName: "STRING_VALUE",
|
|
41
|
+
* // Description: "STRING_VALUE",
|
|
42
|
+
* // UpdateToken: "STRING_VALUE",
|
|
43
|
+
* // };
|
|
44
|
+
*
|
|
38
45
|
* ```
|
|
39
46
|
*
|
|
40
47
|
* @param UpdateFirewallDescriptionCommandInput - {@link UpdateFirewallDescriptionCommandInput}
|
|
@@ -72,6 +79,8 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
|
|
|
72
79
|
* @throws {@link ThrottlingException} (client fault)
|
|
73
80
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
74
81
|
*
|
|
82
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
83
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
75
84
|
*
|
|
76
85
|
*/
|
|
77
86
|
export declare class UpdateFirewallDescriptionCommand extends $Command<UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -37,6 +37,16 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
|
|
|
37
37
|
* };
|
|
38
38
|
* const command = new UpdateFirewallEncryptionConfigurationCommand(input);
|
|
39
39
|
* const response = await client.send(command);
|
|
40
|
+
* // { // UpdateFirewallEncryptionConfigurationResponse
|
|
41
|
+
* // FirewallArn: "STRING_VALUE",
|
|
42
|
+
* // FirewallName: "STRING_VALUE",
|
|
43
|
+
* // UpdateToken: "STRING_VALUE",
|
|
44
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
45
|
+
* // KeyId: "STRING_VALUE",
|
|
46
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
47
|
+
* // },
|
|
48
|
+
* // };
|
|
49
|
+
*
|
|
40
50
|
* ```
|
|
41
51
|
*
|
|
42
52
|
* @param UpdateFirewallEncryptionConfigurationCommandInput - {@link UpdateFirewallEncryptionConfigurationCommandInput}
|
|
@@ -77,6 +87,8 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
|
|
|
77
87
|
* @throws {@link ThrottlingException} (client fault)
|
|
78
88
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
79
89
|
*
|
|
90
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
91
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
80
92
|
*
|
|
81
93
|
*/
|
|
82
94
|
export declare class UpdateFirewallEncryptionConfigurationCommand extends $Command<UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -36,6 +36,13 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
|
|
|
36
36
|
* };
|
|
37
37
|
* const command = new UpdateFirewallPolicyChangeProtectionCommand(input);
|
|
38
38
|
* const response = await client.send(command);
|
|
39
|
+
* // { // UpdateFirewallPolicyChangeProtectionResponse
|
|
40
|
+
* // UpdateToken: "STRING_VALUE",
|
|
41
|
+
* // FirewallArn: "STRING_VALUE",
|
|
42
|
+
* // FirewallName: "STRING_VALUE",
|
|
43
|
+
* // FirewallPolicyChangeProtection: true || false,
|
|
44
|
+
* // };
|
|
45
|
+
*
|
|
39
46
|
* ```
|
|
40
47
|
*
|
|
41
48
|
* @param UpdateFirewallPolicyChangeProtectionCommandInput - {@link UpdateFirewallPolicyChangeProtectionCommandInput}
|
|
@@ -76,6 +83,8 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
|
|
|
76
83
|
* @throws {@link ThrottlingException} (client fault)
|
|
77
84
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
78
85
|
*
|
|
86
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
87
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
79
88
|
*
|
|
80
89
|
*/
|
|
81
90
|
export declare class UpdateFirewallPolicyChangeProtectionCommand extends $Command<UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -74,6 +74,15 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
|
|
|
74
74
|
* StreamExceptionPolicy: "DROP" || "CONTINUE",
|
|
75
75
|
* },
|
|
76
76
|
* TLSInspectionConfigurationArn: "STRING_VALUE",
|
|
77
|
+
* PolicyVariables: { // PolicyVariables
|
|
78
|
+
* RuleVariables: { // IPSets
|
|
79
|
+
* "<keys>": { // IPSet
|
|
80
|
+
* Definition: [ // VariableDefinitionList // required
|
|
81
|
+
* "STRING_VALUE",
|
|
82
|
+
* ],
|
|
83
|
+
* },
|
|
84
|
+
* },
|
|
85
|
+
* },
|
|
77
86
|
* },
|
|
78
87
|
* Description: "STRING_VALUE",
|
|
79
88
|
* DryRun: true || false,
|
|
@@ -84,6 +93,31 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
|
|
|
84
93
|
* };
|
|
85
94
|
* const command = new UpdateFirewallPolicyCommand(input);
|
|
86
95
|
* const response = await client.send(command);
|
|
96
|
+
* // { // UpdateFirewallPolicyResponse
|
|
97
|
+
* // UpdateToken: "STRING_VALUE", // required
|
|
98
|
+
* // FirewallPolicyResponse: { // FirewallPolicyResponse
|
|
99
|
+
* // FirewallPolicyName: "STRING_VALUE", // required
|
|
100
|
+
* // FirewallPolicyArn: "STRING_VALUE", // required
|
|
101
|
+
* // FirewallPolicyId: "STRING_VALUE", // required
|
|
102
|
+
* // Description: "STRING_VALUE",
|
|
103
|
+
* // FirewallPolicyStatus: "ACTIVE" || "DELETING",
|
|
104
|
+
* // Tags: [ // TagList
|
|
105
|
+
* // { // Tag
|
|
106
|
+
* // Key: "STRING_VALUE", // required
|
|
107
|
+
* // Value: "STRING_VALUE", // required
|
|
108
|
+
* // },
|
|
109
|
+
* // ],
|
|
110
|
+
* // ConsumedStatelessRuleCapacity: Number("int"),
|
|
111
|
+
* // ConsumedStatefulRuleCapacity: Number("int"),
|
|
112
|
+
* // NumberOfAssociations: Number("int"),
|
|
113
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
114
|
+
* // KeyId: "STRING_VALUE",
|
|
115
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
116
|
+
* // },
|
|
117
|
+
* // LastModifiedTime: new Date("TIMESTAMP"),
|
|
118
|
+
* // },
|
|
119
|
+
* // };
|
|
120
|
+
*
|
|
87
121
|
* ```
|
|
88
122
|
*
|
|
89
123
|
* @param UpdateFirewallPolicyCommandInput - {@link UpdateFirewallPolicyCommandInput}
|
|
@@ -121,6 +155,8 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
|
|
|
121
155
|
* @throws {@link ThrottlingException} (client fault)
|
|
122
156
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
123
157
|
*
|
|
158
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
159
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
124
160
|
*
|
|
125
161
|
*/
|
|
126
162
|
export declare class UpdateFirewallPolicyCommand extends $Command<UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -68,6 +68,22 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
|
|
|
68
68
|
* };
|
|
69
69
|
* const command = new UpdateLoggingConfigurationCommand(input);
|
|
70
70
|
* const response = await client.send(command);
|
|
71
|
+
* // { // UpdateLoggingConfigurationResponse
|
|
72
|
+
* // FirewallArn: "STRING_VALUE",
|
|
73
|
+
* // FirewallName: "STRING_VALUE",
|
|
74
|
+
* // LoggingConfiguration: { // LoggingConfiguration
|
|
75
|
+
* // LogDestinationConfigs: [ // LogDestinationConfigs // required
|
|
76
|
+
* // { // LogDestinationConfig
|
|
77
|
+
* // LogType: "ALERT" || "FLOW", // required
|
|
78
|
+
* // LogDestinationType: "S3" || "CloudWatchLogs" || "KinesisDataFirehose", // required
|
|
79
|
+
* // LogDestination: { // LogDestinationMap // required
|
|
80
|
+
* // "<keys>": "STRING_VALUE",
|
|
81
|
+
* // },
|
|
82
|
+
* // },
|
|
83
|
+
* // ],
|
|
84
|
+
* // },
|
|
85
|
+
* // };
|
|
86
|
+
*
|
|
71
87
|
* ```
|
|
72
88
|
*
|
|
73
89
|
* @param UpdateLoggingConfigurationCommandInput - {@link UpdateLoggingConfigurationCommandInput}
|
|
@@ -108,6 +124,8 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
|
|
|
108
124
|
* @throws {@link ThrottlingException} (client fault)
|
|
109
125
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
110
126
|
*
|
|
127
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
128
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
111
129
|
*
|
|
112
130
|
*/
|
|
113
131
|
export declare class UpdateLoggingConfigurationCommand extends $Command<UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -174,6 +174,37 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
|
|
|
174
174
|
* };
|
|
175
175
|
* const command = new UpdateRuleGroupCommand(input);
|
|
176
176
|
* const response = await client.send(command);
|
|
177
|
+
* // { // UpdateRuleGroupResponse
|
|
178
|
+
* // UpdateToken: "STRING_VALUE", // required
|
|
179
|
+
* // RuleGroupResponse: { // RuleGroupResponse
|
|
180
|
+
* // RuleGroupArn: "STRING_VALUE", // required
|
|
181
|
+
* // RuleGroupName: "STRING_VALUE", // required
|
|
182
|
+
* // RuleGroupId: "STRING_VALUE", // required
|
|
183
|
+
* // Description: "STRING_VALUE",
|
|
184
|
+
* // Type: "STATELESS" || "STATEFUL",
|
|
185
|
+
* // Capacity: Number("int"),
|
|
186
|
+
* // RuleGroupStatus: "ACTIVE" || "DELETING",
|
|
187
|
+
* // Tags: [ // TagList
|
|
188
|
+
* // { // Tag
|
|
189
|
+
* // Key: "STRING_VALUE", // required
|
|
190
|
+
* // Value: "STRING_VALUE", // required
|
|
191
|
+
* // },
|
|
192
|
+
* // ],
|
|
193
|
+
* // ConsumedCapacity: Number("int"),
|
|
194
|
+
* // NumberOfAssociations: Number("int"),
|
|
195
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
196
|
+
* // KeyId: "STRING_VALUE",
|
|
197
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
198
|
+
* // },
|
|
199
|
+
* // SourceMetadata: { // SourceMetadata
|
|
200
|
+
* // SourceArn: "STRING_VALUE",
|
|
201
|
+
* // SourceUpdateToken: "STRING_VALUE",
|
|
202
|
+
* // },
|
|
203
|
+
* // SnsTopic: "STRING_VALUE",
|
|
204
|
+
* // LastModifiedTime: new Date("TIMESTAMP"),
|
|
205
|
+
* // },
|
|
206
|
+
* // };
|
|
207
|
+
*
|
|
177
208
|
* ```
|
|
178
209
|
*
|
|
179
210
|
* @param UpdateRuleGroupCommandInput - {@link UpdateRuleGroupCommandInput}
|
|
@@ -211,6 +242,8 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
|
|
|
211
242
|
* @throws {@link ThrottlingException} (client fault)
|
|
212
243
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
213
244
|
*
|
|
245
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
246
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
214
247
|
*
|
|
215
248
|
*/
|
|
216
249
|
export declare class UpdateRuleGroupCommand extends $Command<UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -34,6 +34,13 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
|
|
|
34
34
|
* };
|
|
35
35
|
* const command = new UpdateSubnetChangeProtectionCommand(input);
|
|
36
36
|
* const response = await client.send(command);
|
|
37
|
+
* // { // UpdateSubnetChangeProtectionResponse
|
|
38
|
+
* // UpdateToken: "STRING_VALUE",
|
|
39
|
+
* // FirewallArn: "STRING_VALUE",
|
|
40
|
+
* // FirewallName: "STRING_VALUE",
|
|
41
|
+
* // SubnetChangeProtection: true || false,
|
|
42
|
+
* // };
|
|
43
|
+
*
|
|
37
44
|
* ```
|
|
38
45
|
*
|
|
39
46
|
* @param UpdateSubnetChangeProtectionCommandInput - {@link UpdateSubnetChangeProtectionCommandInput}
|
|
@@ -74,6 +81,8 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
|
|
|
74
81
|
* @throws {@link ThrottlingException} (client fault)
|
|
75
82
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
76
83
|
*
|
|
84
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
85
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
77
86
|
*
|
|
78
87
|
*/
|
|
79
88
|
export declare class UpdateSubnetChangeProtectionCommand extends $Command<UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -83,6 +83,37 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
|
|
|
83
83
|
* };
|
|
84
84
|
* const command = new UpdateTLSInspectionConfigurationCommand(input);
|
|
85
85
|
* const response = await client.send(command);
|
|
86
|
+
* // { // UpdateTLSInspectionConfigurationResponse
|
|
87
|
+
* // UpdateToken: "STRING_VALUE", // required
|
|
88
|
+
* // TLSInspectionConfigurationResponse: { // TLSInspectionConfigurationResponse
|
|
89
|
+
* // TLSInspectionConfigurationArn: "STRING_VALUE", // required
|
|
90
|
+
* // TLSInspectionConfigurationName: "STRING_VALUE", // required
|
|
91
|
+
* // TLSInspectionConfigurationId: "STRING_VALUE", // required
|
|
92
|
+
* // TLSInspectionConfigurationStatus: "ACTIVE" || "DELETING",
|
|
93
|
+
* // Description: "STRING_VALUE",
|
|
94
|
+
* // Tags: [ // TagList
|
|
95
|
+
* // { // Tag
|
|
96
|
+
* // Key: "STRING_VALUE", // required
|
|
97
|
+
* // Value: "STRING_VALUE", // required
|
|
98
|
+
* // },
|
|
99
|
+
* // ],
|
|
100
|
+
* // LastModifiedTime: new Date("TIMESTAMP"),
|
|
101
|
+
* // NumberOfAssociations: Number("int"),
|
|
102
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
103
|
+
* // KeyId: "STRING_VALUE",
|
|
104
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
105
|
+
* // },
|
|
106
|
+
* // Certificates: [ // Certificates
|
|
107
|
+
* // { // TlsCertificateData
|
|
108
|
+
* // CertificateArn: "STRING_VALUE",
|
|
109
|
+
* // CertificateSerial: "STRING_VALUE",
|
|
110
|
+
* // Status: "STRING_VALUE",
|
|
111
|
+
* // StatusMessage: "STRING_VALUE",
|
|
112
|
+
* // },
|
|
113
|
+
* // ],
|
|
114
|
+
* // },
|
|
115
|
+
* // };
|
|
116
|
+
*
|
|
86
117
|
* ```
|
|
87
118
|
*
|
|
88
119
|
* @param UpdateTLSInspectionConfigurationCommandInput - {@link UpdateTLSInspectionConfigurationCommandInput}
|
|
@@ -120,6 +151,8 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
|
|
|
120
151
|
* @throws {@link ThrottlingException} (client fault)
|
|
121
152
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
122
153
|
*
|
|
154
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
155
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
123
156
|
*
|
|
124
157
|
*/
|
|
125
158
|
export declare class UpdateTLSInspectionConfigurationCommand extends $Command<UpdateTLSInspectionConfigurationCommandInput, UpdateTLSInspectionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -311,6 +311,8 @@ export declare class InsufficientCapacityException extends __BaseException {
|
|
|
311
311
|
export declare const AttachmentStatus: {
|
|
312
312
|
readonly CREATING: "CREATING";
|
|
313
313
|
readonly DELETING: "DELETING";
|
|
314
|
+
readonly ERROR: "ERROR";
|
|
315
|
+
readonly FAILED: "FAILED";
|
|
314
316
|
readonly READY: "READY";
|
|
315
317
|
readonly SCALING: "SCALING";
|
|
316
318
|
};
|
|
@@ -345,7 +347,7 @@ export interface Attachment {
|
|
|
345
347
|
*/
|
|
346
348
|
Status?: AttachmentStatus | string;
|
|
347
349
|
/**
|
|
348
|
-
* <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the failure and how to resolve it. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
|
|
350
|
+
* <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the error or failure and how to resolve it. A <code>FAILED</code> status indicates a non-recoverable state, and a <code>ERROR</code> status indicates an issue that you can fix. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the causes for failiure or errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
|
|
349
351
|
*/
|
|
350
352
|
StatusMessage?: string;
|
|
351
353
|
}
|
|
@@ -733,6 +735,28 @@ export declare class LimitExceededException extends __BaseException {
|
|
|
733
735
|
*/
|
|
734
736
|
constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
|
|
735
737
|
}
|
|
738
|
+
/**
|
|
739
|
+
* @public
|
|
740
|
+
* <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
|
|
741
|
+
*/
|
|
742
|
+
export interface IPSet {
|
|
743
|
+
/**
|
|
744
|
+
* <p>The list of IP addresses and address ranges, in CIDR notation.
|
|
745
|
+
*
|
|
746
|
+
* </p>
|
|
747
|
+
*/
|
|
748
|
+
Definition: string[] | undefined;
|
|
749
|
+
}
|
|
750
|
+
/**
|
|
751
|
+
* @public
|
|
752
|
+
* <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
|
|
753
|
+
*/
|
|
754
|
+
export interface PolicyVariables {
|
|
755
|
+
/**
|
|
756
|
+
* <p>The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata <code>HOME_NET</code> variable. If your firewall uses an inspection VPC, you might want to override the <code>HOME_NET</code> variable with the CIDRs of your home networks. If you don't override <code>HOME_NET</code> with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.</p>
|
|
757
|
+
*/
|
|
758
|
+
RuleVariables?: Record<string, IPSet>;
|
|
759
|
+
}
|
|
736
760
|
/**
|
|
737
761
|
* @public
|
|
738
762
|
* @enum
|
|
@@ -968,6 +992,10 @@ export interface FirewallPolicy {
|
|
|
968
992
|
* <p>The Amazon Resource Name (ARN) of the TLS inspection configuration.</p>
|
|
969
993
|
*/
|
|
970
994
|
TLSInspectionConfigurationArn?: string;
|
|
995
|
+
/**
|
|
996
|
+
* <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
|
|
997
|
+
*/
|
|
998
|
+
PolicyVariables?: PolicyVariables;
|
|
971
999
|
}
|
|
972
1000
|
/**
|
|
973
1001
|
* @public
|
|
@@ -1314,7 +1342,7 @@ export interface RuleOption {
|
|
|
1314
1342
|
* <p>A single Suricata rules specification, for use in a stateful rule group.
|
|
1315
1343
|
* Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options.
|
|
1316
1344
|
* For information about the Suricata <code>Rules</code> format, see
|
|
1317
|
-
* <a href="https://suricata.readthedocs.
|
|
1345
|
+
* <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html">Rules Format</a>. </p>
|
|
1318
1346
|
*/
|
|
1319
1347
|
export interface StatefulRule {
|
|
1320
1348
|
/**
|
|
@@ -1343,13 +1371,6 @@ export interface StatefulRule {
|
|
|
1343
1371
|
* can enable the rule with <code>ALERT</code> action, verify in the logs that the rule
|
|
1344
1372
|
* is filtering as you want, then change the action to <code>DROP</code>.</p>
|
|
1345
1373
|
* </li>
|
|
1346
|
-
* <li>
|
|
1347
|
-
* <p>
|
|
1348
|
-
* <b>REJECT</b> - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a <code>RST</code> bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the <a>Firewall</a>
|
|
1349
|
-
* <a>LoggingConfiguration</a>.</p>
|
|
1350
|
-
* <p>
|
|
1351
|
-
* <code>REJECT</code> isn't currently available for use with IMAP and FTP protocols.</p>
|
|
1352
|
-
* </li>
|
|
1353
1374
|
* </ul>
|
|
1354
1375
|
*/
|
|
1355
1376
|
Action: StatefulAction | string | undefined;
|
|
@@ -1583,7 +1604,7 @@ export interface RulesSource {
|
|
|
1583
1604
|
* <p>An array of individual stateful rules inspection criteria to be used together in a stateful rule group.
|
|
1584
1605
|
* Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options.
|
|
1585
1606
|
* For information about the Suricata <code>Rules</code> format, see
|
|
1586
|
-
* <a href="https://suricata.readthedocs.
|
|
1607
|
+
* <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html">Rules Format</a>. </p>
|
|
1587
1608
|
*/
|
|
1588
1609
|
StatefulRules?: StatefulRule[];
|
|
1589
1610
|
/**
|
|
@@ -1591,18 +1612,6 @@ export interface RulesSource {
|
|
|
1591
1612
|
*/
|
|
1592
1613
|
StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
|
|
1593
1614
|
}
|
|
1594
|
-
/**
|
|
1595
|
-
* @public
|
|
1596
|
-
* <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
|
|
1597
|
-
*/
|
|
1598
|
-
export interface IPSet {
|
|
1599
|
-
/**
|
|
1600
|
-
* <p>The list of IP addresses and address ranges, in CIDR notation.
|
|
1601
|
-
*
|
|
1602
|
-
* </p>
|
|
1603
|
-
*/
|
|
1604
|
-
Definition: string[] | undefined;
|
|
1605
|
-
}
|
|
1606
1615
|
/**
|
|
1607
1616
|
* @public
|
|
1608
1617
|
* <p>A set of port ranges for use in the rules in a rule group. </p>
|
|
@@ -2911,12 +2920,6 @@ export interface PutResourcePolicyRequest {
|
|
|
2911
2920
|
* <p>For a firewall policy resource, you can specify the following operations in the Actions section of the statement:</p>
|
|
2912
2921
|
* <ul>
|
|
2913
2922
|
* <li>
|
|
2914
|
-
* <p>network-firewall:CreateFirewall</p>
|
|
2915
|
-
* </li>
|
|
2916
|
-
* <li>
|
|
2917
|
-
* <p>network-firewall:UpdateFirewall</p>
|
|
2918
|
-
* </li>
|
|
2919
|
-
* <li>
|
|
2920
2923
|
* <p>network-firewall:AssociateFirewallPolicy</p>
|
|
2921
2924
|
* </li>
|
|
2922
2925
|
* <li>
|
|
@@ -105,6 +105,8 @@ export declare class InsufficientCapacityException extends __BaseException {
|
|
|
105
105
|
export declare const AttachmentStatus: {
|
|
106
106
|
readonly CREATING: "CREATING";
|
|
107
107
|
readonly DELETING: "DELETING";
|
|
108
|
+
readonly ERROR: "ERROR";
|
|
109
|
+
readonly FAILED: "FAILED";
|
|
108
110
|
readonly READY: "READY";
|
|
109
111
|
readonly SCALING: "SCALING";
|
|
110
112
|
};
|
|
@@ -220,6 +222,12 @@ export declare class LimitExceededException extends __BaseException {
|
|
|
220
222
|
opts: __ExceptionOptionType<LimitExceededException, __BaseException>
|
|
221
223
|
);
|
|
222
224
|
}
|
|
225
|
+
export interface IPSet {
|
|
226
|
+
Definition: string[] | undefined;
|
|
227
|
+
}
|
|
228
|
+
export interface PolicyVariables {
|
|
229
|
+
RuleVariables?: Record<string, IPSet>;
|
|
230
|
+
}
|
|
223
231
|
export declare const RuleOrder: {
|
|
224
232
|
readonly DEFAULT_ACTION_ORDER: "DEFAULT_ACTION_ORDER";
|
|
225
233
|
readonly STRICT_ORDER: "STRICT_ORDER";
|
|
@@ -265,6 +273,7 @@ export interface FirewallPolicy {
|
|
|
265
273
|
StatefulDefaultActions?: string[];
|
|
266
274
|
StatefulEngineOptions?: StatefulEngineOptions;
|
|
267
275
|
TLSInspectionConfigurationArn?: string;
|
|
276
|
+
PolicyVariables?: PolicyVariables;
|
|
268
277
|
}
|
|
269
278
|
export interface CreateFirewallPolicyRequest {
|
|
270
279
|
FirewallPolicyName: string | undefined;
|
|
@@ -418,9 +427,6 @@ export interface RulesSource {
|
|
|
418
427
|
StatefulRules?: StatefulRule[];
|
|
419
428
|
StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
|
|
420
429
|
}
|
|
421
|
-
export interface IPSet {
|
|
422
|
-
Definition: string[] | undefined;
|
|
423
|
-
}
|
|
424
430
|
export interface PortSet {
|
|
425
431
|
Definition?: string[];
|
|
426
432
|
}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-network-firewall",
|
|
3
3
|
"description": "AWS SDK for JavaScript Network Firewall Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.326.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -21,33 +21,33 @@
|
|
|
21
21
|
"dependencies": {
|
|
22
22
|
"@aws-crypto/sha256-browser": "3.0.0",
|
|
23
23
|
"@aws-crypto/sha256-js": "3.0.0",
|
|
24
|
-
"@aws-sdk/client-sts": "3.
|
|
24
|
+
"@aws-sdk/client-sts": "3.326.0",
|
|
25
25
|
"@aws-sdk/config-resolver": "3.310.0",
|
|
26
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
26
|
+
"@aws-sdk/credential-provider-node": "3.326.0",
|
|
27
27
|
"@aws-sdk/fetch-http-handler": "3.310.0",
|
|
28
28
|
"@aws-sdk/hash-node": "3.310.0",
|
|
29
29
|
"@aws-sdk/invalid-dependency": "3.310.0",
|
|
30
|
-
"@aws-sdk/middleware-content-length": "3.
|
|
31
|
-
"@aws-sdk/middleware-endpoint": "3.
|
|
32
|
-
"@aws-sdk/middleware-host-header": "3.
|
|
33
|
-
"@aws-sdk/middleware-logger": "3.
|
|
34
|
-
"@aws-sdk/middleware-recursion-detection": "3.
|
|
35
|
-
"@aws-sdk/middleware-retry": "3.
|
|
36
|
-
"@aws-sdk/middleware-serde": "3.
|
|
37
|
-
"@aws-sdk/middleware-signing": "3.
|
|
38
|
-
"@aws-sdk/middleware-stack": "3.
|
|
39
|
-
"@aws-sdk/middleware-user-agent": "3.
|
|
30
|
+
"@aws-sdk/middleware-content-length": "3.325.0",
|
|
31
|
+
"@aws-sdk/middleware-endpoint": "3.325.0",
|
|
32
|
+
"@aws-sdk/middleware-host-header": "3.325.0",
|
|
33
|
+
"@aws-sdk/middleware-logger": "3.325.0",
|
|
34
|
+
"@aws-sdk/middleware-recursion-detection": "3.325.0",
|
|
35
|
+
"@aws-sdk/middleware-retry": "3.325.0",
|
|
36
|
+
"@aws-sdk/middleware-serde": "3.325.0",
|
|
37
|
+
"@aws-sdk/middleware-signing": "3.325.0",
|
|
38
|
+
"@aws-sdk/middleware-stack": "3.325.0",
|
|
39
|
+
"@aws-sdk/middleware-user-agent": "3.325.0",
|
|
40
40
|
"@aws-sdk/node-config-provider": "3.310.0",
|
|
41
41
|
"@aws-sdk/node-http-handler": "3.321.1",
|
|
42
42
|
"@aws-sdk/protocol-http": "3.310.0",
|
|
43
|
-
"@aws-sdk/smithy-client": "3.
|
|
43
|
+
"@aws-sdk/smithy-client": "3.325.0",
|
|
44
44
|
"@aws-sdk/types": "3.310.0",
|
|
45
45
|
"@aws-sdk/url-parser": "3.310.0",
|
|
46
46
|
"@aws-sdk/util-base64": "3.310.0",
|
|
47
47
|
"@aws-sdk/util-body-length-browser": "3.310.0",
|
|
48
48
|
"@aws-sdk/util-body-length-node": "3.310.0",
|
|
49
|
-
"@aws-sdk/util-defaults-mode-browser": "3.
|
|
50
|
-
"@aws-sdk/util-defaults-mode-node": "3.
|
|
49
|
+
"@aws-sdk/util-defaults-mode-browser": "3.325.0",
|
|
50
|
+
"@aws-sdk/util-defaults-mode-node": "3.325.0",
|
|
51
51
|
"@aws-sdk/util-endpoints": "3.319.0",
|
|
52
52
|
"@aws-sdk/util-retry": "3.310.0",
|
|
53
53
|
"@aws-sdk/util-user-agent-browser": "3.310.0",
|