@aws-sdk/client-network-firewall 3.325.0 → 3.326.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/dist-cjs/models/models_0.js +2 -0
  2. package/dist-es/models/models_0.js +2 -0
  3. package/dist-types/commands/AssociateFirewallPolicyCommand.d.ts +9 -0
  4. package/dist-types/commands/AssociateSubnetsCommand.d.ts +14 -0
  5. package/dist-types/commands/CreateFirewallCommand.d.ts +63 -0
  6. package/dist-types/commands/CreateFirewallPolicyCommand.d.ts +36 -0
  7. package/dist-types/commands/CreateRuleGroupCommand.d.ts +33 -0
  8. package/dist-types/commands/CreateTLSInspectionConfigurationCommand.d.ts +33 -0
  9. package/dist-types/commands/DeleteFirewallCommand.d.ts +63 -0
  10. package/dist-types/commands/DeleteFirewallPolicyCommand.d.ts +26 -0
  11. package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +4 -0
  12. package/dist-types/commands/DeleteRuleGroupCommand.d.ts +32 -0
  13. package/dist-types/commands/DeleteTLSInspectionConfigurationCommand.d.ts +32 -0
  14. package/dist-types/commands/DescribeFirewallCommand.d.ts +64 -0
  15. package/dist-types/commands/DescribeFirewallPolicyCommand.d.ts +81 -0
  16. package/dist-types/commands/DescribeLoggingConfigurationCommand.d.ts +17 -0
  17. package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +6 -0
  18. package/dist-types/commands/DescribeRuleGroupCommand.d.ts +157 -0
  19. package/dist-types/commands/DescribeRuleGroupMetadataCommand.d.ts +14 -0
  20. package/dist-types/commands/DescribeTLSInspectionConfigurationCommand.d.ts +73 -0
  21. package/dist-types/commands/DisassociateSubnetsCommand.d.ts +14 -0
  22. package/dist-types/commands/ListFirewallPoliciesCommand.d.ts +12 -0
  23. package/dist-types/commands/ListFirewallsCommand.d.ts +12 -0
  24. package/dist-types/commands/ListRuleGroupsCommand.d.ts +12 -0
  25. package/dist-types/commands/ListTLSInspectionConfigurationsCommand.d.ts +12 -0
  26. package/dist-types/commands/ListTagsForResourceCommand.d.ts +12 -0
  27. package/dist-types/commands/PutResourcePolicyCommand.d.ts +4 -0
  28. package/dist-types/commands/TagResourceCommand.d.ts +4 -0
  29. package/dist-types/commands/UntagResourceCommand.d.ts +4 -0
  30. package/dist-types/commands/UpdateFirewallDeleteProtectionCommand.d.ts +9 -0
  31. package/dist-types/commands/UpdateFirewallDescriptionCommand.d.ts +9 -0
  32. package/dist-types/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +12 -0
  33. package/dist-types/commands/UpdateFirewallPolicyChangeProtectionCommand.d.ts +9 -0
  34. package/dist-types/commands/UpdateFirewallPolicyCommand.d.ts +36 -0
  35. package/dist-types/commands/UpdateLoggingConfigurationCommand.d.ts +18 -0
  36. package/dist-types/commands/UpdateRuleGroupCommand.d.ts +33 -0
  37. package/dist-types/commands/UpdateSubnetChangeProtectionCommand.d.ts +9 -0
  38. package/dist-types/commands/UpdateTLSInspectionConfigurationCommand.d.ts +33 -0
  39. package/dist-types/models/models_0.d.ts +31 -28
  40. package/dist-types/ts3.4/models/models_0.d.ts +9 -3
  41. package/package.json +3 -3
@@ -37,6 +37,13 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
37
37
  * };
38
38
  * const command = new UpdateFirewallDeleteProtectionCommand(input);
39
39
  * const response = await client.send(command);
40
+ * // { // UpdateFirewallDeleteProtectionResponse
41
+ * // FirewallArn: "STRING_VALUE",
42
+ * // FirewallName: "STRING_VALUE",
43
+ * // DeleteProtection: true || false,
44
+ * // UpdateToken: "STRING_VALUE",
45
+ * // };
46
+ *
40
47
  * ```
41
48
  *
42
49
  * @param UpdateFirewallDeleteProtectionCommandInput - {@link UpdateFirewallDeleteProtectionCommandInput}
@@ -77,6 +84,8 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
77
84
  * @throws {@link ThrottlingException} (client fault)
78
85
  * <p>Unable to process the request due to throttling limitations.</p>
79
86
  *
87
+ * @throws {@link NetworkFirewallServiceException}
88
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
80
89
  *
81
90
  */
82
91
  export declare class UpdateFirewallDeleteProtectionCommand extends $Command<UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -35,6 +35,13 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
35
35
  * };
36
36
  * const command = new UpdateFirewallDescriptionCommand(input);
37
37
  * const response = await client.send(command);
38
+ * // { // UpdateFirewallDescriptionResponse
39
+ * // FirewallArn: "STRING_VALUE",
40
+ * // FirewallName: "STRING_VALUE",
41
+ * // Description: "STRING_VALUE",
42
+ * // UpdateToken: "STRING_VALUE",
43
+ * // };
44
+ *
38
45
  * ```
39
46
  *
40
47
  * @param UpdateFirewallDescriptionCommandInput - {@link UpdateFirewallDescriptionCommandInput}
@@ -72,6 +79,8 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
72
79
  * @throws {@link ThrottlingException} (client fault)
73
80
  * <p>Unable to process the request due to throttling limitations.</p>
74
81
  *
82
+ * @throws {@link NetworkFirewallServiceException}
83
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
75
84
  *
76
85
  */
77
86
  export declare class UpdateFirewallDescriptionCommand extends $Command<UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -37,6 +37,16 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
37
37
  * };
38
38
  * const command = new UpdateFirewallEncryptionConfigurationCommand(input);
39
39
  * const response = await client.send(command);
40
+ * // { // UpdateFirewallEncryptionConfigurationResponse
41
+ * // FirewallArn: "STRING_VALUE",
42
+ * // FirewallName: "STRING_VALUE",
43
+ * // UpdateToken: "STRING_VALUE",
44
+ * // EncryptionConfiguration: { // EncryptionConfiguration
45
+ * // KeyId: "STRING_VALUE",
46
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
47
+ * // },
48
+ * // };
49
+ *
40
50
  * ```
41
51
  *
42
52
  * @param UpdateFirewallEncryptionConfigurationCommandInput - {@link UpdateFirewallEncryptionConfigurationCommandInput}
@@ -77,6 +87,8 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
77
87
  * @throws {@link ThrottlingException} (client fault)
78
88
  * <p>Unable to process the request due to throttling limitations.</p>
79
89
  *
90
+ * @throws {@link NetworkFirewallServiceException}
91
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
80
92
  *
81
93
  */
82
94
  export declare class UpdateFirewallEncryptionConfigurationCommand extends $Command<UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -36,6 +36,13 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
36
36
  * };
37
37
  * const command = new UpdateFirewallPolicyChangeProtectionCommand(input);
38
38
  * const response = await client.send(command);
39
+ * // { // UpdateFirewallPolicyChangeProtectionResponse
40
+ * // UpdateToken: "STRING_VALUE",
41
+ * // FirewallArn: "STRING_VALUE",
42
+ * // FirewallName: "STRING_VALUE",
43
+ * // FirewallPolicyChangeProtection: true || false,
44
+ * // };
45
+ *
39
46
  * ```
40
47
  *
41
48
  * @param UpdateFirewallPolicyChangeProtectionCommandInput - {@link UpdateFirewallPolicyChangeProtectionCommandInput}
@@ -76,6 +83,8 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
76
83
  * @throws {@link ThrottlingException} (client fault)
77
84
  * <p>Unable to process the request due to throttling limitations.</p>
78
85
  *
86
+ * @throws {@link NetworkFirewallServiceException}
87
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
79
88
  *
80
89
  */
81
90
  export declare class UpdateFirewallPolicyChangeProtectionCommand extends $Command<UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -74,6 +74,15 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
74
74
  * StreamExceptionPolicy: "DROP" || "CONTINUE",
75
75
  * },
76
76
  * TLSInspectionConfigurationArn: "STRING_VALUE",
77
+ * PolicyVariables: { // PolicyVariables
78
+ * RuleVariables: { // IPSets
79
+ * "<keys>": { // IPSet
80
+ * Definition: [ // VariableDefinitionList // required
81
+ * "STRING_VALUE",
82
+ * ],
83
+ * },
84
+ * },
85
+ * },
77
86
  * },
78
87
  * Description: "STRING_VALUE",
79
88
  * DryRun: true || false,
@@ -84,6 +93,31 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
84
93
  * };
85
94
  * const command = new UpdateFirewallPolicyCommand(input);
86
95
  * const response = await client.send(command);
96
+ * // { // UpdateFirewallPolicyResponse
97
+ * // UpdateToken: "STRING_VALUE", // required
98
+ * // FirewallPolicyResponse: { // FirewallPolicyResponse
99
+ * // FirewallPolicyName: "STRING_VALUE", // required
100
+ * // FirewallPolicyArn: "STRING_VALUE", // required
101
+ * // FirewallPolicyId: "STRING_VALUE", // required
102
+ * // Description: "STRING_VALUE",
103
+ * // FirewallPolicyStatus: "ACTIVE" || "DELETING",
104
+ * // Tags: [ // TagList
105
+ * // { // Tag
106
+ * // Key: "STRING_VALUE", // required
107
+ * // Value: "STRING_VALUE", // required
108
+ * // },
109
+ * // ],
110
+ * // ConsumedStatelessRuleCapacity: Number("int"),
111
+ * // ConsumedStatefulRuleCapacity: Number("int"),
112
+ * // NumberOfAssociations: Number("int"),
113
+ * // EncryptionConfiguration: { // EncryptionConfiguration
114
+ * // KeyId: "STRING_VALUE",
115
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
116
+ * // },
117
+ * // LastModifiedTime: new Date("TIMESTAMP"),
118
+ * // },
119
+ * // };
120
+ *
87
121
  * ```
88
122
  *
89
123
  * @param UpdateFirewallPolicyCommandInput - {@link UpdateFirewallPolicyCommandInput}
@@ -121,6 +155,8 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
121
155
  * @throws {@link ThrottlingException} (client fault)
122
156
  * <p>Unable to process the request due to throttling limitations.</p>
123
157
  *
158
+ * @throws {@link NetworkFirewallServiceException}
159
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
124
160
  *
125
161
  */
126
162
  export declare class UpdateFirewallPolicyCommand extends $Command<UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -68,6 +68,22 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
68
68
  * };
69
69
  * const command = new UpdateLoggingConfigurationCommand(input);
70
70
  * const response = await client.send(command);
71
+ * // { // UpdateLoggingConfigurationResponse
72
+ * // FirewallArn: "STRING_VALUE",
73
+ * // FirewallName: "STRING_VALUE",
74
+ * // LoggingConfiguration: { // LoggingConfiguration
75
+ * // LogDestinationConfigs: [ // LogDestinationConfigs // required
76
+ * // { // LogDestinationConfig
77
+ * // LogType: "ALERT" || "FLOW", // required
78
+ * // LogDestinationType: "S3" || "CloudWatchLogs" || "KinesisDataFirehose", // required
79
+ * // LogDestination: { // LogDestinationMap // required
80
+ * // "<keys>": "STRING_VALUE",
81
+ * // },
82
+ * // },
83
+ * // ],
84
+ * // },
85
+ * // };
86
+ *
71
87
  * ```
72
88
  *
73
89
  * @param UpdateLoggingConfigurationCommandInput - {@link UpdateLoggingConfigurationCommandInput}
@@ -108,6 +124,8 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
108
124
  * @throws {@link ThrottlingException} (client fault)
109
125
  * <p>Unable to process the request due to throttling limitations.</p>
110
126
  *
127
+ * @throws {@link NetworkFirewallServiceException}
128
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
111
129
  *
112
130
  */
113
131
  export declare class UpdateLoggingConfigurationCommand extends $Command<UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -174,6 +174,37 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
174
174
  * };
175
175
  * const command = new UpdateRuleGroupCommand(input);
176
176
  * const response = await client.send(command);
177
+ * // { // UpdateRuleGroupResponse
178
+ * // UpdateToken: "STRING_VALUE", // required
179
+ * // RuleGroupResponse: { // RuleGroupResponse
180
+ * // RuleGroupArn: "STRING_VALUE", // required
181
+ * // RuleGroupName: "STRING_VALUE", // required
182
+ * // RuleGroupId: "STRING_VALUE", // required
183
+ * // Description: "STRING_VALUE",
184
+ * // Type: "STATELESS" || "STATEFUL",
185
+ * // Capacity: Number("int"),
186
+ * // RuleGroupStatus: "ACTIVE" || "DELETING",
187
+ * // Tags: [ // TagList
188
+ * // { // Tag
189
+ * // Key: "STRING_VALUE", // required
190
+ * // Value: "STRING_VALUE", // required
191
+ * // },
192
+ * // ],
193
+ * // ConsumedCapacity: Number("int"),
194
+ * // NumberOfAssociations: Number("int"),
195
+ * // EncryptionConfiguration: { // EncryptionConfiguration
196
+ * // KeyId: "STRING_VALUE",
197
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
198
+ * // },
199
+ * // SourceMetadata: { // SourceMetadata
200
+ * // SourceArn: "STRING_VALUE",
201
+ * // SourceUpdateToken: "STRING_VALUE",
202
+ * // },
203
+ * // SnsTopic: "STRING_VALUE",
204
+ * // LastModifiedTime: new Date("TIMESTAMP"),
205
+ * // },
206
+ * // };
207
+ *
177
208
  * ```
178
209
  *
179
210
  * @param UpdateRuleGroupCommandInput - {@link UpdateRuleGroupCommandInput}
@@ -211,6 +242,8 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
211
242
  * @throws {@link ThrottlingException} (client fault)
212
243
  * <p>Unable to process the request due to throttling limitations.</p>
213
244
  *
245
+ * @throws {@link NetworkFirewallServiceException}
246
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
214
247
  *
215
248
  */
216
249
  export declare class UpdateRuleGroupCommand extends $Command<UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -34,6 +34,13 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
34
34
  * };
35
35
  * const command = new UpdateSubnetChangeProtectionCommand(input);
36
36
  * const response = await client.send(command);
37
+ * // { // UpdateSubnetChangeProtectionResponse
38
+ * // UpdateToken: "STRING_VALUE",
39
+ * // FirewallArn: "STRING_VALUE",
40
+ * // FirewallName: "STRING_VALUE",
41
+ * // SubnetChangeProtection: true || false,
42
+ * // };
43
+ *
37
44
  * ```
38
45
  *
39
46
  * @param UpdateSubnetChangeProtectionCommandInput - {@link UpdateSubnetChangeProtectionCommandInput}
@@ -74,6 +81,8 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
74
81
  * @throws {@link ThrottlingException} (client fault)
75
82
  * <p>Unable to process the request due to throttling limitations.</p>
76
83
  *
84
+ * @throws {@link NetworkFirewallServiceException}
85
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
77
86
  *
78
87
  */
79
88
  export declare class UpdateSubnetChangeProtectionCommand extends $Command<UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -83,6 +83,37 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
83
83
  * };
84
84
  * const command = new UpdateTLSInspectionConfigurationCommand(input);
85
85
  * const response = await client.send(command);
86
+ * // { // UpdateTLSInspectionConfigurationResponse
87
+ * // UpdateToken: "STRING_VALUE", // required
88
+ * // TLSInspectionConfigurationResponse: { // TLSInspectionConfigurationResponse
89
+ * // TLSInspectionConfigurationArn: "STRING_VALUE", // required
90
+ * // TLSInspectionConfigurationName: "STRING_VALUE", // required
91
+ * // TLSInspectionConfigurationId: "STRING_VALUE", // required
92
+ * // TLSInspectionConfigurationStatus: "ACTIVE" || "DELETING",
93
+ * // Description: "STRING_VALUE",
94
+ * // Tags: [ // TagList
95
+ * // { // Tag
96
+ * // Key: "STRING_VALUE", // required
97
+ * // Value: "STRING_VALUE", // required
98
+ * // },
99
+ * // ],
100
+ * // LastModifiedTime: new Date("TIMESTAMP"),
101
+ * // NumberOfAssociations: Number("int"),
102
+ * // EncryptionConfiguration: { // EncryptionConfiguration
103
+ * // KeyId: "STRING_VALUE",
104
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
105
+ * // },
106
+ * // Certificates: [ // Certificates
107
+ * // { // TlsCertificateData
108
+ * // CertificateArn: "STRING_VALUE",
109
+ * // CertificateSerial: "STRING_VALUE",
110
+ * // Status: "STRING_VALUE",
111
+ * // StatusMessage: "STRING_VALUE",
112
+ * // },
113
+ * // ],
114
+ * // },
115
+ * // };
116
+ *
86
117
  * ```
87
118
  *
88
119
  * @param UpdateTLSInspectionConfigurationCommandInput - {@link UpdateTLSInspectionConfigurationCommandInput}
@@ -120,6 +151,8 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
120
151
  * @throws {@link ThrottlingException} (client fault)
121
152
  * <p>Unable to process the request due to throttling limitations.</p>
122
153
  *
154
+ * @throws {@link NetworkFirewallServiceException}
155
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
123
156
  *
124
157
  */
125
158
  export declare class UpdateTLSInspectionConfigurationCommand extends $Command<UpdateTLSInspectionConfigurationCommandInput, UpdateTLSInspectionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -311,6 +311,8 @@ export declare class InsufficientCapacityException extends __BaseException {
311
311
  export declare const AttachmentStatus: {
312
312
  readonly CREATING: "CREATING";
313
313
  readonly DELETING: "DELETING";
314
+ readonly ERROR: "ERROR";
315
+ readonly FAILED: "FAILED";
314
316
  readonly READY: "READY";
315
317
  readonly SCALING: "SCALING";
316
318
  };
@@ -345,7 +347,7 @@ export interface Attachment {
345
347
  */
346
348
  Status?: AttachmentStatus | string;
347
349
  /**
348
- * <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the failure and how to resolve it. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
350
+ * <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the error or failure and how to resolve it. A <code>FAILED</code> status indicates a non-recoverable state, and a <code>ERROR</code> status indicates an issue that you can fix. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the causes for failiure or errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
349
351
  */
350
352
  StatusMessage?: string;
351
353
  }
@@ -733,6 +735,28 @@ export declare class LimitExceededException extends __BaseException {
733
735
  */
734
736
  constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
735
737
  }
738
+ /**
739
+ * @public
740
+ * <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
741
+ */
742
+ export interface IPSet {
743
+ /**
744
+ * <p>The list of IP addresses and address ranges, in CIDR notation.
745
+ *
746
+ * </p>
747
+ */
748
+ Definition: string[] | undefined;
749
+ }
750
+ /**
751
+ * @public
752
+ * <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
753
+ */
754
+ export interface PolicyVariables {
755
+ /**
756
+ * <p>The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata <code>HOME_NET</code> variable. If your firewall uses an inspection VPC, you might want to override the <code>HOME_NET</code> variable with the CIDRs of your home networks. If you don't override <code>HOME_NET</code> with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.</p>
757
+ */
758
+ RuleVariables?: Record<string, IPSet>;
759
+ }
736
760
  /**
737
761
  * @public
738
762
  * @enum
@@ -968,6 +992,10 @@ export interface FirewallPolicy {
968
992
  * <p>The Amazon Resource Name (ARN) of the TLS inspection configuration.</p>
969
993
  */
970
994
  TLSInspectionConfigurationArn?: string;
995
+ /**
996
+ * <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
997
+ */
998
+ PolicyVariables?: PolicyVariables;
971
999
  }
972
1000
  /**
973
1001
  * @public
@@ -1314,7 +1342,7 @@ export interface RuleOption {
1314
1342
  * <p>A single Suricata rules specification, for use in a stateful rule group.
1315
1343
  * Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options.
1316
1344
  * For information about the Suricata <code>Rules</code> format, see
1317
- * <a href="https://suricata.readthedocs.iorules/intro.html#">Rules Format</a>. </p>
1345
+ * <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html">Rules Format</a>. </p>
1318
1346
  */
1319
1347
  export interface StatefulRule {
1320
1348
  /**
@@ -1343,13 +1371,6 @@ export interface StatefulRule {
1343
1371
  * can enable the rule with <code>ALERT</code> action, verify in the logs that the rule
1344
1372
  * is filtering as you want, then change the action to <code>DROP</code>.</p>
1345
1373
  * </li>
1346
- * <li>
1347
- * <p>
1348
- * <b>REJECT</b> - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a <code>RST</code> bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the <a>Firewall</a>
1349
- * <a>LoggingConfiguration</a>.</p>
1350
- * <p>
1351
- * <code>REJECT</code> isn't currently available for use with IMAP and FTP protocols.</p>
1352
- * </li>
1353
1374
  * </ul>
1354
1375
  */
1355
1376
  Action: StatefulAction | string | undefined;
@@ -1583,7 +1604,7 @@ export interface RulesSource {
1583
1604
  * <p>An array of individual stateful rules inspection criteria to be used together in a stateful rule group.
1584
1605
  * Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options.
1585
1606
  * For information about the Suricata <code>Rules</code> format, see
1586
- * <a href="https://suricata.readthedocs.iorules/intro.html#">Rules Format</a>. </p>
1607
+ * <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html">Rules Format</a>. </p>
1587
1608
  */
1588
1609
  StatefulRules?: StatefulRule[];
1589
1610
  /**
@@ -1591,18 +1612,6 @@ export interface RulesSource {
1591
1612
  */
1592
1613
  StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
1593
1614
  }
1594
- /**
1595
- * @public
1596
- * <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
1597
- */
1598
- export interface IPSet {
1599
- /**
1600
- * <p>The list of IP addresses and address ranges, in CIDR notation.
1601
- *
1602
- * </p>
1603
- */
1604
- Definition: string[] | undefined;
1605
- }
1606
1615
  /**
1607
1616
  * @public
1608
1617
  * <p>A set of port ranges for use in the rules in a rule group. </p>
@@ -2911,12 +2920,6 @@ export interface PutResourcePolicyRequest {
2911
2920
  * <p>For a firewall policy resource, you can specify the following operations in the Actions section of the statement:</p>
2912
2921
  * <ul>
2913
2922
  * <li>
2914
- * <p>network-firewall:CreateFirewall</p>
2915
- * </li>
2916
- * <li>
2917
- * <p>network-firewall:UpdateFirewall</p>
2918
- * </li>
2919
- * <li>
2920
2923
  * <p>network-firewall:AssociateFirewallPolicy</p>
2921
2924
  * </li>
2922
2925
  * <li>
@@ -105,6 +105,8 @@ export declare class InsufficientCapacityException extends __BaseException {
105
105
  export declare const AttachmentStatus: {
106
106
  readonly CREATING: "CREATING";
107
107
  readonly DELETING: "DELETING";
108
+ readonly ERROR: "ERROR";
109
+ readonly FAILED: "FAILED";
108
110
  readonly READY: "READY";
109
111
  readonly SCALING: "SCALING";
110
112
  };
@@ -220,6 +222,12 @@ export declare class LimitExceededException extends __BaseException {
220
222
  opts: __ExceptionOptionType<LimitExceededException, __BaseException>
221
223
  );
222
224
  }
225
+ export interface IPSet {
226
+ Definition: string[] | undefined;
227
+ }
228
+ export interface PolicyVariables {
229
+ RuleVariables?: Record<string, IPSet>;
230
+ }
223
231
  export declare const RuleOrder: {
224
232
  readonly DEFAULT_ACTION_ORDER: "DEFAULT_ACTION_ORDER";
225
233
  readonly STRICT_ORDER: "STRICT_ORDER";
@@ -265,6 +273,7 @@ export interface FirewallPolicy {
265
273
  StatefulDefaultActions?: string[];
266
274
  StatefulEngineOptions?: StatefulEngineOptions;
267
275
  TLSInspectionConfigurationArn?: string;
276
+ PolicyVariables?: PolicyVariables;
268
277
  }
269
278
  export interface CreateFirewallPolicyRequest {
270
279
  FirewallPolicyName: string | undefined;
@@ -418,9 +427,6 @@ export interface RulesSource {
418
427
  StatefulRules?: StatefulRule[];
419
428
  StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
420
429
  }
421
- export interface IPSet {
422
- Definition: string[] | undefined;
423
- }
424
430
  export interface PortSet {
425
431
  Definition?: string[];
426
432
  }
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-network-firewall",
3
3
  "description": "AWS SDK for JavaScript Network Firewall Client for Node.js, Browser and React Native",
4
- "version": "3.325.0",
4
+ "version": "3.326.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -21,9 +21,9 @@
21
21
  "dependencies": {
22
22
  "@aws-crypto/sha256-browser": "3.0.0",
23
23
  "@aws-crypto/sha256-js": "3.0.0",
24
- "@aws-sdk/client-sts": "3.325.0",
24
+ "@aws-sdk/client-sts": "3.326.0",
25
25
  "@aws-sdk/config-resolver": "3.310.0",
26
- "@aws-sdk/credential-provider-node": "3.325.0",
26
+ "@aws-sdk/credential-provider-node": "3.326.0",
27
27
  "@aws-sdk/fetch-http-handler": "3.310.0",
28
28
  "@aws-sdk/hash-node": "3.310.0",
29
29
  "@aws-sdk/invalid-dependency": "3.310.0",