@aws-sdk/client-network-firewall 3.325.0 → 3.327.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/models/models_0.js +3 -0
- package/dist-es/models/models_0.js +3 -0
- package/dist-types/commands/AssociateFirewallPolicyCommand.d.ts +9 -0
- package/dist-types/commands/AssociateSubnetsCommand.d.ts +14 -0
- package/dist-types/commands/CreateFirewallCommand.d.ts +63 -0
- package/dist-types/commands/CreateFirewallPolicyCommand.d.ts +37 -1
- package/dist-types/commands/CreateRuleGroupCommand.d.ts +33 -0
- package/dist-types/commands/CreateTLSInspectionConfigurationCommand.d.ts +33 -0
- package/dist-types/commands/DeleteFirewallCommand.d.ts +63 -0
- package/dist-types/commands/DeleteFirewallPolicyCommand.d.ts +26 -0
- package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +4 -0
- package/dist-types/commands/DeleteRuleGroupCommand.d.ts +32 -0
- package/dist-types/commands/DeleteTLSInspectionConfigurationCommand.d.ts +32 -0
- package/dist-types/commands/DescribeFirewallCommand.d.ts +64 -0
- package/dist-types/commands/DescribeFirewallPolicyCommand.d.ts +81 -0
- package/dist-types/commands/DescribeLoggingConfigurationCommand.d.ts +17 -0
- package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +6 -0
- package/dist-types/commands/DescribeRuleGroupCommand.d.ts +157 -0
- package/dist-types/commands/DescribeRuleGroupMetadataCommand.d.ts +14 -0
- package/dist-types/commands/DescribeTLSInspectionConfigurationCommand.d.ts +73 -0
- package/dist-types/commands/DisassociateSubnetsCommand.d.ts +14 -0
- package/dist-types/commands/ListFirewallPoliciesCommand.d.ts +12 -0
- package/dist-types/commands/ListFirewallsCommand.d.ts +12 -0
- package/dist-types/commands/ListRuleGroupsCommand.d.ts +12 -0
- package/dist-types/commands/ListTLSInspectionConfigurationsCommand.d.ts +12 -0
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +12 -0
- package/dist-types/commands/PutResourcePolicyCommand.d.ts +4 -0
- package/dist-types/commands/TagResourceCommand.d.ts +4 -0
- package/dist-types/commands/UntagResourceCommand.d.ts +4 -0
- package/dist-types/commands/UpdateFirewallDeleteProtectionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateFirewallDescriptionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +12 -0
- package/dist-types/commands/UpdateFirewallPolicyChangeProtectionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateFirewallPolicyCommand.d.ts +37 -1
- package/dist-types/commands/UpdateLoggingConfigurationCommand.d.ts +18 -0
- package/dist-types/commands/UpdateRuleGroupCommand.d.ts +33 -0
- package/dist-types/commands/UpdateSubnetChangeProtectionCommand.d.ts +9 -0
- package/dist-types/commands/UpdateTLSInspectionConfigurationCommand.d.ts +33 -0
- package/dist-types/models/models_0.d.ts +34 -19
- package/dist-types/ts3.4/models/models_0.d.ts +10 -3
- package/package.json +7 -7
|
@@ -37,6 +37,13 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
|
|
|
37
37
|
* };
|
|
38
38
|
* const command = new UpdateFirewallDeleteProtectionCommand(input);
|
|
39
39
|
* const response = await client.send(command);
|
|
40
|
+
* // { // UpdateFirewallDeleteProtectionResponse
|
|
41
|
+
* // FirewallArn: "STRING_VALUE",
|
|
42
|
+
* // FirewallName: "STRING_VALUE",
|
|
43
|
+
* // DeleteProtection: true || false,
|
|
44
|
+
* // UpdateToken: "STRING_VALUE",
|
|
45
|
+
* // };
|
|
46
|
+
*
|
|
40
47
|
* ```
|
|
41
48
|
*
|
|
42
49
|
* @param UpdateFirewallDeleteProtectionCommandInput - {@link UpdateFirewallDeleteProtectionCommandInput}
|
|
@@ -77,6 +84,8 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
|
|
|
77
84
|
* @throws {@link ThrottlingException} (client fault)
|
|
78
85
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
79
86
|
*
|
|
87
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
88
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
80
89
|
*
|
|
81
90
|
*/
|
|
82
91
|
export declare class UpdateFirewallDeleteProtectionCommand extends $Command<UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -35,6 +35,13 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
|
|
|
35
35
|
* };
|
|
36
36
|
* const command = new UpdateFirewallDescriptionCommand(input);
|
|
37
37
|
* const response = await client.send(command);
|
|
38
|
+
* // { // UpdateFirewallDescriptionResponse
|
|
39
|
+
* // FirewallArn: "STRING_VALUE",
|
|
40
|
+
* // FirewallName: "STRING_VALUE",
|
|
41
|
+
* // Description: "STRING_VALUE",
|
|
42
|
+
* // UpdateToken: "STRING_VALUE",
|
|
43
|
+
* // };
|
|
44
|
+
*
|
|
38
45
|
* ```
|
|
39
46
|
*
|
|
40
47
|
* @param UpdateFirewallDescriptionCommandInput - {@link UpdateFirewallDescriptionCommandInput}
|
|
@@ -72,6 +79,8 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
|
|
|
72
79
|
* @throws {@link ThrottlingException} (client fault)
|
|
73
80
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
74
81
|
*
|
|
82
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
83
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
75
84
|
*
|
|
76
85
|
*/
|
|
77
86
|
export declare class UpdateFirewallDescriptionCommand extends $Command<UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -37,6 +37,16 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
|
|
|
37
37
|
* };
|
|
38
38
|
* const command = new UpdateFirewallEncryptionConfigurationCommand(input);
|
|
39
39
|
* const response = await client.send(command);
|
|
40
|
+
* // { // UpdateFirewallEncryptionConfigurationResponse
|
|
41
|
+
* // FirewallArn: "STRING_VALUE",
|
|
42
|
+
* // FirewallName: "STRING_VALUE",
|
|
43
|
+
* // UpdateToken: "STRING_VALUE",
|
|
44
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
45
|
+
* // KeyId: "STRING_VALUE",
|
|
46
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
47
|
+
* // },
|
|
48
|
+
* // };
|
|
49
|
+
*
|
|
40
50
|
* ```
|
|
41
51
|
*
|
|
42
52
|
* @param UpdateFirewallEncryptionConfigurationCommandInput - {@link UpdateFirewallEncryptionConfigurationCommandInput}
|
|
@@ -77,6 +87,8 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
|
|
|
77
87
|
* @throws {@link ThrottlingException} (client fault)
|
|
78
88
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
79
89
|
*
|
|
90
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
91
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
80
92
|
*
|
|
81
93
|
*/
|
|
82
94
|
export declare class UpdateFirewallEncryptionConfigurationCommand extends $Command<UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -36,6 +36,13 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
|
|
|
36
36
|
* };
|
|
37
37
|
* const command = new UpdateFirewallPolicyChangeProtectionCommand(input);
|
|
38
38
|
* const response = await client.send(command);
|
|
39
|
+
* // { // UpdateFirewallPolicyChangeProtectionResponse
|
|
40
|
+
* // UpdateToken: "STRING_VALUE",
|
|
41
|
+
* // FirewallArn: "STRING_VALUE",
|
|
42
|
+
* // FirewallName: "STRING_VALUE",
|
|
43
|
+
* // FirewallPolicyChangeProtection: true || false,
|
|
44
|
+
* // };
|
|
45
|
+
*
|
|
39
46
|
* ```
|
|
40
47
|
*
|
|
41
48
|
* @param UpdateFirewallPolicyChangeProtectionCommandInput - {@link UpdateFirewallPolicyChangeProtectionCommandInput}
|
|
@@ -76,6 +83,8 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
|
|
|
76
83
|
* @throws {@link ThrottlingException} (client fault)
|
|
77
84
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
78
85
|
*
|
|
86
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
87
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
79
88
|
*
|
|
80
89
|
*/
|
|
81
90
|
export declare class UpdateFirewallPolicyChangeProtectionCommand extends $Command<UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -71,9 +71,18 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
|
|
|
71
71
|
* ],
|
|
72
72
|
* StatefulEngineOptions: { // StatefulEngineOptions
|
|
73
73
|
* RuleOrder: "DEFAULT_ACTION_ORDER" || "STRICT_ORDER",
|
|
74
|
-
* StreamExceptionPolicy: "DROP" || "CONTINUE",
|
|
74
|
+
* StreamExceptionPolicy: "DROP" || "CONTINUE" || "REJECT",
|
|
75
75
|
* },
|
|
76
76
|
* TLSInspectionConfigurationArn: "STRING_VALUE",
|
|
77
|
+
* PolicyVariables: { // PolicyVariables
|
|
78
|
+
* RuleVariables: { // IPSets
|
|
79
|
+
* "<keys>": { // IPSet
|
|
80
|
+
* Definition: [ // VariableDefinitionList // required
|
|
81
|
+
* "STRING_VALUE",
|
|
82
|
+
* ],
|
|
83
|
+
* },
|
|
84
|
+
* },
|
|
85
|
+
* },
|
|
77
86
|
* },
|
|
78
87
|
* Description: "STRING_VALUE",
|
|
79
88
|
* DryRun: true || false,
|
|
@@ -84,6 +93,31 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
|
|
|
84
93
|
* };
|
|
85
94
|
* const command = new UpdateFirewallPolicyCommand(input);
|
|
86
95
|
* const response = await client.send(command);
|
|
96
|
+
* // { // UpdateFirewallPolicyResponse
|
|
97
|
+
* // UpdateToken: "STRING_VALUE", // required
|
|
98
|
+
* // FirewallPolicyResponse: { // FirewallPolicyResponse
|
|
99
|
+
* // FirewallPolicyName: "STRING_VALUE", // required
|
|
100
|
+
* // FirewallPolicyArn: "STRING_VALUE", // required
|
|
101
|
+
* // FirewallPolicyId: "STRING_VALUE", // required
|
|
102
|
+
* // Description: "STRING_VALUE",
|
|
103
|
+
* // FirewallPolicyStatus: "ACTIVE" || "DELETING",
|
|
104
|
+
* // Tags: [ // TagList
|
|
105
|
+
* // { // Tag
|
|
106
|
+
* // Key: "STRING_VALUE", // required
|
|
107
|
+
* // Value: "STRING_VALUE", // required
|
|
108
|
+
* // },
|
|
109
|
+
* // ],
|
|
110
|
+
* // ConsumedStatelessRuleCapacity: Number("int"),
|
|
111
|
+
* // ConsumedStatefulRuleCapacity: Number("int"),
|
|
112
|
+
* // NumberOfAssociations: Number("int"),
|
|
113
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
114
|
+
* // KeyId: "STRING_VALUE",
|
|
115
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
116
|
+
* // },
|
|
117
|
+
* // LastModifiedTime: new Date("TIMESTAMP"),
|
|
118
|
+
* // },
|
|
119
|
+
* // };
|
|
120
|
+
*
|
|
87
121
|
* ```
|
|
88
122
|
*
|
|
89
123
|
* @param UpdateFirewallPolicyCommandInput - {@link UpdateFirewallPolicyCommandInput}
|
|
@@ -121,6 +155,8 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
|
|
|
121
155
|
* @throws {@link ThrottlingException} (client fault)
|
|
122
156
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
123
157
|
*
|
|
158
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
159
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
124
160
|
*
|
|
125
161
|
*/
|
|
126
162
|
export declare class UpdateFirewallPolicyCommand extends $Command<UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -68,6 +68,22 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
|
|
|
68
68
|
* };
|
|
69
69
|
* const command = new UpdateLoggingConfigurationCommand(input);
|
|
70
70
|
* const response = await client.send(command);
|
|
71
|
+
* // { // UpdateLoggingConfigurationResponse
|
|
72
|
+
* // FirewallArn: "STRING_VALUE",
|
|
73
|
+
* // FirewallName: "STRING_VALUE",
|
|
74
|
+
* // LoggingConfiguration: { // LoggingConfiguration
|
|
75
|
+
* // LogDestinationConfigs: [ // LogDestinationConfigs // required
|
|
76
|
+
* // { // LogDestinationConfig
|
|
77
|
+
* // LogType: "ALERT" || "FLOW", // required
|
|
78
|
+
* // LogDestinationType: "S3" || "CloudWatchLogs" || "KinesisDataFirehose", // required
|
|
79
|
+
* // LogDestination: { // LogDestinationMap // required
|
|
80
|
+
* // "<keys>": "STRING_VALUE",
|
|
81
|
+
* // },
|
|
82
|
+
* // },
|
|
83
|
+
* // ],
|
|
84
|
+
* // },
|
|
85
|
+
* // };
|
|
86
|
+
*
|
|
71
87
|
* ```
|
|
72
88
|
*
|
|
73
89
|
* @param UpdateLoggingConfigurationCommandInput - {@link UpdateLoggingConfigurationCommandInput}
|
|
@@ -108,6 +124,8 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
|
|
|
108
124
|
* @throws {@link ThrottlingException} (client fault)
|
|
109
125
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
110
126
|
*
|
|
127
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
128
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
111
129
|
*
|
|
112
130
|
*/
|
|
113
131
|
export declare class UpdateLoggingConfigurationCommand extends $Command<UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -174,6 +174,37 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
|
|
|
174
174
|
* };
|
|
175
175
|
* const command = new UpdateRuleGroupCommand(input);
|
|
176
176
|
* const response = await client.send(command);
|
|
177
|
+
* // { // UpdateRuleGroupResponse
|
|
178
|
+
* // UpdateToken: "STRING_VALUE", // required
|
|
179
|
+
* // RuleGroupResponse: { // RuleGroupResponse
|
|
180
|
+
* // RuleGroupArn: "STRING_VALUE", // required
|
|
181
|
+
* // RuleGroupName: "STRING_VALUE", // required
|
|
182
|
+
* // RuleGroupId: "STRING_VALUE", // required
|
|
183
|
+
* // Description: "STRING_VALUE",
|
|
184
|
+
* // Type: "STATELESS" || "STATEFUL",
|
|
185
|
+
* // Capacity: Number("int"),
|
|
186
|
+
* // RuleGroupStatus: "ACTIVE" || "DELETING",
|
|
187
|
+
* // Tags: [ // TagList
|
|
188
|
+
* // { // Tag
|
|
189
|
+
* // Key: "STRING_VALUE", // required
|
|
190
|
+
* // Value: "STRING_VALUE", // required
|
|
191
|
+
* // },
|
|
192
|
+
* // ],
|
|
193
|
+
* // ConsumedCapacity: Number("int"),
|
|
194
|
+
* // NumberOfAssociations: Number("int"),
|
|
195
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
196
|
+
* // KeyId: "STRING_VALUE",
|
|
197
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
198
|
+
* // },
|
|
199
|
+
* // SourceMetadata: { // SourceMetadata
|
|
200
|
+
* // SourceArn: "STRING_VALUE",
|
|
201
|
+
* // SourceUpdateToken: "STRING_VALUE",
|
|
202
|
+
* // },
|
|
203
|
+
* // SnsTopic: "STRING_VALUE",
|
|
204
|
+
* // LastModifiedTime: new Date("TIMESTAMP"),
|
|
205
|
+
* // },
|
|
206
|
+
* // };
|
|
207
|
+
*
|
|
177
208
|
* ```
|
|
178
209
|
*
|
|
179
210
|
* @param UpdateRuleGroupCommandInput - {@link UpdateRuleGroupCommandInput}
|
|
@@ -211,6 +242,8 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
|
|
|
211
242
|
* @throws {@link ThrottlingException} (client fault)
|
|
212
243
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
213
244
|
*
|
|
245
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
246
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
214
247
|
*
|
|
215
248
|
*/
|
|
216
249
|
export declare class UpdateRuleGroupCommand extends $Command<UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -34,6 +34,13 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
|
|
|
34
34
|
* };
|
|
35
35
|
* const command = new UpdateSubnetChangeProtectionCommand(input);
|
|
36
36
|
* const response = await client.send(command);
|
|
37
|
+
* // { // UpdateSubnetChangeProtectionResponse
|
|
38
|
+
* // UpdateToken: "STRING_VALUE",
|
|
39
|
+
* // FirewallArn: "STRING_VALUE",
|
|
40
|
+
* // FirewallName: "STRING_VALUE",
|
|
41
|
+
* // SubnetChangeProtection: true || false,
|
|
42
|
+
* // };
|
|
43
|
+
*
|
|
37
44
|
* ```
|
|
38
45
|
*
|
|
39
46
|
* @param UpdateSubnetChangeProtectionCommandInput - {@link UpdateSubnetChangeProtectionCommandInput}
|
|
@@ -74,6 +81,8 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
|
|
|
74
81
|
* @throws {@link ThrottlingException} (client fault)
|
|
75
82
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
76
83
|
*
|
|
84
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
85
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
77
86
|
*
|
|
78
87
|
*/
|
|
79
88
|
export declare class UpdateSubnetChangeProtectionCommand extends $Command<UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -83,6 +83,37 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
|
|
|
83
83
|
* };
|
|
84
84
|
* const command = new UpdateTLSInspectionConfigurationCommand(input);
|
|
85
85
|
* const response = await client.send(command);
|
|
86
|
+
* // { // UpdateTLSInspectionConfigurationResponse
|
|
87
|
+
* // UpdateToken: "STRING_VALUE", // required
|
|
88
|
+
* // TLSInspectionConfigurationResponse: { // TLSInspectionConfigurationResponse
|
|
89
|
+
* // TLSInspectionConfigurationArn: "STRING_VALUE", // required
|
|
90
|
+
* // TLSInspectionConfigurationName: "STRING_VALUE", // required
|
|
91
|
+
* // TLSInspectionConfigurationId: "STRING_VALUE", // required
|
|
92
|
+
* // TLSInspectionConfigurationStatus: "ACTIVE" || "DELETING",
|
|
93
|
+
* // Description: "STRING_VALUE",
|
|
94
|
+
* // Tags: [ // TagList
|
|
95
|
+
* // { // Tag
|
|
96
|
+
* // Key: "STRING_VALUE", // required
|
|
97
|
+
* // Value: "STRING_VALUE", // required
|
|
98
|
+
* // },
|
|
99
|
+
* // ],
|
|
100
|
+
* // LastModifiedTime: new Date("TIMESTAMP"),
|
|
101
|
+
* // NumberOfAssociations: Number("int"),
|
|
102
|
+
* // EncryptionConfiguration: { // EncryptionConfiguration
|
|
103
|
+
* // KeyId: "STRING_VALUE",
|
|
104
|
+
* // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
|
|
105
|
+
* // },
|
|
106
|
+
* // Certificates: [ // Certificates
|
|
107
|
+
* // { // TlsCertificateData
|
|
108
|
+
* // CertificateArn: "STRING_VALUE",
|
|
109
|
+
* // CertificateSerial: "STRING_VALUE",
|
|
110
|
+
* // Status: "STRING_VALUE",
|
|
111
|
+
* // StatusMessage: "STRING_VALUE",
|
|
112
|
+
* // },
|
|
113
|
+
* // ],
|
|
114
|
+
* // },
|
|
115
|
+
* // };
|
|
116
|
+
*
|
|
86
117
|
* ```
|
|
87
118
|
*
|
|
88
119
|
* @param UpdateTLSInspectionConfigurationCommandInput - {@link UpdateTLSInspectionConfigurationCommandInput}
|
|
@@ -120,6 +151,8 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
|
|
|
120
151
|
* @throws {@link ThrottlingException} (client fault)
|
|
121
152
|
* <p>Unable to process the request due to throttling limitations.</p>
|
|
122
153
|
*
|
|
154
|
+
* @throws {@link NetworkFirewallServiceException}
|
|
155
|
+
* <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
|
|
123
156
|
*
|
|
124
157
|
*/
|
|
125
158
|
export declare class UpdateTLSInspectionConfigurationCommand extends $Command<UpdateTLSInspectionConfigurationCommandInput, UpdateTLSInspectionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
@@ -311,6 +311,8 @@ export declare class InsufficientCapacityException extends __BaseException {
|
|
|
311
311
|
export declare const AttachmentStatus: {
|
|
312
312
|
readonly CREATING: "CREATING";
|
|
313
313
|
readonly DELETING: "DELETING";
|
|
314
|
+
readonly ERROR: "ERROR";
|
|
315
|
+
readonly FAILED: "FAILED";
|
|
314
316
|
readonly READY: "READY";
|
|
315
317
|
readonly SCALING: "SCALING";
|
|
316
318
|
};
|
|
@@ -345,7 +347,7 @@ export interface Attachment {
|
|
|
345
347
|
*/
|
|
346
348
|
Status?: AttachmentStatus | string;
|
|
347
349
|
/**
|
|
348
|
-
* <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the failure and how to resolve it. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
|
|
350
|
+
* <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the error or failure and how to resolve it. A <code>FAILED</code> status indicates a non-recoverable state, and a <code>ERROR</code> status indicates an issue that you can fix. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the causes for failiure or errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
|
|
349
351
|
*/
|
|
350
352
|
StatusMessage?: string;
|
|
351
353
|
}
|
|
@@ -733,6 +735,28 @@ export declare class LimitExceededException extends __BaseException {
|
|
|
733
735
|
*/
|
|
734
736
|
constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
|
|
735
737
|
}
|
|
738
|
+
/**
|
|
739
|
+
* @public
|
|
740
|
+
* <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
|
|
741
|
+
*/
|
|
742
|
+
export interface IPSet {
|
|
743
|
+
/**
|
|
744
|
+
* <p>The list of IP addresses and address ranges, in CIDR notation.
|
|
745
|
+
*
|
|
746
|
+
* </p>
|
|
747
|
+
*/
|
|
748
|
+
Definition: string[] | undefined;
|
|
749
|
+
}
|
|
750
|
+
/**
|
|
751
|
+
* @public
|
|
752
|
+
* <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
|
|
753
|
+
*/
|
|
754
|
+
export interface PolicyVariables {
|
|
755
|
+
/**
|
|
756
|
+
* <p>The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata <code>HOME_NET</code> variable. If your firewall uses an inspection VPC, you might want to override the <code>HOME_NET</code> variable with the CIDRs of your home networks. If you don't override <code>HOME_NET</code> with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.</p>
|
|
757
|
+
*/
|
|
758
|
+
RuleVariables?: Record<string, IPSet>;
|
|
759
|
+
}
|
|
736
760
|
/**
|
|
737
761
|
* @public
|
|
738
762
|
* @enum
|
|
@@ -752,6 +776,7 @@ export type RuleOrder = (typeof RuleOrder)[keyof typeof RuleOrder];
|
|
|
752
776
|
export declare const StreamExceptionPolicy: {
|
|
753
777
|
readonly CONTINUE: "CONTINUE";
|
|
754
778
|
readonly DROP: "DROP";
|
|
779
|
+
readonly REJECT: "REJECT";
|
|
755
780
|
};
|
|
756
781
|
/**
|
|
757
782
|
* @public
|
|
@@ -781,6 +806,10 @@ export interface StatefulEngineOptions {
|
|
|
781
806
|
* <p>
|
|
782
807
|
* <code>CONTINUE</code> - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to <code>drop http</code> traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a <code>flow:stateless</code> rule would still match, as would the <code>aws:drop_strict</code> default action.</p>
|
|
783
808
|
* </li>
|
|
809
|
+
* <li>
|
|
810
|
+
* <p>
|
|
811
|
+
* <code>REJECT</code> - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.</p>
|
|
812
|
+
* </li>
|
|
784
813
|
* </ul>
|
|
785
814
|
*/
|
|
786
815
|
StreamExceptionPolicy?: StreamExceptionPolicy | string;
|
|
@@ -968,6 +997,10 @@ export interface FirewallPolicy {
|
|
|
968
997
|
* <p>The Amazon Resource Name (ARN) of the TLS inspection configuration.</p>
|
|
969
998
|
*/
|
|
970
999
|
TLSInspectionConfigurationArn?: string;
|
|
1000
|
+
/**
|
|
1001
|
+
* <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
|
|
1002
|
+
*/
|
|
1003
|
+
PolicyVariables?: PolicyVariables;
|
|
971
1004
|
}
|
|
972
1005
|
/**
|
|
973
1006
|
* @public
|
|
@@ -1591,18 +1624,6 @@ export interface RulesSource {
|
|
|
1591
1624
|
*/
|
|
1592
1625
|
StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
|
|
1593
1626
|
}
|
|
1594
|
-
/**
|
|
1595
|
-
* @public
|
|
1596
|
-
* <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
|
|
1597
|
-
*/
|
|
1598
|
-
export interface IPSet {
|
|
1599
|
-
/**
|
|
1600
|
-
* <p>The list of IP addresses and address ranges, in CIDR notation.
|
|
1601
|
-
*
|
|
1602
|
-
* </p>
|
|
1603
|
-
*/
|
|
1604
|
-
Definition: string[] | undefined;
|
|
1605
|
-
}
|
|
1606
1627
|
/**
|
|
1607
1628
|
* @public
|
|
1608
1629
|
* <p>A set of port ranges for use in the rules in a rule group. </p>
|
|
@@ -2911,12 +2932,6 @@ export interface PutResourcePolicyRequest {
|
|
|
2911
2932
|
* <p>For a firewall policy resource, you can specify the following operations in the Actions section of the statement:</p>
|
|
2912
2933
|
* <ul>
|
|
2913
2934
|
* <li>
|
|
2914
|
-
* <p>network-firewall:CreateFirewall</p>
|
|
2915
|
-
* </li>
|
|
2916
|
-
* <li>
|
|
2917
|
-
* <p>network-firewall:UpdateFirewall</p>
|
|
2918
|
-
* </li>
|
|
2919
|
-
* <li>
|
|
2920
2935
|
* <p>network-firewall:AssociateFirewallPolicy</p>
|
|
2921
2936
|
* </li>
|
|
2922
2937
|
* <li>
|
|
@@ -105,6 +105,8 @@ export declare class InsufficientCapacityException extends __BaseException {
|
|
|
105
105
|
export declare const AttachmentStatus: {
|
|
106
106
|
readonly CREATING: "CREATING";
|
|
107
107
|
readonly DELETING: "DELETING";
|
|
108
|
+
readonly ERROR: "ERROR";
|
|
109
|
+
readonly FAILED: "FAILED";
|
|
108
110
|
readonly READY: "READY";
|
|
109
111
|
readonly SCALING: "SCALING";
|
|
110
112
|
};
|
|
@@ -220,6 +222,12 @@ export declare class LimitExceededException extends __BaseException {
|
|
|
220
222
|
opts: __ExceptionOptionType<LimitExceededException, __BaseException>
|
|
221
223
|
);
|
|
222
224
|
}
|
|
225
|
+
export interface IPSet {
|
|
226
|
+
Definition: string[] | undefined;
|
|
227
|
+
}
|
|
228
|
+
export interface PolicyVariables {
|
|
229
|
+
RuleVariables?: Record<string, IPSet>;
|
|
230
|
+
}
|
|
223
231
|
export declare const RuleOrder: {
|
|
224
232
|
readonly DEFAULT_ACTION_ORDER: "DEFAULT_ACTION_ORDER";
|
|
225
233
|
readonly STRICT_ORDER: "STRICT_ORDER";
|
|
@@ -228,6 +236,7 @@ export type RuleOrder = (typeof RuleOrder)[keyof typeof RuleOrder];
|
|
|
228
236
|
export declare const StreamExceptionPolicy: {
|
|
229
237
|
readonly CONTINUE: "CONTINUE";
|
|
230
238
|
readonly DROP: "DROP";
|
|
239
|
+
readonly REJECT: "REJECT";
|
|
231
240
|
};
|
|
232
241
|
export type StreamExceptionPolicy =
|
|
233
242
|
(typeof StreamExceptionPolicy)[keyof typeof StreamExceptionPolicy];
|
|
@@ -265,6 +274,7 @@ export interface FirewallPolicy {
|
|
|
265
274
|
StatefulDefaultActions?: string[];
|
|
266
275
|
StatefulEngineOptions?: StatefulEngineOptions;
|
|
267
276
|
TLSInspectionConfigurationArn?: string;
|
|
277
|
+
PolicyVariables?: PolicyVariables;
|
|
268
278
|
}
|
|
269
279
|
export interface CreateFirewallPolicyRequest {
|
|
270
280
|
FirewallPolicyName: string | undefined;
|
|
@@ -418,9 +428,6 @@ export interface RulesSource {
|
|
|
418
428
|
StatefulRules?: StatefulRule[];
|
|
419
429
|
StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
|
|
420
430
|
}
|
|
421
|
-
export interface IPSet {
|
|
422
|
-
Definition: string[] | undefined;
|
|
423
|
-
}
|
|
424
431
|
export interface PortSet {
|
|
425
432
|
Definition?: string[];
|
|
426
433
|
}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-network-firewall",
|
|
3
3
|
"description": "AWS SDK for JavaScript Network Firewall Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.327.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -21,9 +21,9 @@
|
|
|
21
21
|
"dependencies": {
|
|
22
22
|
"@aws-crypto/sha256-browser": "3.0.0",
|
|
23
23
|
"@aws-crypto/sha256-js": "3.0.0",
|
|
24
|
-
"@aws-sdk/client-sts": "3.
|
|
24
|
+
"@aws-sdk/client-sts": "3.327.0",
|
|
25
25
|
"@aws-sdk/config-resolver": "3.310.0",
|
|
26
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
26
|
+
"@aws-sdk/credential-provider-node": "3.327.0",
|
|
27
27
|
"@aws-sdk/fetch-http-handler": "3.310.0",
|
|
28
28
|
"@aws-sdk/hash-node": "3.310.0",
|
|
29
29
|
"@aws-sdk/invalid-dependency": "3.310.0",
|
|
@@ -32,11 +32,11 @@
|
|
|
32
32
|
"@aws-sdk/middleware-host-header": "3.325.0",
|
|
33
33
|
"@aws-sdk/middleware-logger": "3.325.0",
|
|
34
34
|
"@aws-sdk/middleware-recursion-detection": "3.325.0",
|
|
35
|
-
"@aws-sdk/middleware-retry": "3.
|
|
35
|
+
"@aws-sdk/middleware-retry": "3.327.0",
|
|
36
36
|
"@aws-sdk/middleware-serde": "3.325.0",
|
|
37
37
|
"@aws-sdk/middleware-signing": "3.325.0",
|
|
38
38
|
"@aws-sdk/middleware-stack": "3.325.0",
|
|
39
|
-
"@aws-sdk/middleware-user-agent": "3.
|
|
39
|
+
"@aws-sdk/middleware-user-agent": "3.327.0",
|
|
40
40
|
"@aws-sdk/node-config-provider": "3.310.0",
|
|
41
41
|
"@aws-sdk/node-http-handler": "3.321.1",
|
|
42
42
|
"@aws-sdk/protocol-http": "3.310.0",
|
|
@@ -48,8 +48,8 @@
|
|
|
48
48
|
"@aws-sdk/util-body-length-node": "3.310.0",
|
|
49
49
|
"@aws-sdk/util-defaults-mode-browser": "3.325.0",
|
|
50
50
|
"@aws-sdk/util-defaults-mode-node": "3.325.0",
|
|
51
|
-
"@aws-sdk/util-endpoints": "3.
|
|
52
|
-
"@aws-sdk/util-retry": "3.
|
|
51
|
+
"@aws-sdk/util-endpoints": "3.327.0",
|
|
52
|
+
"@aws-sdk/util-retry": "3.327.0",
|
|
53
53
|
"@aws-sdk/util-user-agent-browser": "3.310.0",
|
|
54
54
|
"@aws-sdk/util-user-agent-node": "3.310.0",
|
|
55
55
|
"@aws-sdk/util-utf8": "3.310.0",
|