@aws-sdk/client-network-firewall 3.325.0 → 3.327.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/dist-cjs/models/models_0.js +3 -0
  2. package/dist-es/models/models_0.js +3 -0
  3. package/dist-types/commands/AssociateFirewallPolicyCommand.d.ts +9 -0
  4. package/dist-types/commands/AssociateSubnetsCommand.d.ts +14 -0
  5. package/dist-types/commands/CreateFirewallCommand.d.ts +63 -0
  6. package/dist-types/commands/CreateFirewallPolicyCommand.d.ts +37 -1
  7. package/dist-types/commands/CreateRuleGroupCommand.d.ts +33 -0
  8. package/dist-types/commands/CreateTLSInspectionConfigurationCommand.d.ts +33 -0
  9. package/dist-types/commands/DeleteFirewallCommand.d.ts +63 -0
  10. package/dist-types/commands/DeleteFirewallPolicyCommand.d.ts +26 -0
  11. package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +4 -0
  12. package/dist-types/commands/DeleteRuleGroupCommand.d.ts +32 -0
  13. package/dist-types/commands/DeleteTLSInspectionConfigurationCommand.d.ts +32 -0
  14. package/dist-types/commands/DescribeFirewallCommand.d.ts +64 -0
  15. package/dist-types/commands/DescribeFirewallPolicyCommand.d.ts +81 -0
  16. package/dist-types/commands/DescribeLoggingConfigurationCommand.d.ts +17 -0
  17. package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +6 -0
  18. package/dist-types/commands/DescribeRuleGroupCommand.d.ts +157 -0
  19. package/dist-types/commands/DescribeRuleGroupMetadataCommand.d.ts +14 -0
  20. package/dist-types/commands/DescribeTLSInspectionConfigurationCommand.d.ts +73 -0
  21. package/dist-types/commands/DisassociateSubnetsCommand.d.ts +14 -0
  22. package/dist-types/commands/ListFirewallPoliciesCommand.d.ts +12 -0
  23. package/dist-types/commands/ListFirewallsCommand.d.ts +12 -0
  24. package/dist-types/commands/ListRuleGroupsCommand.d.ts +12 -0
  25. package/dist-types/commands/ListTLSInspectionConfigurationsCommand.d.ts +12 -0
  26. package/dist-types/commands/ListTagsForResourceCommand.d.ts +12 -0
  27. package/dist-types/commands/PutResourcePolicyCommand.d.ts +4 -0
  28. package/dist-types/commands/TagResourceCommand.d.ts +4 -0
  29. package/dist-types/commands/UntagResourceCommand.d.ts +4 -0
  30. package/dist-types/commands/UpdateFirewallDeleteProtectionCommand.d.ts +9 -0
  31. package/dist-types/commands/UpdateFirewallDescriptionCommand.d.ts +9 -0
  32. package/dist-types/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +12 -0
  33. package/dist-types/commands/UpdateFirewallPolicyChangeProtectionCommand.d.ts +9 -0
  34. package/dist-types/commands/UpdateFirewallPolicyCommand.d.ts +37 -1
  35. package/dist-types/commands/UpdateLoggingConfigurationCommand.d.ts +18 -0
  36. package/dist-types/commands/UpdateRuleGroupCommand.d.ts +33 -0
  37. package/dist-types/commands/UpdateSubnetChangeProtectionCommand.d.ts +9 -0
  38. package/dist-types/commands/UpdateTLSInspectionConfigurationCommand.d.ts +33 -0
  39. package/dist-types/models/models_0.d.ts +34 -19
  40. package/dist-types/ts3.4/models/models_0.d.ts +10 -3
  41. package/package.json +7 -7
@@ -37,6 +37,13 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
37
37
  * };
38
38
  * const command = new UpdateFirewallDeleteProtectionCommand(input);
39
39
  * const response = await client.send(command);
40
+ * // { // UpdateFirewallDeleteProtectionResponse
41
+ * // FirewallArn: "STRING_VALUE",
42
+ * // FirewallName: "STRING_VALUE",
43
+ * // DeleteProtection: true || false,
44
+ * // UpdateToken: "STRING_VALUE",
45
+ * // };
46
+ *
40
47
  * ```
41
48
  *
42
49
  * @param UpdateFirewallDeleteProtectionCommandInput - {@link UpdateFirewallDeleteProtectionCommandInput}
@@ -77,6 +84,8 @@ export interface UpdateFirewallDeleteProtectionCommandOutput extends UpdateFirew
77
84
  * @throws {@link ThrottlingException} (client fault)
78
85
  * <p>Unable to process the request due to throttling limitations.</p>
79
86
  *
87
+ * @throws {@link NetworkFirewallServiceException}
88
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
80
89
  *
81
90
  */
82
91
  export declare class UpdateFirewallDeleteProtectionCommand extends $Command<UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -35,6 +35,13 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
35
35
  * };
36
36
  * const command = new UpdateFirewallDescriptionCommand(input);
37
37
  * const response = await client.send(command);
38
+ * // { // UpdateFirewallDescriptionResponse
39
+ * // FirewallArn: "STRING_VALUE",
40
+ * // FirewallName: "STRING_VALUE",
41
+ * // Description: "STRING_VALUE",
42
+ * // UpdateToken: "STRING_VALUE",
43
+ * // };
44
+ *
38
45
  * ```
39
46
  *
40
47
  * @param UpdateFirewallDescriptionCommandInput - {@link UpdateFirewallDescriptionCommandInput}
@@ -72,6 +79,8 @@ export interface UpdateFirewallDescriptionCommandOutput extends UpdateFirewallDe
72
79
  * @throws {@link ThrottlingException} (client fault)
73
80
  * <p>Unable to process the request due to throttling limitations.</p>
74
81
  *
82
+ * @throws {@link NetworkFirewallServiceException}
83
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
75
84
  *
76
85
  */
77
86
  export declare class UpdateFirewallDescriptionCommand extends $Command<UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -37,6 +37,16 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
37
37
  * };
38
38
  * const command = new UpdateFirewallEncryptionConfigurationCommand(input);
39
39
  * const response = await client.send(command);
40
+ * // { // UpdateFirewallEncryptionConfigurationResponse
41
+ * // FirewallArn: "STRING_VALUE",
42
+ * // FirewallName: "STRING_VALUE",
43
+ * // UpdateToken: "STRING_VALUE",
44
+ * // EncryptionConfiguration: { // EncryptionConfiguration
45
+ * // KeyId: "STRING_VALUE",
46
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
47
+ * // },
48
+ * // };
49
+ *
40
50
  * ```
41
51
  *
42
52
  * @param UpdateFirewallEncryptionConfigurationCommandInput - {@link UpdateFirewallEncryptionConfigurationCommandInput}
@@ -77,6 +87,8 @@ export interface UpdateFirewallEncryptionConfigurationCommandOutput extends Upda
77
87
  * @throws {@link ThrottlingException} (client fault)
78
88
  * <p>Unable to process the request due to throttling limitations.</p>
79
89
  *
90
+ * @throws {@link NetworkFirewallServiceException}
91
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
80
92
  *
81
93
  */
82
94
  export declare class UpdateFirewallEncryptionConfigurationCommand extends $Command<UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -36,6 +36,13 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
36
36
  * };
37
37
  * const command = new UpdateFirewallPolicyChangeProtectionCommand(input);
38
38
  * const response = await client.send(command);
39
+ * // { // UpdateFirewallPolicyChangeProtectionResponse
40
+ * // UpdateToken: "STRING_VALUE",
41
+ * // FirewallArn: "STRING_VALUE",
42
+ * // FirewallName: "STRING_VALUE",
43
+ * // FirewallPolicyChangeProtection: true || false,
44
+ * // };
45
+ *
39
46
  * ```
40
47
  *
41
48
  * @param UpdateFirewallPolicyChangeProtectionCommandInput - {@link UpdateFirewallPolicyChangeProtectionCommandInput}
@@ -76,6 +83,8 @@ export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends Updat
76
83
  * @throws {@link ThrottlingException} (client fault)
77
84
  * <p>Unable to process the request due to throttling limitations.</p>
78
85
  *
86
+ * @throws {@link NetworkFirewallServiceException}
87
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
79
88
  *
80
89
  */
81
90
  export declare class UpdateFirewallPolicyChangeProtectionCommand extends $Command<UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -71,9 +71,18 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
71
71
  * ],
72
72
  * StatefulEngineOptions: { // StatefulEngineOptions
73
73
  * RuleOrder: "DEFAULT_ACTION_ORDER" || "STRICT_ORDER",
74
- * StreamExceptionPolicy: "DROP" || "CONTINUE",
74
+ * StreamExceptionPolicy: "DROP" || "CONTINUE" || "REJECT",
75
75
  * },
76
76
  * TLSInspectionConfigurationArn: "STRING_VALUE",
77
+ * PolicyVariables: { // PolicyVariables
78
+ * RuleVariables: { // IPSets
79
+ * "<keys>": { // IPSet
80
+ * Definition: [ // VariableDefinitionList // required
81
+ * "STRING_VALUE",
82
+ * ],
83
+ * },
84
+ * },
85
+ * },
77
86
  * },
78
87
  * Description: "STRING_VALUE",
79
88
  * DryRun: true || false,
@@ -84,6 +93,31 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
84
93
  * };
85
94
  * const command = new UpdateFirewallPolicyCommand(input);
86
95
  * const response = await client.send(command);
96
+ * // { // UpdateFirewallPolicyResponse
97
+ * // UpdateToken: "STRING_VALUE", // required
98
+ * // FirewallPolicyResponse: { // FirewallPolicyResponse
99
+ * // FirewallPolicyName: "STRING_VALUE", // required
100
+ * // FirewallPolicyArn: "STRING_VALUE", // required
101
+ * // FirewallPolicyId: "STRING_VALUE", // required
102
+ * // Description: "STRING_VALUE",
103
+ * // FirewallPolicyStatus: "ACTIVE" || "DELETING",
104
+ * // Tags: [ // TagList
105
+ * // { // Tag
106
+ * // Key: "STRING_VALUE", // required
107
+ * // Value: "STRING_VALUE", // required
108
+ * // },
109
+ * // ],
110
+ * // ConsumedStatelessRuleCapacity: Number("int"),
111
+ * // ConsumedStatefulRuleCapacity: Number("int"),
112
+ * // NumberOfAssociations: Number("int"),
113
+ * // EncryptionConfiguration: { // EncryptionConfiguration
114
+ * // KeyId: "STRING_VALUE",
115
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
116
+ * // },
117
+ * // LastModifiedTime: new Date("TIMESTAMP"),
118
+ * // },
119
+ * // };
120
+ *
87
121
  * ```
88
122
  *
89
123
  * @param UpdateFirewallPolicyCommandInput - {@link UpdateFirewallPolicyCommandInput}
@@ -121,6 +155,8 @@ export interface UpdateFirewallPolicyCommandOutput extends UpdateFirewallPolicyR
121
155
  * @throws {@link ThrottlingException} (client fault)
122
156
  * <p>Unable to process the request due to throttling limitations.</p>
123
157
  *
158
+ * @throws {@link NetworkFirewallServiceException}
159
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
124
160
  *
125
161
  */
126
162
  export declare class UpdateFirewallPolicyCommand extends $Command<UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -68,6 +68,22 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
68
68
  * };
69
69
  * const command = new UpdateLoggingConfigurationCommand(input);
70
70
  * const response = await client.send(command);
71
+ * // { // UpdateLoggingConfigurationResponse
72
+ * // FirewallArn: "STRING_VALUE",
73
+ * // FirewallName: "STRING_VALUE",
74
+ * // LoggingConfiguration: { // LoggingConfiguration
75
+ * // LogDestinationConfigs: [ // LogDestinationConfigs // required
76
+ * // { // LogDestinationConfig
77
+ * // LogType: "ALERT" || "FLOW", // required
78
+ * // LogDestinationType: "S3" || "CloudWatchLogs" || "KinesisDataFirehose", // required
79
+ * // LogDestination: { // LogDestinationMap // required
80
+ * // "<keys>": "STRING_VALUE",
81
+ * // },
82
+ * // },
83
+ * // ],
84
+ * // },
85
+ * // };
86
+ *
71
87
  * ```
72
88
  *
73
89
  * @param UpdateLoggingConfigurationCommandInput - {@link UpdateLoggingConfigurationCommandInput}
@@ -108,6 +124,8 @@ export interface UpdateLoggingConfigurationCommandOutput extends UpdateLoggingCo
108
124
  * @throws {@link ThrottlingException} (client fault)
109
125
  * <p>Unable to process the request due to throttling limitations.</p>
110
126
  *
127
+ * @throws {@link NetworkFirewallServiceException}
128
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
111
129
  *
112
130
  */
113
131
  export declare class UpdateLoggingConfigurationCommand extends $Command<UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -174,6 +174,37 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
174
174
  * };
175
175
  * const command = new UpdateRuleGroupCommand(input);
176
176
  * const response = await client.send(command);
177
+ * // { // UpdateRuleGroupResponse
178
+ * // UpdateToken: "STRING_VALUE", // required
179
+ * // RuleGroupResponse: { // RuleGroupResponse
180
+ * // RuleGroupArn: "STRING_VALUE", // required
181
+ * // RuleGroupName: "STRING_VALUE", // required
182
+ * // RuleGroupId: "STRING_VALUE", // required
183
+ * // Description: "STRING_VALUE",
184
+ * // Type: "STATELESS" || "STATEFUL",
185
+ * // Capacity: Number("int"),
186
+ * // RuleGroupStatus: "ACTIVE" || "DELETING",
187
+ * // Tags: [ // TagList
188
+ * // { // Tag
189
+ * // Key: "STRING_VALUE", // required
190
+ * // Value: "STRING_VALUE", // required
191
+ * // },
192
+ * // ],
193
+ * // ConsumedCapacity: Number("int"),
194
+ * // NumberOfAssociations: Number("int"),
195
+ * // EncryptionConfiguration: { // EncryptionConfiguration
196
+ * // KeyId: "STRING_VALUE",
197
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
198
+ * // },
199
+ * // SourceMetadata: { // SourceMetadata
200
+ * // SourceArn: "STRING_VALUE",
201
+ * // SourceUpdateToken: "STRING_VALUE",
202
+ * // },
203
+ * // SnsTopic: "STRING_VALUE",
204
+ * // LastModifiedTime: new Date("TIMESTAMP"),
205
+ * // },
206
+ * // };
207
+ *
177
208
  * ```
178
209
  *
179
210
  * @param UpdateRuleGroupCommandInput - {@link UpdateRuleGroupCommandInput}
@@ -211,6 +242,8 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
211
242
  * @throws {@link ThrottlingException} (client fault)
212
243
  * <p>Unable to process the request due to throttling limitations.</p>
213
244
  *
245
+ * @throws {@link NetworkFirewallServiceException}
246
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
214
247
  *
215
248
  */
216
249
  export declare class UpdateRuleGroupCommand extends $Command<UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -34,6 +34,13 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
34
34
  * };
35
35
  * const command = new UpdateSubnetChangeProtectionCommand(input);
36
36
  * const response = await client.send(command);
37
+ * // { // UpdateSubnetChangeProtectionResponse
38
+ * // UpdateToken: "STRING_VALUE",
39
+ * // FirewallArn: "STRING_VALUE",
40
+ * // FirewallName: "STRING_VALUE",
41
+ * // SubnetChangeProtection: true || false,
42
+ * // };
43
+ *
37
44
  * ```
38
45
  *
39
46
  * @param UpdateSubnetChangeProtectionCommandInput - {@link UpdateSubnetChangeProtectionCommandInput}
@@ -74,6 +81,8 @@ export interface UpdateSubnetChangeProtectionCommandOutput extends UpdateSubnetC
74
81
  * @throws {@link ThrottlingException} (client fault)
75
82
  * <p>Unable to process the request due to throttling limitations.</p>
76
83
  *
84
+ * @throws {@link NetworkFirewallServiceException}
85
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
77
86
  *
78
87
  */
79
88
  export declare class UpdateSubnetChangeProtectionCommand extends $Command<UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -83,6 +83,37 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
83
83
  * };
84
84
  * const command = new UpdateTLSInspectionConfigurationCommand(input);
85
85
  * const response = await client.send(command);
86
+ * // { // UpdateTLSInspectionConfigurationResponse
87
+ * // UpdateToken: "STRING_VALUE", // required
88
+ * // TLSInspectionConfigurationResponse: { // TLSInspectionConfigurationResponse
89
+ * // TLSInspectionConfigurationArn: "STRING_VALUE", // required
90
+ * // TLSInspectionConfigurationName: "STRING_VALUE", // required
91
+ * // TLSInspectionConfigurationId: "STRING_VALUE", // required
92
+ * // TLSInspectionConfigurationStatus: "ACTIVE" || "DELETING",
93
+ * // Description: "STRING_VALUE",
94
+ * // Tags: [ // TagList
95
+ * // { // Tag
96
+ * // Key: "STRING_VALUE", // required
97
+ * // Value: "STRING_VALUE", // required
98
+ * // },
99
+ * // ],
100
+ * // LastModifiedTime: new Date("TIMESTAMP"),
101
+ * // NumberOfAssociations: Number("int"),
102
+ * // EncryptionConfiguration: { // EncryptionConfiguration
103
+ * // KeyId: "STRING_VALUE",
104
+ * // Type: "CUSTOMER_KMS" || "AWS_OWNED_KMS_KEY", // required
105
+ * // },
106
+ * // Certificates: [ // Certificates
107
+ * // { // TlsCertificateData
108
+ * // CertificateArn: "STRING_VALUE",
109
+ * // CertificateSerial: "STRING_VALUE",
110
+ * // Status: "STRING_VALUE",
111
+ * // StatusMessage: "STRING_VALUE",
112
+ * // },
113
+ * // ],
114
+ * // },
115
+ * // };
116
+ *
86
117
  * ```
87
118
  *
88
119
  * @param UpdateTLSInspectionConfigurationCommandInput - {@link UpdateTLSInspectionConfigurationCommandInput}
@@ -120,6 +151,8 @@ export interface UpdateTLSInspectionConfigurationCommandOutput extends UpdateTLS
120
151
  * @throws {@link ThrottlingException} (client fault)
121
152
  * <p>Unable to process the request due to throttling limitations.</p>
122
153
  *
154
+ * @throws {@link NetworkFirewallServiceException}
155
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
123
156
  *
124
157
  */
125
158
  export declare class UpdateTLSInspectionConfigurationCommand extends $Command<UpdateTLSInspectionConfigurationCommandInput, UpdateTLSInspectionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
@@ -311,6 +311,8 @@ export declare class InsufficientCapacityException extends __BaseException {
311
311
  export declare const AttachmentStatus: {
312
312
  readonly CREATING: "CREATING";
313
313
  readonly DELETING: "DELETING";
314
+ readonly ERROR: "ERROR";
315
+ readonly FAILED: "FAILED";
314
316
  readonly READY: "READY";
315
317
  readonly SCALING: "SCALING";
316
318
  };
@@ -345,7 +347,7 @@ export interface Attachment {
345
347
  */
346
348
  Status?: AttachmentStatus | string;
347
349
  /**
348
- * <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the failure and how to resolve it. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
350
+ * <p>If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the error or failure and how to resolve it. A <code>FAILED</code> status indicates a non-recoverable state, and a <code>ERROR</code> status indicates an issue that you can fix. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the causes for failiure or errors and solutions available for this field, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-troubleshooting-endpoint-failures.html">Troubleshooting firewall endpoint failures</a> in the <i>Network Firewall Developer Guide</i>.</p>
349
351
  */
350
352
  StatusMessage?: string;
351
353
  }
@@ -733,6 +735,28 @@ export declare class LimitExceededException extends __BaseException {
733
735
  */
734
736
  constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
735
737
  }
738
+ /**
739
+ * @public
740
+ * <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
741
+ */
742
+ export interface IPSet {
743
+ /**
744
+ * <p>The list of IP addresses and address ranges, in CIDR notation.
745
+ *
746
+ * </p>
747
+ */
748
+ Definition: string[] | undefined;
749
+ }
750
+ /**
751
+ * @public
752
+ * <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
753
+ */
754
+ export interface PolicyVariables {
755
+ /**
756
+ * <p>The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata <code>HOME_NET</code> variable. If your firewall uses an inspection VPC, you might want to override the <code>HOME_NET</code> variable with the CIDRs of your home networks. If you don't override <code>HOME_NET</code> with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.</p>
757
+ */
758
+ RuleVariables?: Record<string, IPSet>;
759
+ }
736
760
  /**
737
761
  * @public
738
762
  * @enum
@@ -752,6 +776,7 @@ export type RuleOrder = (typeof RuleOrder)[keyof typeof RuleOrder];
752
776
  export declare const StreamExceptionPolicy: {
753
777
  readonly CONTINUE: "CONTINUE";
754
778
  readonly DROP: "DROP";
779
+ readonly REJECT: "REJECT";
755
780
  };
756
781
  /**
757
782
  * @public
@@ -781,6 +806,10 @@ export interface StatefulEngineOptions {
781
806
  * <p>
782
807
  * <code>CONTINUE</code> - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to <code>drop http</code> traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a <code>flow:stateless</code> rule would still match, as would the <code>aws:drop_strict</code> default action.</p>
783
808
  * </li>
809
+ * <li>
810
+ * <p>
811
+ * <code>REJECT</code> - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.</p>
812
+ * </li>
784
813
  * </ul>
785
814
  */
786
815
  StreamExceptionPolicy?: StreamExceptionPolicy | string;
@@ -968,6 +997,10 @@ export interface FirewallPolicy {
968
997
  * <p>The Amazon Resource Name (ARN) of the TLS inspection configuration.</p>
969
998
  */
970
999
  TLSInspectionConfigurationArn?: string;
1000
+ /**
1001
+ * <p>Contains variables that you can use to override default Suricata settings in your firewall policy.</p>
1002
+ */
1003
+ PolicyVariables?: PolicyVariables;
971
1004
  }
972
1005
  /**
973
1006
  * @public
@@ -1591,18 +1624,6 @@ export interface RulesSource {
1591
1624
  */
1592
1625
  StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
1593
1626
  }
1594
- /**
1595
- * @public
1596
- * <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
1597
- */
1598
- export interface IPSet {
1599
- /**
1600
- * <p>The list of IP addresses and address ranges, in CIDR notation.
1601
- *
1602
- * </p>
1603
- */
1604
- Definition: string[] | undefined;
1605
- }
1606
1627
  /**
1607
1628
  * @public
1608
1629
  * <p>A set of port ranges for use in the rules in a rule group. </p>
@@ -2911,12 +2932,6 @@ export interface PutResourcePolicyRequest {
2911
2932
  * <p>For a firewall policy resource, you can specify the following operations in the Actions section of the statement:</p>
2912
2933
  * <ul>
2913
2934
  * <li>
2914
- * <p>network-firewall:CreateFirewall</p>
2915
- * </li>
2916
- * <li>
2917
- * <p>network-firewall:UpdateFirewall</p>
2918
- * </li>
2919
- * <li>
2920
2935
  * <p>network-firewall:AssociateFirewallPolicy</p>
2921
2936
  * </li>
2922
2937
  * <li>
@@ -105,6 +105,8 @@ export declare class InsufficientCapacityException extends __BaseException {
105
105
  export declare const AttachmentStatus: {
106
106
  readonly CREATING: "CREATING";
107
107
  readonly DELETING: "DELETING";
108
+ readonly ERROR: "ERROR";
109
+ readonly FAILED: "FAILED";
108
110
  readonly READY: "READY";
109
111
  readonly SCALING: "SCALING";
110
112
  };
@@ -220,6 +222,12 @@ export declare class LimitExceededException extends __BaseException {
220
222
  opts: __ExceptionOptionType<LimitExceededException, __BaseException>
221
223
  );
222
224
  }
225
+ export interface IPSet {
226
+ Definition: string[] | undefined;
227
+ }
228
+ export interface PolicyVariables {
229
+ RuleVariables?: Record<string, IPSet>;
230
+ }
223
231
  export declare const RuleOrder: {
224
232
  readonly DEFAULT_ACTION_ORDER: "DEFAULT_ACTION_ORDER";
225
233
  readonly STRICT_ORDER: "STRICT_ORDER";
@@ -228,6 +236,7 @@ export type RuleOrder = (typeof RuleOrder)[keyof typeof RuleOrder];
228
236
  export declare const StreamExceptionPolicy: {
229
237
  readonly CONTINUE: "CONTINUE";
230
238
  readonly DROP: "DROP";
239
+ readonly REJECT: "REJECT";
231
240
  };
232
241
  export type StreamExceptionPolicy =
233
242
  (typeof StreamExceptionPolicy)[keyof typeof StreamExceptionPolicy];
@@ -265,6 +274,7 @@ export interface FirewallPolicy {
265
274
  StatefulDefaultActions?: string[];
266
275
  StatefulEngineOptions?: StatefulEngineOptions;
267
276
  TLSInspectionConfigurationArn?: string;
277
+ PolicyVariables?: PolicyVariables;
268
278
  }
269
279
  export interface CreateFirewallPolicyRequest {
270
280
  FirewallPolicyName: string | undefined;
@@ -418,9 +428,6 @@ export interface RulesSource {
418
428
  StatefulRules?: StatefulRule[];
419
429
  StatelessRulesAndCustomActions?: StatelessRulesAndCustomActions;
420
430
  }
421
- export interface IPSet {
422
- Definition: string[] | undefined;
423
- }
424
431
  export interface PortSet {
425
432
  Definition?: string[];
426
433
  }
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-network-firewall",
3
3
  "description": "AWS SDK for JavaScript Network Firewall Client for Node.js, Browser and React Native",
4
- "version": "3.325.0",
4
+ "version": "3.327.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -21,9 +21,9 @@
21
21
  "dependencies": {
22
22
  "@aws-crypto/sha256-browser": "3.0.0",
23
23
  "@aws-crypto/sha256-js": "3.0.0",
24
- "@aws-sdk/client-sts": "3.325.0",
24
+ "@aws-sdk/client-sts": "3.327.0",
25
25
  "@aws-sdk/config-resolver": "3.310.0",
26
- "@aws-sdk/credential-provider-node": "3.325.0",
26
+ "@aws-sdk/credential-provider-node": "3.327.0",
27
27
  "@aws-sdk/fetch-http-handler": "3.310.0",
28
28
  "@aws-sdk/hash-node": "3.310.0",
29
29
  "@aws-sdk/invalid-dependency": "3.310.0",
@@ -32,11 +32,11 @@
32
32
  "@aws-sdk/middleware-host-header": "3.325.0",
33
33
  "@aws-sdk/middleware-logger": "3.325.0",
34
34
  "@aws-sdk/middleware-recursion-detection": "3.325.0",
35
- "@aws-sdk/middleware-retry": "3.325.0",
35
+ "@aws-sdk/middleware-retry": "3.327.0",
36
36
  "@aws-sdk/middleware-serde": "3.325.0",
37
37
  "@aws-sdk/middleware-signing": "3.325.0",
38
38
  "@aws-sdk/middleware-stack": "3.325.0",
39
- "@aws-sdk/middleware-user-agent": "3.325.0",
39
+ "@aws-sdk/middleware-user-agent": "3.327.0",
40
40
  "@aws-sdk/node-config-provider": "3.310.0",
41
41
  "@aws-sdk/node-http-handler": "3.321.1",
42
42
  "@aws-sdk/protocol-http": "3.310.0",
@@ -48,8 +48,8 @@
48
48
  "@aws-sdk/util-body-length-node": "3.310.0",
49
49
  "@aws-sdk/util-defaults-mode-browser": "3.325.0",
50
50
  "@aws-sdk/util-defaults-mode-node": "3.325.0",
51
- "@aws-sdk/util-endpoints": "3.319.0",
52
- "@aws-sdk/util-retry": "3.310.0",
51
+ "@aws-sdk/util-endpoints": "3.327.0",
52
+ "@aws-sdk/util-retry": "3.327.0",
53
53
  "@aws-sdk/util-user-agent-browser": "3.310.0",
54
54
  "@aws-sdk/util-user-agent-node": "3.310.0",
55
55
  "@aws-sdk/util-utf8": "3.310.0",