@aws-sdk/client-network-firewall 3.395.0 → 3.403.0

package/dist-cjs/endpoint/ruleset.js

@@ -3,5 +3,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ruleSet = void 0;
 const q = "required", r = "fn", s = "argv", t = "ref";
 const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
-const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
+const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }, { conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
 exports.ruleSet = _data;

package/dist-cjs/protocols/Aws_json1_0.js

@@ -516,12 +516,18 @@ const de_CreateTLSInspectionConfigurationCommandError = async (output, context)
     };
     const errorCode = loadRestJsonErrorCode(output, parsedOutput.body);
     switch (errorCode) {
+        case "InsufficientCapacityException":
+        case "com.amazonaws.networkfirewall#InsufficientCapacityException":
+            throw await de_InsufficientCapacityExceptionRes(parsedOutput, context);
         case "InternalServerError":
         case "com.amazonaws.networkfirewall#InternalServerError":
             throw await de_InternalServerErrorRes(parsedOutput, context);
         case "InvalidRequestException":
         case "com.amazonaws.networkfirewall#InvalidRequestException":
             throw await de_InvalidRequestExceptionRes(parsedOutput, context);
+        case "LimitExceededException":
+        case "com.amazonaws.networkfirewall#LimitExceededException":
+            throw await de_LimitExceededExceptionRes(parsedOutput, context);
         case "ThrottlingException":
         case "com.amazonaws.networkfirewall#ThrottlingException":
             throw await de_ThrottlingExceptionRes(parsedOutput, context);

package/dist-cjs/runtimeExtensions.js

@@ -1,16 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveRuntimeExtensions = void 0;
-const types_1 = require("@smithy/types");
+const smithy_client_1 = require("@smithy/smithy-client");
 const asPartial = (t) => t;
 const resolveRuntimeExtensions = (runtimeConfig, extensions) => {
-    const clientConfiguration = {
-        ...asPartial((0, types_1.getDefaultClientConfiguration)(runtimeConfig)),
+    const extensionConfiguration = {
+        ...asPartial((0, smithy_client_1.getDefaultExtensionConfiguration)(runtimeConfig)),
     };
-    extensions.forEach((extension) => extension.configureClient(clientConfiguration));
+    extensions.forEach((extension) => extension.configure(extensionConfiguration));
     return {
         ...runtimeConfig,
-        ...(0, types_1.resolveDefaultRuntimeConfig)(clientConfiguration),
+        ...(0, smithy_client_1.resolveDefaultRuntimeConfig)(extensionConfiguration),
     };
 };
 exports.resolveRuntimeExtensions = resolveRuntimeExtensions;

package/dist-es/endpoint/ruleset.js

@@ -1,4 +1,4 @@
 const q = "required", r = "fn", s = "argv", t = "ref";
 const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
-const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
+const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }, { conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ endpoint: { url: "https://network-firewall-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://network-firewall.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
 export const ruleSet = _data;

package/dist-es/protocols/Aws_json1_0.js

@@ -470,12 +470,18 @@ const de_CreateTLSInspectionConfigurationCommandError = async (output, context)
     };
     const errorCode = loadRestJsonErrorCode(output, parsedOutput.body);
     switch (errorCode) {
+        case "InsufficientCapacityException":
+        case "com.amazonaws.networkfirewall#InsufficientCapacityException":
+            throw await de_InsufficientCapacityExceptionRes(parsedOutput, context);
         case "InternalServerError":
         case "com.amazonaws.networkfirewall#InternalServerError":
             throw await de_InternalServerErrorRes(parsedOutput, context);
         case "InvalidRequestException":
         case "com.amazonaws.networkfirewall#InvalidRequestException":
             throw await de_InvalidRequestExceptionRes(parsedOutput, context);
+        case "LimitExceededException":
+        case "com.amazonaws.networkfirewall#LimitExceededException":
+            throw await de_LimitExceededExceptionRes(parsedOutput, context);
         case "ThrottlingException":
         case "com.amazonaws.networkfirewall#ThrottlingException":
             throw await de_ThrottlingExceptionRes(parsedOutput, context);

package/dist-es/runtimeExtensions.js

@@ -1,12 +1,12 @@
-import { getDefaultClientConfiguration, resolveDefaultRuntimeConfig } from "@smithy/types";
+import { getDefaultExtensionConfiguration, resolveDefaultRuntimeConfig } from "@smithy/smithy-client";
 const asPartial = (t) => t;
 export const resolveRuntimeExtensions = (runtimeConfig, extensions) => {
-    const clientConfiguration = {
-        ...asPartial(getDefaultClientConfiguration(runtimeConfig)),
+    const extensionConfiguration = {
+        ...asPartial(getDefaultExtensionConfiguration(runtimeConfig)),
     };
-    extensions.forEach((extension) => extension.configureClient(clientConfiguration));
+    extensions.forEach((extension) => extension.configure(extensionConfiguration));
     return {
         ...runtimeConfig,
-        ...resolveDefaultRuntimeConfig(clientConfiguration),
+        ...resolveDefaultRuntimeConfig(extensionConfiguration),
     };
 };

package/dist-types/commands/CreateTLSInspectionConfigurationCommand.d.ts

@@ -24,7 +24,7 @@ export interface CreateTLSInspectionConfigurationCommandOutput extends CreateTLS
 /**
  * @public
  * <p>Creates an Network Firewall TLS inspection configuration. A TLS inspection configuration contains the Certificate Manager certificate references that Network Firewall uses to decrypt and re-encrypt inbound traffic.</p>
- *          <p>After you create a TLS inspection configuration, you associate it with a firewall policy.</p>
+ *          <p>After you create a TLS inspection configuration, you associate it with a new firewall policy.</p>
  *          <p>To update the settings for a TLS inspection configuration, use <a>UpdateTLSInspectionConfiguration</a>.</p>
  *          <p>To manage a TLS inspection configuration's tags, use the standard Amazon Web Services resource tagging operations, <a>ListTagsForResource</a>, <a>TagResource</a>, and <a>UntagResource</a>.</p>
  *          <p>To retrieve information about TLS inspection configurations, use <a>ListTLSInspectionConfigurations</a> and <a>DescribeTLSInspectionConfiguration</a>.</p>
@@ -133,6 +133,10 @@ export interface CreateTLSInspectionConfigurationCommandOutput extends CreateTLS
  * @see {@link CreateTLSInspectionConfigurationCommandOutput} for command's `response` shape.
  * @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
  *
+ * @throws {@link InsufficientCapacityException} (server fault)
+ *  <p>Amazon Web Services doesn't currently have enough available capacity to fulfill your request. Try your
+ *          request later. </p>
+ *
  * @throws {@link InternalServerError} (server fault)
  *  <p>Your request is valid, but Network Firewall couldn’t perform the operation because of a
  *          system problem. Retry your request. </p>
@@ -153,6 +157,9 @@ export interface CreateTLSInspectionConfigurationCommandOutput extends CreateTLS
  *             </li>
  *          </ul>
  *
+ * @throws {@link LimitExceededException} (client fault)
+ *  <p>Unable to perform the operation because doing so would violate a limit setting. </p>
+ *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>Unable to process the request due to throttling limitations.</p>
  *

package/dist-types/extensionConfiguration.d.ts

@@ -0,0 +1,6 @@
+import { DefaultExtensionConfiguration } from "@smithy/types";
+/**
+ * @internal
+ */
+export interface NetworkFirewallExtensionConfiguration extends DefaultExtensionConfiguration {
+}

package/dist-types/models/models_0.d.ts

@@ -1457,12 +1457,12 @@ export interface Header {
 export interface RuleOption {
     /**
      * @public
-     * <p></p>
+     * <p>The keyword for the Suricata compatible rule option. You must include a <code>sid</code> (signature ID), and can optionally include other keywords. For information about Suricata compatible keywords, see <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options">Rule options</a> in the Suricata documentation.</p>
      */
     Keyword: string | undefined;
     /**
      * @public
-     * <p></p>
+     * <p>The settings of the Suricata compatible rule option. Rule options have zero or more setting values, and the number of possible and required settings depends on the <code>Keyword</code>. For more information about the settings for specific options, see <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options">Rule options</a>.</p>
      */
     Settings?: string[];
 }
@@ -1471,7 +1471,7 @@ export interface RuleOption {
  * <p>A single Suricata rules specification, for use in a stateful rule group.
  *        Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options.
  *        For information about the Suricata <code>Rules</code> format, see
- *                                         <a href="https://suricata.readthedocs.iorules/intro.html#">Rules Format</a>. </p>
+ *                                         <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html">Rules Format</a>. </p>
  */
 export interface StatefulRule {
     /**
@@ -1501,13 +1501,6 @@ export interface StatefulRule {
      *                can enable the rule with <code>ALERT</code> action, verify in the logs that the rule
      *                is filtering as you want, then change the action to <code>DROP</code>.</p>
      *             </li>
-     *             <li>
-     *                <p>
-     *                   <b>REJECT</b> - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a <code>RST</code> bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the <a>Firewall</a>
-     *                   <a>LoggingConfiguration</a>.</p>
-     *                <p>
-     *                   <code>REJECT</code> isn't currently available for use with IMAP and FTP protocols.</p>
-     *             </li>
      *          </ul>
      */
     Action: StatefulAction | string | undefined;
@@ -1762,7 +1755,7 @@ export interface RulesSource {
      * <p>An array of individual stateful rules inspection criteria to be used together in a stateful rule group.
      *        Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options.
      *        For information about the Suricata <code>Rules</code> format, see
-     *                                         <a href="https://suricata.readthedocs.iorules/intro.html#">Rules Format</a>. </p>
+     *                                         <a href="https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html">Rules Format</a>. </p>
      */
     StatefulRules?: StatefulRule[];
     /**
@@ -2161,7 +2154,7 @@ export interface ServerCertificateConfiguration {
  * @public
  * <p>The object that defines a TLS inspection configuration. This, along with <a>TLSInspectionConfigurationResponse</a>, define the TLS inspection configuration. You can retrieve all objects for a TLS inspection configuration by calling <a>DescribeTLSInspectionConfiguration</a>. </p>
  *          <p>Network Firewall uses a TLS inspection configuration to decrypt traffic. Network Firewall re-encrypts the traffic before sending it to its destination.</p>
- *          <p>To use a TLS inspection configuration, you add it to a Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
+ *          <p>To use a TLS inspection configuration, you add it to a new Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
  * inspection configurations</a> in the <i>Network Firewall Developer Guide</i>.</p>
  */
 export interface TLSInspectionConfiguration {
@@ -2184,7 +2177,7 @@ export interface CreateTLSInspectionConfigurationRequest {
      * @public
      * <p>The object that defines a TLS inspection configuration. This, along with <a>TLSInspectionConfigurationResponse</a>, define the TLS inspection configuration. You can retrieve all objects for a TLS inspection configuration by calling <a>DescribeTLSInspectionConfiguration</a>. </p>
      *          <p>Network Firewall uses a TLS inspection configuration to decrypt traffic. Network Firewall re-encrypts the traffic before sending it to its destination.</p>
-     *          <p>To use a TLS inspection configuration, you add it to a Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
+     *          <p>To use a TLS inspection configuration, you add it to a new Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
      * inspection configurations</a> in the <i>Network Firewall Developer Guide</i>.</p>
      */
     TLSInspectionConfiguration: TLSInspectionConfiguration | undefined;
@@ -2827,7 +2820,7 @@ export interface DescribeTLSInspectionConfigurationResponse {
      * @public
      * <p>The object that defines a TLS inspection configuration. This, along with <a>TLSInspectionConfigurationResponse</a>, define the TLS inspection configuration. You can retrieve all objects for a TLS inspection configuration by calling <a>DescribeTLSInspectionConfiguration</a>. </p>
      *          <p>Network Firewall uses a TLS inspection configuration to decrypt traffic. Network Firewall re-encrypts the traffic before sending it to its destination.</p>
-     *          <p>To use a TLS inspection configuration, you add it to a Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
+     *          <p>To use a TLS inspection configuration, you add it to a new Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
      * inspection configurations</a> in the <i>Network Firewall Developer Guide</i>.</p>
      */
     TLSInspectionConfiguration?: TLSInspectionConfiguration;
@@ -3503,7 +3496,7 @@ export interface UpdateFirewallPolicyRequest {
     FirewallPolicyName?: string;
     /**
      * @public
-     * <p>The updated firewall policy to use for the firewall. </p>
+     * <p>The updated firewall policy to use for the firewall. You can't add or remove a <a>TLSInspectionConfiguration</a> after you create a firewall policy. However, you can replace an existing TLS inspection configuration with another <code>TLSInspectionConfiguration</code>.</p>
      */
     FirewallPolicy: FirewallPolicy | undefined;
     /**
@@ -3816,7 +3809,7 @@ export interface UpdateTLSInspectionConfigurationRequest {
      * @public
      * <p>The object that defines a TLS inspection configuration. This, along with <a>TLSInspectionConfigurationResponse</a>, define the TLS inspection configuration. You can retrieve all objects for a TLS inspection configuration by calling <a>DescribeTLSInspectionConfiguration</a>. </p>
      *          <p>Network Firewall uses a TLS inspection configuration to decrypt traffic. Network Firewall re-encrypts the traffic before sending it to its destination.</p>
-     *          <p>To use a TLS inspection configuration, you add it to a Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
+     *          <p>To use a TLS inspection configuration, you add it to a new Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html">Decrypting SSL/TLS traffic with TLS
      * inspection configurations</a> in the <i>Network Firewall Developer Guide</i>.</p>
      */
     TLSInspectionConfiguration: TLSInspectionConfiguration | undefined;

package/dist-types/runtimeExtensions.d.ts

@@ -1,9 +1,9 @@
-import { NetworkFirewallClientConfiguration } from "./clientConfiguration";
+import { NetworkFirewallExtensionConfiguration } from "./extensionConfiguration";
 /**
  * @public
  */
 export interface RuntimeExtension {
-    configureClient(clientConfiguration: NetworkFirewallClientConfiguration): void;
+    configure(clientConfiguration: NetworkFirewallExtensionConfiguration): void;
 }
 /**
  * @public

package/dist-types/ts3.4/extensionConfiguration.d.ts

@@ -0,0 +1,3 @@
+import { DefaultExtensionConfiguration } from "@smithy/types";
+export interface NetworkFirewallExtensionConfiguration
+  extends DefaultExtensionConfiguration {}

package/dist-types/ts3.4/runtimeExtensions.d.ts

@@ -1,8 +1,6 @@
-import { NetworkFirewallClientConfiguration } from "./clientConfiguration";
+import { NetworkFirewallExtensionConfiguration } from "./extensionConfiguration";
 export interface RuntimeExtension {
-  configureClient(
-    clientConfiguration: NetworkFirewallClientConfiguration
-  ): void;
+  configure(clientConfiguration: NetworkFirewallExtensionConfiguration): void;
 }
 export interface RuntimeExtensionsConfig {
   extensions: RuntimeExtension[];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-network-firewall",
   "description": "AWS SDK for JavaScript Network Firewall Client for Node.js, Browser and React Native",
-  "version": "3.395.0",
+  "version": "3.403.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -21,37 +21,37 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.395.0",
-    "@aws-sdk/credential-provider-node": "3.395.0",
-    "@aws-sdk/middleware-host-header": "3.391.0",
-    "@aws-sdk/middleware-logger": "3.391.0",
-    "@aws-sdk/middleware-recursion-detection": "3.391.0",
-    "@aws-sdk/middleware-signing": "3.391.0",
-    "@aws-sdk/middleware-user-agent": "3.391.0",
-    "@aws-sdk/types": "3.391.0",
-    "@aws-sdk/util-endpoints": "3.391.0",
-    "@aws-sdk/util-user-agent-browser": "3.391.0",
-    "@aws-sdk/util-user-agent-node": "3.391.0",
-    "@smithy/config-resolver": "^2.0.3",
-    "@smithy/fetch-http-handler": "^2.0.3",
-    "@smithy/hash-node": "^2.0.3",
-    "@smithy/invalid-dependency": "^2.0.3",
-    "@smithy/middleware-content-length": "^2.0.3",
-    "@smithy/middleware-endpoint": "^2.0.3",
-    "@smithy/middleware-retry": "^2.0.3",
-    "@smithy/middleware-serde": "^2.0.3",
+    "@aws-sdk/client-sts": "3.398.0",
+    "@aws-sdk/credential-provider-node": "3.398.0",
+    "@aws-sdk/middleware-host-header": "3.398.0",
+    "@aws-sdk/middleware-logger": "3.398.0",
+    "@aws-sdk/middleware-recursion-detection": "3.398.0",
+    "@aws-sdk/middleware-signing": "3.398.0",
+    "@aws-sdk/middleware-user-agent": "3.398.0",
+    "@aws-sdk/types": "3.398.0",
+    "@aws-sdk/util-endpoints": "3.398.0",
+    "@aws-sdk/util-user-agent-browser": "3.398.0",
+    "@aws-sdk/util-user-agent-node": "3.398.0",
+    "@smithy/config-resolver": "^2.0.5",
+    "@smithy/fetch-http-handler": "^2.0.5",
+    "@smithy/hash-node": "^2.0.5",
+    "@smithy/invalid-dependency": "^2.0.5",
+    "@smithy/middleware-content-length": "^2.0.5",
+    "@smithy/middleware-endpoint": "^2.0.5",
+    "@smithy/middleware-retry": "^2.0.5",
+    "@smithy/middleware-serde": "^2.0.5",
     "@smithy/middleware-stack": "^2.0.0",
-    "@smithy/node-config-provider": "^2.0.3",
-    "@smithy/node-http-handler": "^2.0.3",
-    "@smithy/protocol-http": "^2.0.3",
-    "@smithy/smithy-client": "^2.0.3",
-    "@smithy/types": "^2.2.0",
-    "@smithy/url-parser": "^2.0.3",
+    "@smithy/node-config-provider": "^2.0.5",
+    "@smithy/node-http-handler": "^2.0.5",
+    "@smithy/protocol-http": "^2.0.5",
+    "@smithy/smithy-client": "^2.0.5",
+    "@smithy/types": "^2.2.2",
+    "@smithy/url-parser": "^2.0.5",
     "@smithy/util-base64": "^2.0.0",
     "@smithy/util-body-length-browser": "^2.0.0",
-    "@smithy/util-body-length-node": "^2.0.0",
-    "@smithy/util-defaults-mode-browser": "^2.0.3",
-    "@smithy/util-defaults-mode-node": "^2.0.3",
+    "@smithy/util-body-length-node": "^2.1.0",
+    "@smithy/util-defaults-mode-browser": "^2.0.5",
+    "@smithy/util-defaults-mode-node": "^2.0.5",
     "@smithy/util-retry": "^2.0.0",
     "@smithy/util-utf8": "^2.0.0",
     "tslib": "^2.5.0"

package/dist-types/clientConfiguration.d.ts

@@ -1,6 +0,0 @@
-import { DefaultClientConfiguration } from "@smithy/types";
-/**
- * @internal
- */
-export interface NetworkFirewallClientConfiguration extends DefaultClientConfiguration {
-}

package/dist-types/ts3.4/clientConfiguration.d.ts

@@ -1,3 +0,0 @@
-import { DefaultClientConfiguration } from "@smithy/types";
-export interface NetworkFirewallClientConfiguration
-  extends DefaultClientConfiguration {}