@aws-sdk/client-network-firewall 3.43.0 → 3.47.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/CHANGELOG.md +47 -0
  2. package/dist-cjs/NetworkFirewall.js +15 -0
  3. package/dist-cjs/commands/DescribeRuleGroupMetadataCommand.js +36 -0
  4. package/dist-cjs/commands/index.js +1 -0
  5. package/dist-cjs/endpoints.js +1 -28
  6. package/dist-cjs/models/models_0.js +30 -75
  7. package/dist-cjs/protocols/Aws_json1_0.js +166 -2
  8. package/dist-cjs/runtimeConfig.browser.js +7 -2
  9. package/dist-cjs/runtimeConfig.js +9 -3
  10. package/dist-es/NetworkFirewall.js +15 -0
  11. package/dist-es/commands/DescribeRuleGroupMetadataCommand.js +39 -0
  12. package/dist-es/commands/index.js +1 -0
  13. package/dist-es/endpoints.js +1 -28
  14. package/dist-es/models/models_0.js +21 -48
  15. package/dist-es/protocols/Aws_json1_0.js +225 -59
  16. package/dist-es/runtimeConfig.browser.js +12 -3
  17. package/dist-es/runtimeConfig.js +13 -6
  18. package/dist-types/NetworkFirewall.d.ts +13 -1
  19. package/dist-types/NetworkFirewallClient.d.ts +8 -3
  20. package/dist-types/commands/DescribeRuleGroupMetadataCommand.d.ts +38 -0
  21. package/dist-types/commands/UpdateFirewallPolicyChangeProtectionCommand.d.ts +3 -1
  22. package/dist-types/commands/index.d.ts +1 -0
  23. package/dist-types/models/models_0.d.ts +136 -85
  24. package/dist-types/protocols/Aws_json1_0.d.ts +3 -0
  25. package/dist-types/runtimeConfig.browser.d.ts +3 -2
  26. package/dist-types/runtimeConfig.d.ts +4 -3
  27. package/dist-types/runtimeConfig.native.d.ts +1 -0
  28. package/dist-types/ts3.4/NetworkFirewall.d.ts +5 -0
  29. package/dist-types/ts3.4/NetworkFirewallClient.d.ts +6 -3
  30. package/dist-types/ts3.4/commands/DescribeRuleGroupMetadataCommand.d.ts +17 -0
  31. package/dist-types/ts3.4/commands/index.d.ts +1 -0
  32. package/dist-types/ts3.4/models/models_0.d.ts +50 -48
  33. package/dist-types/ts3.4/protocols/Aws_json1_0.d.ts +3 -0
  34. package/dist-types/ts3.4/runtimeConfig.browser.d.ts +3 -2
  35. package/dist-types/ts3.4/runtimeConfig.d.ts +4 -3
  36. package/dist-types/ts3.4/runtimeConfig.native.d.ts +1 -0
  37. package/package.json +39 -46
@@ -7,7 +7,9 @@ export interface UpdateFirewallPolicyChangeProtectionCommandInput extends Update
7
7
  export interface UpdateFirewallPolicyChangeProtectionCommandOutput extends UpdateFirewallPolicyChangeProtectionResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p></p>
10
+ * <p>Modifies the flag, <code>ChangeProtection</code>, which indicates whether it
11
+ * is possible to change the firewall. If the flag is set to <code>TRUE</code>, the firewall is protected
12
+ * from changes. This setting helps protect against accidentally changing a firewall that's in use.</p>
11
13
  * @example
12
14
  * Use a bare-bones client and the command you need to make an API call.
13
15
  * ```javascript
@@ -12,6 +12,7 @@ export * from "./DescribeFirewallPolicyCommand";
12
12
  export * from "./DescribeLoggingConfigurationCommand";
13
13
  export * from "./DescribeResourcePolicyCommand";
14
14
  export * from "./DescribeRuleGroupCommand";
15
+ export * from "./DescribeRuleGroupMetadataCommand";
15
16
  export * from "./DisassociateSubnetsCommand";
16
17
  export * from "./ListFirewallPoliciesCommand";
17
18
  export * from "./ListFirewallsCommand";
@@ -147,12 +147,6 @@ export interface InternalServerError extends __SmithyException, $MetadataBearer
147
147
  $fault: "server";
148
148
  Message?: string;
149
149
  }
150
- export declare namespace InternalServerError {
151
- /**
152
- * @internal
153
- */
154
- const filterSensitiveLog: (obj: InternalServerError) => any;
155
- }
156
150
  /**
157
151
  * <p>The operation failed because it's not valid. For example, you might have tried to delete
158
152
  * a rule group or firewall policy that's in use.</p>
@@ -162,12 +156,6 @@ export interface InvalidOperationException extends __SmithyException, $MetadataB
162
156
  $fault: "client";
163
157
  Message?: string;
164
158
  }
165
- export declare namespace InvalidOperationException {
166
- /**
167
- * @internal
168
- */
169
- const filterSensitiveLog: (obj: InvalidOperationException) => any;
170
- }
171
159
  /**
172
160
  * <p>The operation failed because of a problem with your request. Examples include: </p>
173
161
  * <ul>
@@ -189,12 +177,6 @@ export interface InvalidRequestException extends __SmithyException, $MetadataBea
189
177
  $fault: "client";
190
178
  Message?: string;
191
179
  }
192
- export declare namespace InvalidRequestException {
193
- /**
194
- * @internal
195
- */
196
- const filterSensitiveLog: (obj: InvalidRequestException) => any;
197
- }
198
180
  /**
199
181
  * <p>The token you provided is stale or isn't valid for the operation. </p>
200
182
  */
@@ -203,12 +185,6 @@ export interface InvalidTokenException extends __SmithyException, $MetadataBeare
203
185
  $fault: "client";
204
186
  Message?: string;
205
187
  }
206
- export declare namespace InvalidTokenException {
207
- /**
208
- * @internal
209
- */
210
- const filterSensitiveLog: (obj: InvalidTokenException) => any;
211
- }
212
188
  /**
213
189
  * <p>Unable to locate a resource using the parameters that you provided.</p>
214
190
  */
@@ -217,12 +193,6 @@ export interface ResourceNotFoundException extends __SmithyException, $MetadataB
217
193
  $fault: "client";
218
194
  Message?: string;
219
195
  }
220
- export declare namespace ResourceNotFoundException {
221
- /**
222
- * @internal
223
- */
224
- const filterSensitiveLog: (obj: ResourceNotFoundException) => any;
225
- }
226
196
  /**
227
197
  * <p>Unable to process the request due to throttling limitations.</p>
228
198
  */
@@ -231,12 +201,6 @@ export interface ThrottlingException extends __SmithyException, $MetadataBearer
231
201
  $fault: "client";
232
202
  Message?: string;
233
203
  }
234
- export declare namespace ThrottlingException {
235
- /**
236
- * @internal
237
- */
238
- const filterSensitiveLog: (obj: ThrottlingException) => any;
239
- }
240
204
  /**
241
205
  * <p>The ID for a subnet that you want to associate with the firewall. This is used with
242
206
  * <a>CreateFirewall</a> and <a>AssociateSubnets</a>. AWS Network Firewall
@@ -318,12 +282,6 @@ export interface InsufficientCapacityException extends __SmithyException, $Metad
318
282
  $fault: "server";
319
283
  Message?: string;
320
284
  }
321
- export declare namespace InsufficientCapacityException {
322
- /**
323
- * @internal
324
- */
325
- const filterSensitiveLog: (obj: InsufficientCapacityException) => any;
326
- }
327
285
  export declare enum AttachmentStatus {
328
286
  CREATING = "CREATING",
329
287
  DELETING = "DELETING",
@@ -652,12 +610,6 @@ export interface LimitExceededException extends __SmithyException, $MetadataBear
652
610
  $fault: "client";
653
611
  Message?: string;
654
612
  }
655
- export declare namespace LimitExceededException {
656
- /**
657
- * @internal
658
- */
659
- const filterSensitiveLog: (obj: LimitExceededException) => any;
660
- }
661
613
  export declare enum RuleOrder {
662
614
  DEFAULT_ACTION_ORDER = "DEFAULT_ACTION_ORDER",
663
615
  STRICT_ORDER = "STRICT_ORDER"
@@ -667,11 +619,11 @@ export declare enum RuleOrder {
667
619
  */
668
620
  export interface StatefulEngineOptions {
669
621
  /**
670
- * <p>Indicates how to manage the order of stateful rule evaluation for the policy. By default, Network Firewall
671
- * leaves the rule evaluation order up to the Suricata rule processing engine. If you set
672
- * this to <code>STRICT_ORDER</code>, your rules are evaluated in the exact order that you provide them
673
- * in the policy. With strict ordering, the rule groups are evaluated by order of priority, starting from the lowest number, and
674
- * the rules in each rule group are processed in the order that they're defined. </p>
622
+ * <p>Indicates how to manage the order of stateful rule evaluation for the policy. <code>DEFAULT_ACTION_ORDER</code> is
623
+ * the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them
624
+ * based on certain settings. For more information, see
625
+ * <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html">Evaluation order for stateful rules</a> in the <i>AWS Network Firewall Developer Guide</i>.
626
+ * </p>
675
627
  */
676
628
  RuleOrder?: RuleOrder | string;
677
629
  }
@@ -681,6 +633,25 @@ export declare namespace StatefulEngineOptions {
681
633
  */
682
634
  const filterSensitiveLog: (obj: StatefulEngineOptions) => any;
683
635
  }
636
+ export declare enum OverrideAction {
637
+ DROP_TO_ALERT = "DROP_TO_ALERT"
638
+ }
639
+ /**
640
+ * <p>The setting that allows the policy owner to change the behavior of the rule group within a policy. </p>
641
+ */
642
+ export interface StatefulRuleGroupOverride {
643
+ /**
644
+ * <p>The action that changes the rule group from <code>DROP</code> to <code>ALERT</code>. This only applies to
645
+ * managed rule groups.</p>
646
+ */
647
+ Action?: OverrideAction | string;
648
+ }
649
+ export declare namespace StatefulRuleGroupOverride {
650
+ /**
651
+ * @internal
652
+ */
653
+ const filterSensitiveLog: (obj: StatefulRuleGroupOverride) => any;
654
+ }
684
655
  /**
685
656
  * <p>Identifier for a single stateful rule group, used in a firewall policy to refer to a
686
657
  * rule group. </p>
@@ -702,6 +673,10 @@ export interface StatefulRuleGroupReference {
702
673
  * 200, and so on. </p>
703
674
  */
704
675
  Priority?: number;
676
+ /**
677
+ * <p>The action that allows the policy owner to override the behavior of the rule group within a policy.</p>
678
+ */
679
+ Override?: StatefulRuleGroupOverride;
705
680
  }
706
681
  export declare namespace StatefulRuleGroupReference {
707
682
  /**
@@ -821,7 +796,26 @@ export interface FirewallPolicy {
821
796
  */
822
797
  StatefulRuleGroupReferences?: StatefulRuleGroupReference[];
823
798
  /**
824
- * <p>The default actions to take on a packet that doesn't match any stateful rules.</p>
799
+ * <p>The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional,
800
+ * and is only valid when using the strict rule order.</p>
801
+ * <p>Valid values of the stateful default action:</p>
802
+ * <ul>
803
+ * <li>
804
+ * <p>aws:drop_strict</p>
805
+ * </li>
806
+ * <li>
807
+ * <p>aws:drop_established</p>
808
+ * </li>
809
+ * <li>
810
+ * <p>aws:alert_strict</p>
811
+ * </li>
812
+ * <li>
813
+ * <p>aws:alert_established</p>
814
+ * </li>
815
+ * </ul>
816
+ * <p>For more information, see
817
+ * <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-strict-rule-evaluation-order.html">Strict evaluation order</a> in the <i>AWS Network Firewall Developer Guide</i>.
818
+ * </p>
825
819
  */
826
820
  StatefulDefaultActions?: string[];
827
821
  /**
@@ -959,8 +953,7 @@ export declare enum TargetType {
959
953
  */
960
954
  export interface RulesSourceList {
961
955
  /**
962
- * <p>The domains that you want to inspect for in your traffic flows. To provide multiple
963
- * domains, separate them with commas. Valid domain specifications are the following:</p>
956
+ * <p>The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:</p>
964
957
  * <ul>
965
958
  * <li>
966
959
  * <p>Explicit names. For example, <code>abc.example.com</code> matches only the domain <code>abc.example.com</code>.</p>
@@ -1476,10 +1469,11 @@ export declare namespace RuleVariables {
1476
1469
  */
1477
1470
  export interface StatefulRuleOptions {
1478
1471
  /**
1479
- * <p>Indicates how to manage the order of the rule evaluation for the rule group. By default, Network Firewall
1480
- * leaves the rule evaluation order up to the Suricata rule processing engine. If you set
1481
- * this to <code>STRICT_ORDER</code>, your rules are evaluated in the exact order that they're listed
1482
- * in your Suricata rules string. </p>
1472
+ * <p>Indicates how to manage the order of the rule evaluation for the rule group. <code>DEFAULT_ACTION_ORDER</code> is
1473
+ * the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them
1474
+ * based on certain settings. For more information, see
1475
+ * <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html">Evaluation order for stateful rules</a> in the <i>AWS Network Firewall Developer Guide</i>.
1476
+ * </p>
1483
1477
  */
1484
1478
  RuleOrder?: RuleOrder | string;
1485
1479
  }
@@ -1741,12 +1735,6 @@ export interface UnsupportedOperationException extends __SmithyException, $Metad
1741
1735
  $fault: "client";
1742
1736
  Message?: string;
1743
1737
  }
1744
- export declare namespace UnsupportedOperationException {
1745
- /**
1746
- * @internal
1747
- */
1748
- const filterSensitiveLog: (obj: UnsupportedOperationException) => any;
1749
- }
1750
1738
  export interface DeleteFirewallPolicyRequest {
1751
1739
  /**
1752
1740
  * <p>The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it.</p>
@@ -1806,12 +1794,6 @@ export interface InvalidResourcePolicyException extends __SmithyException, $Meta
1806
1794
  $fault: "client";
1807
1795
  Message?: string;
1808
1796
  }
1809
- export declare namespace InvalidResourcePolicyException {
1810
- /**
1811
- * @internal
1812
- */
1813
- const filterSensitiveLog: (obj: InvalidResourcePolicyException) => any;
1814
- }
1815
1797
  export interface DeleteRuleGroupRequest {
1816
1798
  /**
1817
1799
  * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
@@ -2126,6 +2108,75 @@ export declare namespace DescribeRuleGroupResponse {
2126
2108
  */
2127
2109
  const filterSensitiveLog: (obj: DescribeRuleGroupResponse) => any;
2128
2110
  }
2111
+ export interface DescribeRuleGroupMetadataRequest {
2112
+ /**
2113
+ * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
2114
+ * <p>You must specify the ARN or the name, and you can specify both. </p>
2115
+ */
2116
+ RuleGroupName?: string;
2117
+ /**
2118
+ * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
2119
+ * <p>You must specify the ARN or the name, and you can specify both. </p>
2120
+ */
2121
+ RuleGroupArn?: string;
2122
+ /**
2123
+ * <p>Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains
2124
+ * stateless rules. If it is stateful, it contains stateful rules. </p>
2125
+ * <note>
2126
+ * <p>This setting is required for requests that do not include the <code>RuleGroupARN</code>.</p>
2127
+ * </note>
2128
+ */
2129
+ Type?: RuleGroupType | string;
2130
+ }
2131
+ export declare namespace DescribeRuleGroupMetadataRequest {
2132
+ /**
2133
+ * @internal
2134
+ */
2135
+ const filterSensitiveLog: (obj: DescribeRuleGroupMetadataRequest) => any;
2136
+ }
2137
+ export interface DescribeRuleGroupMetadataResponse {
2138
+ /**
2139
+ * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
2140
+ * <p>You must specify the ARN or the name, and you can specify both. </p>
2141
+ */
2142
+ RuleGroupArn: string | undefined;
2143
+ /**
2144
+ * <p>The descriptive name of the rule group. You can't change the name of a rule group after you create it.</p>
2145
+ * <p>You must specify the ARN or the name, and you can specify both. </p>
2146
+ */
2147
+ RuleGroupName: string | undefined;
2148
+ /**
2149
+ * <p>Returns the metadata objects for the specified rule group.
2150
+ * </p>
2151
+ */
2152
+ Description?: string;
2153
+ /**
2154
+ * <p>Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains
2155
+ * stateless rules. If it is stateful, it contains stateful rules. </p>
2156
+ * <note>
2157
+ * <p>This setting is required for requests that do not include the <code>RuleGroupARN</code>.</p>
2158
+ * </note>
2159
+ */
2160
+ Type?: RuleGroupType | string;
2161
+ /**
2162
+ * <p>The maximum operating resources that this rule group can use. Rule group capacity is fixed at creation.
2163
+ * When you update a rule group, you are limited to this capacity. When you reference a rule group
2164
+ * from a firewall policy, Network Firewall reserves this capacity for the rule group. </p>
2165
+ * <p>You can retrieve the capacity that would be required for a rule group before you create the rule group by calling
2166
+ * <a>CreateRuleGroup</a> with <code>DryRun</code> set to <code>TRUE</code>. </p>
2167
+ */
2168
+ Capacity?: number;
2169
+ /**
2170
+ * <p>Additional options governing how Network Firewall handles the rule group. You can only use these for stateful rule groups.</p>
2171
+ */
2172
+ StatefulRuleOptions?: StatefulRuleOptions;
2173
+ }
2174
+ export declare namespace DescribeRuleGroupMetadataResponse {
2175
+ /**
2176
+ * @internal
2177
+ */
2178
+ const filterSensitiveLog: (obj: DescribeRuleGroupMetadataResponse) => any;
2179
+ }
2129
2180
  export interface DisassociateSubnetsRequest {
2130
2181
  /**
2131
2182
  * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -2306,6 +2357,10 @@ export declare namespace ListFirewallsResponse {
2306
2357
  */
2307
2358
  const filterSensitiveLog: (obj: ListFirewallsResponse) => any;
2308
2359
  }
2360
+ export declare enum ResourceManagedStatus {
2361
+ ACCOUNT = "ACCOUNT",
2362
+ MANAGED = "MANAGED"
2363
+ }
2309
2364
  export interface ListRuleGroupsRequest {
2310
2365
  /**
2311
2366
  * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2319,6 +2374,12 @@ export interface ListRuleGroupsRequest {
2319
2374
  * <code>NextToken</code> value that you can use in a subsequent call to get the next batch of objects.</p>
2320
2375
  */
2321
2376
  MaxResults?: number;
2377
+ /**
2378
+ * <p>The scope of the request. The default setting of <code>ACCOUNT</code> or a setting of
2379
+ * <code>NULL</code> returns all of the rule groups in your account. A setting of
2380
+ * <code>MANAGED</code> returns all available managed rule groups.</p>
2381
+ */
2382
+ Scope?: ResourceManagedStatus | string;
2322
2383
  }
2323
2384
  export declare namespace ListRuleGroupsRequest {
2324
2385
  /**
@@ -2416,12 +2477,6 @@ export interface LogDestinationPermissionException extends __SmithyException, $M
2416
2477
  $fault: "client";
2417
2478
  Message?: string;
2418
2479
  }
2419
- export declare namespace LogDestinationPermissionException {
2420
- /**
2421
- * @internal
2422
- */
2423
- const filterSensitiveLog: (obj: LogDestinationPermissionException) => any;
2424
- }
2425
2480
  export interface PutResourcePolicyRequest {
2426
2481
  /**
2427
2482
  * <p>The Amazon Resource Name (ARN) of the account that you want to share rule groups and firewall policies with.</p>
@@ -2531,12 +2586,6 @@ export interface ResourceOwnerCheckException extends __SmithyException, $Metadat
2531
2586
  $fault: "client";
2532
2587
  Message?: string;
2533
2588
  }
2534
- export declare namespace ResourceOwnerCheckException {
2535
- /**
2536
- * @internal
2537
- */
2538
- const filterSensitiveLog: (obj: ResourceOwnerCheckException) => any;
2539
- }
2540
2589
  export interface UpdateFirewallDeleteProtectionRequest {
2541
2590
  /**
2542
2591
  * <p>An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request. </p>
@@ -2577,7 +2626,9 @@ export interface UpdateFirewallDeleteProtectionResponse {
2577
2626
  */
2578
2627
  FirewallName?: string;
2579
2628
  /**
2580
- * <p></p>
2629
+ * <p>A flag indicating whether it is possible to delete the firewall. A setting of <code>TRUE</code> indicates
2630
+ * that the firewall is protected against deletion. Use this setting to protect against
2631
+ * accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to <code>TRUE</code>.</p>
2581
2632
  */
2582
2633
  DeleteProtection?: boolean;
2583
2634
  /**
@@ -14,6 +14,7 @@ import { DescribeFirewallPolicyCommandInput, DescribeFirewallPolicyCommandOutput
14
14
  import { DescribeLoggingConfigurationCommandInput, DescribeLoggingConfigurationCommandOutput } from "../commands/DescribeLoggingConfigurationCommand";
15
15
  import { DescribeResourcePolicyCommandInput, DescribeResourcePolicyCommandOutput } from "../commands/DescribeResourcePolicyCommand";
16
16
  import { DescribeRuleGroupCommandInput, DescribeRuleGroupCommandOutput } from "../commands/DescribeRuleGroupCommand";
17
+ import { DescribeRuleGroupMetadataCommandInput, DescribeRuleGroupMetadataCommandOutput } from "../commands/DescribeRuleGroupMetadataCommand";
17
18
  import { DisassociateSubnetsCommandInput, DisassociateSubnetsCommandOutput } from "../commands/DisassociateSubnetsCommand";
18
19
  import { ListFirewallPoliciesCommandInput, ListFirewallPoliciesCommandOutput } from "../commands/ListFirewallPoliciesCommand";
19
20
  import { ListFirewallsCommandInput, ListFirewallsCommandOutput } from "../commands/ListFirewallsCommand";
@@ -43,6 +44,7 @@ export declare const serializeAws_json1_0DescribeFirewallPolicyCommand: (input:
43
44
  export declare const serializeAws_json1_0DescribeLoggingConfigurationCommand: (input: DescribeLoggingConfigurationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
44
45
  export declare const serializeAws_json1_0DescribeResourcePolicyCommand: (input: DescribeResourcePolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
45
46
  export declare const serializeAws_json1_0DescribeRuleGroupCommand: (input: DescribeRuleGroupCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
47
+ export declare const serializeAws_json1_0DescribeRuleGroupMetadataCommand: (input: DescribeRuleGroupMetadataCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
46
48
  export declare const serializeAws_json1_0DisassociateSubnetsCommand: (input: DisassociateSubnetsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
47
49
  export declare const serializeAws_json1_0ListFirewallPoliciesCommand: (input: ListFirewallPoliciesCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
48
50
  export declare const serializeAws_json1_0ListFirewallsCommand: (input: ListFirewallsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -72,6 +74,7 @@ export declare const deserializeAws_json1_0DescribeFirewallPolicyCommand: (outpu
72
74
  export declare const deserializeAws_json1_0DescribeLoggingConfigurationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeLoggingConfigurationCommandOutput>;
73
75
  export declare const deserializeAws_json1_0DescribeResourcePolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeResourcePolicyCommandOutput>;
74
76
  export declare const deserializeAws_json1_0DescribeRuleGroupCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeRuleGroupCommandOutput>;
77
+ export declare const deserializeAws_json1_0DescribeRuleGroupMetadataCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeRuleGroupMetadataCommandOutput>;
75
78
  export declare const deserializeAws_json1_0DisassociateSubnetsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DisassociateSubnetsCommandOutput>;
76
79
  export declare const deserializeAws_json1_0ListFirewallPoliciesCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListFirewallPoliciesCommandOutput>;
77
80
  export declare const deserializeAws_json1_0ListFirewallsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListFirewallsCommandOutput>;
@@ -1,10 +1,11 @@
1
- import { FetchHttpHandler } from "@aws-sdk/fetch-http-handler";
1
+ import { FetchHttpHandler as RequestHandler } from "@aws-sdk/fetch-http-handler";
2
2
  import { NetworkFirewallClientConfig } from "./NetworkFirewallClient";
3
3
  /**
4
4
  * @internal
5
5
  */
6
6
  export declare const getRuntimeConfig: (config: NetworkFirewallClientConfig) => {
7
7
  runtime: string;
8
+ defaultsMode: import("@aws-sdk/types").Provider<import("@aws-sdk/smithy-client").ResolvedDefaultsMode>;
8
9
  base64Decoder: import("@aws-sdk/types").Decoder;
9
10
  base64Encoder: import("@aws-sdk/types").Encoder;
10
11
  bodyLengthChecker: (body: any) => number | undefined;
@@ -12,7 +13,7 @@ export declare const getRuntimeConfig: (config: NetworkFirewallClientConfig) =>
12
13
  defaultUserAgentProvider: import("@aws-sdk/types").Provider<import("@aws-sdk/types").UserAgent>;
13
14
  maxAttempts: number | import("@aws-sdk/types").Provider<number>;
14
15
  region: string | import("@aws-sdk/types").Provider<any>;
15
- requestHandler: (import("@aws-sdk/types").RequestHandler<any, any, import("@aws-sdk/types").HttpHandlerOptions> & import("@aws-sdk/protocol-http").HttpHandler) | FetchHttpHandler;
16
+ requestHandler: (import("@aws-sdk/types").RequestHandler<any, any, import("@aws-sdk/types").HttpHandlerOptions> & import("@aws-sdk/protocol-http").HttpHandler) | RequestHandler;
16
17
  retryMode: string | import("@aws-sdk/types").Provider<string>;
17
18
  sha256: import("@aws-sdk/types").HashConstructor;
18
19
  streamCollector: import("@aws-sdk/types").StreamCollector;
@@ -1,18 +1,19 @@
1
- import { NodeHttpHandler } from "@aws-sdk/node-http-handler";
1
+ import { NodeHttpHandler as RequestHandler } from "@aws-sdk/node-http-handler";
2
2
  import { NetworkFirewallClientConfig } from "./NetworkFirewallClient";
3
3
  /**
4
4
  * @internal
5
5
  */
6
6
  export declare const getRuntimeConfig: (config: NetworkFirewallClientConfig) => {
7
7
  runtime: string;
8
+ defaultsMode: import("@aws-sdk/types").Provider<import("@aws-sdk/smithy-client").ResolvedDefaultsMode>;
8
9
  base64Decoder: import("@aws-sdk/types").Decoder;
9
10
  base64Encoder: import("@aws-sdk/types").Encoder;
10
11
  bodyLengthChecker: (body: any) => number | undefined;
11
- credentialDefaultProvider: import("@aws-sdk/client-sts/dist-types/defaultStsRoleAssumers").DefaultCredentialProvider;
12
+ credentialDefaultProvider: (input: any) => import("@aws-sdk/types").Provider<import("@aws-sdk/types").Credentials>;
12
13
  defaultUserAgentProvider: import("@aws-sdk/types").Provider<import("@aws-sdk/types").UserAgent>;
13
14
  maxAttempts: number | import("@aws-sdk/types").Provider<number>;
14
15
  region: string | import("@aws-sdk/types").Provider<string>;
15
- requestHandler: (import("@aws-sdk/types").RequestHandler<any, any, import("@aws-sdk/types").HttpHandlerOptions> & import("@aws-sdk/protocol-http").HttpHandler) | NodeHttpHandler;
16
+ requestHandler: (import("@aws-sdk/types").RequestHandler<any, any, import("@aws-sdk/types").HttpHandlerOptions> & import("@aws-sdk/protocol-http").HttpHandler) | RequestHandler;
16
17
  retryMode: string | import("@aws-sdk/types").Provider<string>;
17
18
  sha256: import("@aws-sdk/types").HashConstructor;
18
19
  streamCollector: import("@aws-sdk/types").StreamCollector;
@@ -25,6 +25,7 @@ export declare const getRuntimeConfig: (config: NetworkFirewallClientConfig) =>
25
25
  credentialDefaultProvider: (input: any) => import("@aws-sdk/types").Provider<import("@aws-sdk/types").Credentials>;
26
26
  regionInfoProvider: import("@aws-sdk/types").RegionInfoProvider;
27
27
  defaultUserAgentProvider: import("@aws-sdk/types").Provider<import("@aws-sdk/types").UserAgent>;
28
+ defaultsMode: import("@aws-sdk/smithy-client").DefaultsMode | import("@aws-sdk/types").Provider<import("@aws-sdk/smithy-client").DefaultsMode> | import("@aws-sdk/types").Provider<import("@aws-sdk/smithy-client").ResolvedDefaultsMode>;
28
29
  endpoint?: string | import("@aws-sdk/types").Endpoint | import("@aws-sdk/types").Provider<import("@aws-sdk/types").Endpoint> | undefined;
29
30
  tls?: boolean | undefined;
30
31
  retryStrategy?: import("@aws-sdk/types").RetryStrategy | undefined;
@@ -13,6 +13,7 @@ import { DescribeFirewallPolicyCommandInput, DescribeFirewallPolicyCommandOutput
13
13
  import { DescribeLoggingConfigurationCommandInput, DescribeLoggingConfigurationCommandOutput } from "./commands/DescribeLoggingConfigurationCommand";
14
14
  import { DescribeResourcePolicyCommandInput, DescribeResourcePolicyCommandOutput } from "./commands/DescribeResourcePolicyCommand";
15
15
  import { DescribeRuleGroupCommandInput, DescribeRuleGroupCommandOutput } from "./commands/DescribeRuleGroupCommand";
16
+ import { DescribeRuleGroupMetadataCommandInput, DescribeRuleGroupMetadataCommandOutput } from "./commands/DescribeRuleGroupMetadataCommand";
16
17
  import { DisassociateSubnetsCommandInput, DisassociateSubnetsCommandOutput } from "./commands/DisassociateSubnetsCommand";
17
18
  import { ListFirewallPoliciesCommandInput, ListFirewallPoliciesCommandOutput } from "./commands/ListFirewallPoliciesCommand";
18
19
  import { ListFirewallsCommandInput, ListFirewallsCommandOutput } from "./commands/ListFirewallsCommand";
@@ -88,6 +89,10 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
88
89
  describeRuleGroup(args: DescribeRuleGroupCommandInput, cb: (err: any, data?: DescribeRuleGroupCommandOutput) => void): void;
89
90
  describeRuleGroup(args: DescribeRuleGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeRuleGroupCommandOutput) => void): void;
90
91
 
92
+ describeRuleGroupMetadata(args: DescribeRuleGroupMetadataCommandInput, options?: __HttpHandlerOptions): Promise<DescribeRuleGroupMetadataCommandOutput>;
93
+ describeRuleGroupMetadata(args: DescribeRuleGroupMetadataCommandInput, cb: (err: any, data?: DescribeRuleGroupMetadataCommandOutput) => void): void;
94
+ describeRuleGroupMetadata(args: DescribeRuleGroupMetadataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeRuleGroupMetadataCommandOutput) => void): void;
95
+
91
96
  disassociateSubnets(args: DisassociateSubnetsCommandInput, options?: __HttpHandlerOptions): Promise<DisassociateSubnetsCommandOutput>;
92
97
  disassociateSubnets(args: DisassociateSubnetsCommandInput, cb: (err: any, data?: DisassociateSubnetsCommandOutput) => void): void;
93
98
  disassociateSubnets(args: DisassociateSubnetsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisassociateSubnetsCommandOutput) => void): void;
@@ -4,7 +4,7 @@ import { RetryInputConfig, RetryResolvedConfig } from "@aws-sdk/middleware-retry
4
4
  import { AwsAuthInputConfig, AwsAuthResolvedConfig } from "@aws-sdk/middleware-signing";
5
5
  import { UserAgentInputConfig, UserAgentResolvedConfig } from "@aws-sdk/middleware-user-agent";
6
6
  import { HttpHandler as __HttpHandler } from "@aws-sdk/protocol-http";
7
- import { Client as __Client, SmithyConfiguration as __SmithyConfiguration, SmithyResolvedConfiguration as __SmithyResolvedConfiguration } from "@aws-sdk/smithy-client";
7
+ import { Client as __Client, DefaultsMode, SmithyConfiguration as __SmithyConfiguration, SmithyResolvedConfiguration as __SmithyResolvedConfiguration } from "@aws-sdk/smithy-client";
8
8
  import { Credentials as __Credentials, Decoder as __Decoder, Encoder as __Encoder, HashConstructor as __HashConstructor, HttpHandlerOptions as __HttpHandlerOptions, Logger as __Logger, Provider as __Provider, Provider, RegionInfoProvider, StreamCollector as __StreamCollector, UrlParser as __UrlParser, UserAgent as __UserAgent } from "@aws-sdk/types";
9
9
  import { AssociateFirewallPolicyCommandInput, AssociateFirewallPolicyCommandOutput } from "./commands/AssociateFirewallPolicyCommand";
10
10
  import { AssociateSubnetsCommandInput, AssociateSubnetsCommandOutput } from "./commands/AssociateSubnetsCommand";
@@ -20,6 +20,7 @@ import { DescribeFirewallPolicyCommandInput, DescribeFirewallPolicyCommandOutput
20
20
  import { DescribeLoggingConfigurationCommandInput, DescribeLoggingConfigurationCommandOutput } from "./commands/DescribeLoggingConfigurationCommand";
21
21
  import { DescribeResourcePolicyCommandInput, DescribeResourcePolicyCommandOutput } from "./commands/DescribeResourcePolicyCommand";
22
22
  import { DescribeRuleGroupCommandInput, DescribeRuleGroupCommandOutput } from "./commands/DescribeRuleGroupCommand";
23
+ import { DescribeRuleGroupMetadataCommandInput, DescribeRuleGroupMetadataCommandOutput } from "./commands/DescribeRuleGroupMetadataCommand";
23
24
  import { DisassociateSubnetsCommandInput, DisassociateSubnetsCommandOutput } from "./commands/DisassociateSubnetsCommand";
24
25
  import { ListFirewallPoliciesCommandInput, ListFirewallPoliciesCommandOutput } from "./commands/ListFirewallPoliciesCommand";
25
26
  import { ListFirewallsCommandInput, ListFirewallsCommandOutput } from "./commands/ListFirewallsCommand";
@@ -35,8 +36,8 @@ import { UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput } f
35
36
  import { UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput } from "./commands/UpdateLoggingConfigurationCommand";
36
37
  import { UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput } from "./commands/UpdateRuleGroupCommand";
37
38
  import { UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput } from "./commands/UpdateSubnetChangeProtectionCommand";
38
- export declare type ServiceInputTypes = AssociateFirewallPolicyCommandInput | AssociateSubnetsCommandInput | CreateFirewallCommandInput | CreateFirewallPolicyCommandInput | CreateRuleGroupCommandInput | DeleteFirewallCommandInput | DeleteFirewallPolicyCommandInput | DeleteResourcePolicyCommandInput | DeleteRuleGroupCommandInput | DescribeFirewallCommandInput | DescribeFirewallPolicyCommandInput | DescribeLoggingConfigurationCommandInput | DescribeResourcePolicyCommandInput | DescribeRuleGroupCommandInput | DisassociateSubnetsCommandInput | ListFirewallPoliciesCommandInput | ListFirewallsCommandInput | ListRuleGroupsCommandInput | ListTagsForResourceCommandInput | PutResourcePolicyCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateFirewallDeleteProtectionCommandInput | UpdateFirewallDescriptionCommandInput | UpdateFirewallPolicyChangeProtectionCommandInput | UpdateFirewallPolicyCommandInput | UpdateLoggingConfigurationCommandInput | UpdateRuleGroupCommandInput | UpdateSubnetChangeProtectionCommandInput;
39
- export declare type ServiceOutputTypes = AssociateFirewallPolicyCommandOutput | AssociateSubnetsCommandOutput | CreateFirewallCommandOutput | CreateFirewallPolicyCommandOutput | CreateRuleGroupCommandOutput | DeleteFirewallCommandOutput | DeleteFirewallPolicyCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRuleGroupCommandOutput | DescribeFirewallCommandOutput | DescribeFirewallPolicyCommandOutput | DescribeLoggingConfigurationCommandOutput | DescribeResourcePolicyCommandOutput | DescribeRuleGroupCommandOutput | DisassociateSubnetsCommandOutput | ListFirewallPoliciesCommandOutput | ListFirewallsCommandOutput | ListRuleGroupsCommandOutput | ListTagsForResourceCommandOutput | PutResourcePolicyCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateFirewallDeleteProtectionCommandOutput | UpdateFirewallDescriptionCommandOutput | UpdateFirewallPolicyChangeProtectionCommandOutput | UpdateFirewallPolicyCommandOutput | UpdateLoggingConfigurationCommandOutput | UpdateRuleGroupCommandOutput | UpdateSubnetChangeProtectionCommandOutput;
39
+ export declare type ServiceInputTypes = AssociateFirewallPolicyCommandInput | AssociateSubnetsCommandInput | CreateFirewallCommandInput | CreateFirewallPolicyCommandInput | CreateRuleGroupCommandInput | DeleteFirewallCommandInput | DeleteFirewallPolicyCommandInput | DeleteResourcePolicyCommandInput | DeleteRuleGroupCommandInput | DescribeFirewallCommandInput | DescribeFirewallPolicyCommandInput | DescribeLoggingConfigurationCommandInput | DescribeResourcePolicyCommandInput | DescribeRuleGroupCommandInput | DescribeRuleGroupMetadataCommandInput | DisassociateSubnetsCommandInput | ListFirewallPoliciesCommandInput | ListFirewallsCommandInput | ListRuleGroupsCommandInput | ListTagsForResourceCommandInput | PutResourcePolicyCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateFirewallDeleteProtectionCommandInput | UpdateFirewallDescriptionCommandInput | UpdateFirewallPolicyChangeProtectionCommandInput | UpdateFirewallPolicyCommandInput | UpdateLoggingConfigurationCommandInput | UpdateRuleGroupCommandInput | UpdateSubnetChangeProtectionCommandInput;
40
+ export declare type ServiceOutputTypes = AssociateFirewallPolicyCommandOutput | AssociateSubnetsCommandOutput | CreateFirewallCommandOutput | CreateFirewallPolicyCommandOutput | CreateRuleGroupCommandOutput | DeleteFirewallCommandOutput | DeleteFirewallPolicyCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRuleGroupCommandOutput | DescribeFirewallCommandOutput | DescribeFirewallPolicyCommandOutput | DescribeLoggingConfigurationCommandOutput | DescribeResourcePolicyCommandOutput | DescribeRuleGroupCommandOutput | DescribeRuleGroupMetadataCommandOutput | DisassociateSubnetsCommandOutput | ListFirewallPoliciesCommandOutput | ListFirewallsCommandOutput | ListRuleGroupsCommandOutput | ListTagsForResourceCommandOutput | PutResourcePolicyCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateFirewallDeleteProtectionCommandOutput | UpdateFirewallDescriptionCommandOutput | UpdateFirewallPolicyChangeProtectionCommandOutput | UpdateFirewallPolicyCommandOutput | UpdateLoggingConfigurationCommandOutput | UpdateRuleGroupCommandOutput | UpdateSubnetChangeProtectionCommandOutput;
40
41
  export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
41
42
 
42
43
  requestHandler?: __HttpHandler;
@@ -80,6 +81,8 @@ export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__
80
81
  regionInfoProvider?: RegionInfoProvider;
81
82
 
82
83
  defaultUserAgentProvider?: Provider<__UserAgent>;
84
+
85
+ defaultsMode?: DefaultsMode | Provider<DefaultsMode>;
83
86
  }
84
87
  declare type NetworkFirewallClientConfigType = Partial<__SmithyConfiguration<__HttpHandlerOptions>> & ClientDefaults & RegionInputConfig & EndpointsInputConfig & RetryInputConfig & HostHeaderInputConfig & AwsAuthInputConfig & UserAgentInputConfig;
85
88
 
@@ -0,0 +1,17 @@
1
+ import { Command as $Command } from "@aws-sdk/smithy-client";
2
+ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
3
+ import { DescribeRuleGroupMetadataRequest, DescribeRuleGroupMetadataResponse } from "../models/models_0";
4
+ import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
5
+ export interface DescribeRuleGroupMetadataCommandInput extends DescribeRuleGroupMetadataRequest {
6
+ }
7
+ export interface DescribeRuleGroupMetadataCommandOutput extends DescribeRuleGroupMetadataResponse, __MetadataBearer {
8
+ }
9
+
10
+ export declare class DescribeRuleGroupMetadataCommand extends $Command<DescribeRuleGroupMetadataCommandInput, DescribeRuleGroupMetadataCommandOutput, NetworkFirewallClientResolvedConfig> {
11
+ readonly input: DescribeRuleGroupMetadataCommandInput;
12
+ constructor(input: DescribeRuleGroupMetadataCommandInput);
13
+
14
+ resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: NetworkFirewallClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DescribeRuleGroupMetadataCommandInput, DescribeRuleGroupMetadataCommandOutput>;
15
+ private serialize;
16
+ private deserialize;
17
+ }
@@ -12,6 +12,7 @@ export * from "./DescribeFirewallPolicyCommand";
12
12
  export * from "./DescribeLoggingConfigurationCommand";
13
13
  export * from "./DescribeResourcePolicyCommand";
14
14
  export * from "./DescribeRuleGroupCommand";
15
+ export * from "./DescribeRuleGroupMetadataCommand";
15
16
  export * from "./DisassociateSubnetsCommand";
16
17
  export * from "./ListFirewallPoliciesCommand";
17
18
  export * from "./ListFirewallsCommand";