@aws-sdk/client-network-firewall 3.74.0 → 3.78.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +28 -0
- package/README.md +7 -7
- package/dist-cjs/NetworkFirewall.js +15 -0
- package/dist-cjs/commands/UpdateFirewallEncryptionConfigurationCommand.js +36 -0
- package/dist-cjs/commands/index.js +1 -0
- package/dist-cjs/models/models_0.js +26 -3
- package/dist-cjs/pagination/ListFirewallPoliciesPaginator.js +2 -1
- package/dist-cjs/pagination/ListFirewallsPaginator.js +2 -1
- package/dist-cjs/pagination/ListRuleGroupsPaginator.js +2 -1
- package/dist-cjs/pagination/ListTagsForResourcePaginator.js +2 -1
- package/dist-cjs/protocols/Aws_json1_0.js +125 -2
- package/dist-es/NetworkFirewall.js +15 -0
- package/dist-es/commands/UpdateFirewallEncryptionConfigurationCommand.js +39 -0
- package/dist-es/commands/index.js +1 -0
- package/dist-es/models/models_0.js +17 -0
- package/dist-es/pagination/ListFirewallPoliciesPaginator.js +3 -2
- package/dist-es/pagination/ListFirewallsPaginator.js +3 -2
- package/dist-es/pagination/ListRuleGroupsPaginator.js +3 -2
- package/dist-es/pagination/ListTagsForResourcePaginator.js +3 -2
- package/dist-es/protocols/Aws_json1_0.js +136 -6
- package/dist-types/NetworkFirewall.d.ts +27 -20
- package/dist-types/NetworkFirewallClient.d.ts +10 -9
- package/dist-types/commands/AssociateSubnetsCommand.d.ts +1 -1
- package/dist-types/commands/CreateFirewallCommand.d.ts +3 -3
- package/dist-types/commands/CreateFirewallPolicyCommand.d.ts +1 -1
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +2 -2
- package/dist-types/commands/PutResourcePolicyCommand.d.ts +2 -2
- package/dist-types/commands/TagResourceCommand.d.ts +2 -2
- package/dist-types/commands/UntagResourceCommand.d.ts +2 -2
- package/dist-types/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +35 -0
- package/dist-types/commands/index.d.ts +1 -0
- package/dist-types/models/models_0.d.ts +131 -24
- package/dist-types/protocols/Aws_json1_0.d.ts +3 -0
- package/dist-types/ts3.4/NetworkFirewall.d.ts +5 -0
- package/dist-types/ts3.4/NetworkFirewallClient.d.ts +3 -2
- package/dist-types/ts3.4/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/index.d.ts +1 -0
- package/dist-types/ts3.4/models/models_0.d.ts +59 -0
- package/dist-types/ts3.4/protocols/Aws_json1_0.d.ts +3 -0
- package/package.json +25 -25
|
@@ -36,7 +36,7 @@ export function paginateListFirewallPolicies(config, input) {
|
|
|
36
36
|
additionalArguments[_i - 2] = arguments[_i];
|
|
37
37
|
}
|
|
38
38
|
return __asyncGenerator(this, arguments, function paginateListFirewallPolicies_1() {
|
|
39
|
-
var token, hasNext, page;
|
|
39
|
+
var token, hasNext, page, prevToken;
|
|
40
40
|
return __generator(this, function (_a) {
|
|
41
41
|
switch (_a.label) {
|
|
42
42
|
case 0:
|
|
@@ -63,8 +63,9 @@ export function paginateListFirewallPolicies(config, input) {
|
|
|
63
63
|
case 7: return [4, _a.sent()];
|
|
64
64
|
case 8:
|
|
65
65
|
_a.sent();
|
|
66
|
+
prevToken = token;
|
|
66
67
|
token = page.NextToken;
|
|
67
|
-
hasNext = !!token;
|
|
68
|
+
hasNext = !!(token && (!config.stopOnSameToken || token !== prevToken));
|
|
68
69
|
return [3, 1];
|
|
69
70
|
case 9: return [4, __await(undefined)];
|
|
70
71
|
case 10: return [2, _a.sent()];
|
|
@@ -36,7 +36,7 @@ export function paginateListFirewalls(config, input) {
|
|
|
36
36
|
additionalArguments[_i - 2] = arguments[_i];
|
|
37
37
|
}
|
|
38
38
|
return __asyncGenerator(this, arguments, function paginateListFirewalls_1() {
|
|
39
|
-
var token, hasNext, page;
|
|
39
|
+
var token, hasNext, page, prevToken;
|
|
40
40
|
return __generator(this, function (_a) {
|
|
41
41
|
switch (_a.label) {
|
|
42
42
|
case 0:
|
|
@@ -63,8 +63,9 @@ export function paginateListFirewalls(config, input) {
|
|
|
63
63
|
case 7: return [4, _a.sent()];
|
|
64
64
|
case 8:
|
|
65
65
|
_a.sent();
|
|
66
|
+
prevToken = token;
|
|
66
67
|
token = page.NextToken;
|
|
67
|
-
hasNext = !!token;
|
|
68
|
+
hasNext = !!(token && (!config.stopOnSameToken || token !== prevToken));
|
|
68
69
|
return [3, 1];
|
|
69
70
|
case 9: return [4, __await(undefined)];
|
|
70
71
|
case 10: return [2, _a.sent()];
|
|
@@ -36,7 +36,7 @@ export function paginateListRuleGroups(config, input) {
|
|
|
36
36
|
additionalArguments[_i - 2] = arguments[_i];
|
|
37
37
|
}
|
|
38
38
|
return __asyncGenerator(this, arguments, function paginateListRuleGroups_1() {
|
|
39
|
-
var token, hasNext, page;
|
|
39
|
+
var token, hasNext, page, prevToken;
|
|
40
40
|
return __generator(this, function (_a) {
|
|
41
41
|
switch (_a.label) {
|
|
42
42
|
case 0:
|
|
@@ -63,8 +63,9 @@ export function paginateListRuleGroups(config, input) {
|
|
|
63
63
|
case 7: return [4, _a.sent()];
|
|
64
64
|
case 8:
|
|
65
65
|
_a.sent();
|
|
66
|
+
prevToken = token;
|
|
66
67
|
token = page.NextToken;
|
|
67
|
-
hasNext = !!token;
|
|
68
|
+
hasNext = !!(token && (!config.stopOnSameToken || token !== prevToken));
|
|
68
69
|
return [3, 1];
|
|
69
70
|
case 9: return [4, __await(undefined)];
|
|
70
71
|
case 10: return [2, _a.sent()];
|
|
@@ -36,7 +36,7 @@ export function paginateListTagsForResource(config, input) {
|
|
|
36
36
|
additionalArguments[_i - 2] = arguments[_i];
|
|
37
37
|
}
|
|
38
38
|
return __asyncGenerator(this, arguments, function paginateListTagsForResource_1() {
|
|
39
|
-
var token, hasNext, page;
|
|
39
|
+
var token, hasNext, page, prevToken;
|
|
40
40
|
return __generator(this, function (_a) {
|
|
41
41
|
switch (_a.label) {
|
|
42
42
|
case 0:
|
|
@@ -63,8 +63,9 @@ export function paginateListTagsForResource(config, input) {
|
|
|
63
63
|
case 7: return [4, _a.sent()];
|
|
64
64
|
case 8:
|
|
65
65
|
_a.sent();
|
|
66
|
+
prevToken = token;
|
|
66
67
|
token = page.NextToken;
|
|
67
|
-
hasNext = !!token;
|
|
68
|
+
hasNext = !!(token && (!config.stopOnSameToken || token !== prevToken));
|
|
68
69
|
return [3, 1];
|
|
69
70
|
case 9: return [4, __await(undefined)];
|
|
70
71
|
case 10: return [2, _a.sent()];
|
|
@@ -278,6 +278,17 @@ export var serializeAws_json1_0UpdateFirewallDescriptionCommand = function (inpu
|
|
|
278
278
|
return [2, buildHttpRpcRequest(context, headers, "/", undefined, body)];
|
|
279
279
|
});
|
|
280
280
|
}); };
|
|
281
|
+
export var serializeAws_json1_0UpdateFirewallEncryptionConfigurationCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
|
|
282
|
+
var headers, body;
|
|
283
|
+
return __generator(this, function (_a) {
|
|
284
|
+
headers = {
|
|
285
|
+
"content-type": "application/x-amz-json-1.0",
|
|
286
|
+
"x-amz-target": "NetworkFirewall_20201112.UpdateFirewallEncryptionConfiguration",
|
|
287
|
+
};
|
|
288
|
+
body = JSON.stringify(serializeAws_json1_0UpdateFirewallEncryptionConfigurationRequest(input, context));
|
|
289
|
+
return [2, buildHttpRpcRequest(context, headers, "/", undefined, body)];
|
|
290
|
+
});
|
|
291
|
+
}); };
|
|
281
292
|
export var serializeAws_json1_0UpdateFirewallPolicyCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
|
|
282
293
|
var headers, body;
|
|
283
294
|
return __generator(this, function (_a) {
|
|
@@ -1959,6 +1970,76 @@ var deserializeAws_json1_0UpdateFirewallDescriptionCommandError = function (outp
|
|
|
1959
1970
|
}
|
|
1960
1971
|
});
|
|
1961
1972
|
}); };
|
|
1973
|
+
export var deserializeAws_json1_0UpdateFirewallEncryptionConfigurationCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
|
|
1974
|
+
var data, contents, response;
|
|
1975
|
+
return __generator(this, function (_a) {
|
|
1976
|
+
switch (_a.label) {
|
|
1977
|
+
case 0:
|
|
1978
|
+
if (output.statusCode >= 300) {
|
|
1979
|
+
return [2, deserializeAws_json1_0UpdateFirewallEncryptionConfigurationCommandError(output, context)];
|
|
1980
|
+
}
|
|
1981
|
+
return [4, parseBody(output.body, context)];
|
|
1982
|
+
case 1:
|
|
1983
|
+
data = _a.sent();
|
|
1984
|
+
contents = {};
|
|
1985
|
+
contents = deserializeAws_json1_0UpdateFirewallEncryptionConfigurationResponse(data, context);
|
|
1986
|
+
response = __assign({ $metadata: deserializeMetadata(output) }, contents);
|
|
1987
|
+
return [2, Promise.resolve(response)];
|
|
1988
|
+
}
|
|
1989
|
+
});
|
|
1990
|
+
}); };
|
|
1991
|
+
var deserializeAws_json1_0UpdateFirewallEncryptionConfigurationCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
|
|
1992
|
+
var parsedOutput, _a, response, errorCode, _b, parsedBody;
|
|
1993
|
+
var _c;
|
|
1994
|
+
return __generator(this, function (_d) {
|
|
1995
|
+
switch (_d.label) {
|
|
1996
|
+
case 0:
|
|
1997
|
+
_a = [__assign({}, output)];
|
|
1998
|
+
_c = {};
|
|
1999
|
+
return [4, parseBody(output.body, context)];
|
|
2000
|
+
case 1:
|
|
2001
|
+
parsedOutput = __assign.apply(void 0, _a.concat([(_c.body = _d.sent(), _c)]));
|
|
2002
|
+
errorCode = "UnknownError";
|
|
2003
|
+
errorCode = loadRestJsonErrorCode(output, parsedOutput.body);
|
|
2004
|
+
_b = errorCode;
|
|
2005
|
+
switch (_b) {
|
|
2006
|
+
case "InternalServerError": return [3, 2];
|
|
2007
|
+
case "com.amazonaws.networkfirewall#InternalServerError": return [3, 2];
|
|
2008
|
+
case "InvalidRequestException": return [3, 4];
|
|
2009
|
+
case "com.amazonaws.networkfirewall#InvalidRequestException": return [3, 4];
|
|
2010
|
+
case "InvalidTokenException": return [3, 6];
|
|
2011
|
+
case "com.amazonaws.networkfirewall#InvalidTokenException": return [3, 6];
|
|
2012
|
+
case "ResourceNotFoundException": return [3, 8];
|
|
2013
|
+
case "com.amazonaws.networkfirewall#ResourceNotFoundException": return [3, 8];
|
|
2014
|
+
case "ResourceOwnerCheckException": return [3, 10];
|
|
2015
|
+
case "com.amazonaws.networkfirewall#ResourceOwnerCheckException": return [3, 10];
|
|
2016
|
+
case "ThrottlingException": return [3, 12];
|
|
2017
|
+
case "com.amazonaws.networkfirewall#ThrottlingException": return [3, 12];
|
|
2018
|
+
}
|
|
2019
|
+
return [3, 14];
|
|
2020
|
+
case 2: return [4, deserializeAws_json1_0InternalServerErrorResponse(parsedOutput, context)];
|
|
2021
|
+
case 3: throw _d.sent();
|
|
2022
|
+
case 4: return [4, deserializeAws_json1_0InvalidRequestExceptionResponse(parsedOutput, context)];
|
|
2023
|
+
case 5: throw _d.sent();
|
|
2024
|
+
case 6: return [4, deserializeAws_json1_0InvalidTokenExceptionResponse(parsedOutput, context)];
|
|
2025
|
+
case 7: throw _d.sent();
|
|
2026
|
+
case 8: return [4, deserializeAws_json1_0ResourceNotFoundExceptionResponse(parsedOutput, context)];
|
|
2027
|
+
case 9: throw _d.sent();
|
|
2028
|
+
case 10: return [4, deserializeAws_json1_0ResourceOwnerCheckExceptionResponse(parsedOutput, context)];
|
|
2029
|
+
case 11: throw _d.sent();
|
|
2030
|
+
case 12: return [4, deserializeAws_json1_0ThrottlingExceptionResponse(parsedOutput, context)];
|
|
2031
|
+
case 13: throw _d.sent();
|
|
2032
|
+
case 14:
|
|
2033
|
+
parsedBody = parsedOutput.body;
|
|
2034
|
+
response = new __BaseException({
|
|
2035
|
+
name: parsedBody.code || parsedBody.Code || errorCode,
|
|
2036
|
+
$fault: "client",
|
|
2037
|
+
$metadata: deserializeMetadata(output),
|
|
2038
|
+
});
|
|
2039
|
+
throw __decorateServiceException(response, parsedBody);
|
|
2040
|
+
}
|
|
2041
|
+
});
|
|
2042
|
+
}); };
|
|
1962
2043
|
export var deserializeAws_json1_0UpdateFirewallPolicyCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
|
|
1963
2044
|
var data, contents, response;
|
|
1964
2045
|
return __generator(this, function (_a) {
|
|
@@ -2450,15 +2531,21 @@ var serializeAws_json1_0AzSubnets = function (input, context) {
|
|
|
2450
2531
|
});
|
|
2451
2532
|
};
|
|
2452
2533
|
var serializeAws_json1_0CreateFirewallPolicyRequest = function (input, context) {
|
|
2453
|
-
return __assign(__assign(__assign(__assign(__assign({}, (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.
|
|
2534
|
+
return __assign(__assign(__assign(__assign(__assign(__assign({}, (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.EncryptionConfiguration !== undefined &&
|
|
2535
|
+
input.EncryptionConfiguration !== null && {
|
|
2536
|
+
EncryptionConfiguration: serializeAws_json1_0EncryptionConfiguration(input.EncryptionConfiguration, context),
|
|
2537
|
+
})), (input.FirewallPolicy !== undefined &&
|
|
2454
2538
|
input.FirewallPolicy !== null && {
|
|
2455
2539
|
FirewallPolicy: serializeAws_json1_0FirewallPolicy(input.FirewallPolicy, context),
|
|
2456
2540
|
})), (input.FirewallPolicyName !== undefined &&
|
|
2457
2541
|
input.FirewallPolicyName !== null && { FirewallPolicyName: input.FirewallPolicyName })), (input.Tags !== undefined && input.Tags !== null && { Tags: serializeAws_json1_0TagList(input.Tags, context) }));
|
|
2458
2542
|
};
|
|
2459
2543
|
var serializeAws_json1_0CreateFirewallRequest = function (input, context) {
|
|
2460
|
-
return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.DeleteProtection !== undefined &&
|
|
2461
|
-
input.DeleteProtection !== null && { DeleteProtection: input.DeleteProtection })), (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.
|
|
2544
|
+
return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.DeleteProtection !== undefined &&
|
|
2545
|
+
input.DeleteProtection !== null && { DeleteProtection: input.DeleteProtection })), (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.EncryptionConfiguration !== undefined &&
|
|
2546
|
+
input.EncryptionConfiguration !== null && {
|
|
2547
|
+
EncryptionConfiguration: serializeAws_json1_0EncryptionConfiguration(input.EncryptionConfiguration, context),
|
|
2548
|
+
})), (input.FirewallName !== undefined && input.FirewallName !== null && { FirewallName: input.FirewallName })), (input.FirewallPolicyArn !== undefined &&
|
|
2462
2549
|
input.FirewallPolicyArn !== null && { FirewallPolicyArn: input.FirewallPolicyArn })), (input.FirewallPolicyChangeProtection !== undefined &&
|
|
2463
2550
|
input.FirewallPolicyChangeProtection !== null && {
|
|
2464
2551
|
FirewallPolicyChangeProtection: input.FirewallPolicyChangeProtection,
|
|
@@ -2469,7 +2556,10 @@ var serializeAws_json1_0CreateFirewallRequest = function (input, context) {
|
|
|
2469
2556
|
})), (input.Tags !== undefined && input.Tags !== null && { Tags: serializeAws_json1_0TagList(input.Tags, context) })), (input.VpcId !== undefined && input.VpcId !== null && { VpcId: input.VpcId }));
|
|
2470
2557
|
};
|
|
2471
2558
|
var serializeAws_json1_0CreateRuleGroupRequest = function (input, context) {
|
|
2472
|
-
return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.Capacity !== undefined && input.Capacity !== null && { Capacity: input.Capacity })), (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.
|
|
2559
|
+
return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.Capacity !== undefined && input.Capacity !== null && { Capacity: input.Capacity })), (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.EncryptionConfiguration !== undefined &&
|
|
2560
|
+
input.EncryptionConfiguration !== null && {
|
|
2561
|
+
EncryptionConfiguration: serializeAws_json1_0EncryptionConfiguration(input.EncryptionConfiguration, context),
|
|
2562
|
+
})), (input.RuleGroup !== undefined &&
|
|
2473
2563
|
input.RuleGroup !== null && { RuleGroup: serializeAws_json1_0RuleGroup(input.RuleGroup, context) })), (input.RuleGroupName !== undefined && input.RuleGroupName !== null && { RuleGroupName: input.RuleGroupName })), (input.Rules !== undefined && input.Rules !== null && { Rules: input.Rules })), (input.Tags !== undefined && input.Tags !== null && { Tags: serializeAws_json1_0TagList(input.Tags, context) })), (input.Type !== undefined && input.Type !== null && { Type: input.Type }));
|
|
2474
2564
|
};
|
|
2475
2565
|
var serializeAws_json1_0CustomAction = function (input, context) {
|
|
@@ -2539,6 +2629,9 @@ var serializeAws_json1_0DisassociateSubnetsRequest = function (input, context) {
|
|
|
2539
2629
|
return __assign(__assign(__assign(__assign({}, (input.FirewallArn !== undefined && input.FirewallArn !== null && { FirewallArn: input.FirewallArn })), (input.FirewallName !== undefined && input.FirewallName !== null && { FirewallName: input.FirewallName })), (input.SubnetIds !== undefined &&
|
|
2540
2630
|
input.SubnetIds !== null && { SubnetIds: serializeAws_json1_0AzSubnets(input.SubnetIds, context) })), (input.UpdateToken !== undefined && input.UpdateToken !== null && { UpdateToken: input.UpdateToken }));
|
|
2541
2631
|
};
|
|
2632
|
+
var serializeAws_json1_0EncryptionConfiguration = function (input, context) {
|
|
2633
|
+
return __assign(__assign({}, (input.KeyId !== undefined && input.KeyId !== null && { KeyId: input.KeyId })), (input.Type !== undefined && input.Type !== null && { Type: input.Type }));
|
|
2634
|
+
};
|
|
2542
2635
|
var serializeAws_json1_0FirewallPolicy = function (input, context) {
|
|
2543
2636
|
return __assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.StatefulDefaultActions !== undefined &&
|
|
2544
2637
|
input.StatefulDefaultActions !== null && {
|
|
@@ -2941,6 +3034,12 @@ var serializeAws_json1_0UpdateFirewallDeleteProtectionRequest = function (input,
|
|
|
2941
3034
|
var serializeAws_json1_0UpdateFirewallDescriptionRequest = function (input, context) {
|
|
2942
3035
|
return __assign(__assign(__assign(__assign({}, (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.FirewallArn !== undefined && input.FirewallArn !== null && { FirewallArn: input.FirewallArn })), (input.FirewallName !== undefined && input.FirewallName !== null && { FirewallName: input.FirewallName })), (input.UpdateToken !== undefined && input.UpdateToken !== null && { UpdateToken: input.UpdateToken }));
|
|
2943
3036
|
};
|
|
3037
|
+
var serializeAws_json1_0UpdateFirewallEncryptionConfigurationRequest = function (input, context) {
|
|
3038
|
+
return __assign(__assign(__assign(__assign({}, (input.EncryptionConfiguration !== undefined &&
|
|
3039
|
+
input.EncryptionConfiguration !== null && {
|
|
3040
|
+
EncryptionConfiguration: serializeAws_json1_0EncryptionConfiguration(input.EncryptionConfiguration, context),
|
|
3041
|
+
})), (input.FirewallArn !== undefined && input.FirewallArn !== null && { FirewallArn: input.FirewallArn })), (input.FirewallName !== undefined && input.FirewallName !== null && { FirewallName: input.FirewallName })), (input.UpdateToken !== undefined && input.UpdateToken !== null && { UpdateToken: input.UpdateToken }));
|
|
3042
|
+
};
|
|
2944
3043
|
var serializeAws_json1_0UpdateFirewallPolicyChangeProtectionRequest = function (input, context) {
|
|
2945
3044
|
return __assign(__assign(__assign(__assign({}, (input.FirewallArn !== undefined && input.FirewallArn !== null && { FirewallArn: input.FirewallArn })), (input.FirewallName !== undefined && input.FirewallName !== null && { FirewallName: input.FirewallName })), (input.FirewallPolicyChangeProtection !== undefined &&
|
|
2946
3045
|
input.FirewallPolicyChangeProtection !== null && {
|
|
@@ -2948,7 +3047,10 @@ var serializeAws_json1_0UpdateFirewallPolicyChangeProtectionRequest = function (
|
|
|
2948
3047
|
})), (input.UpdateToken !== undefined && input.UpdateToken !== null && { UpdateToken: input.UpdateToken }));
|
|
2949
3048
|
};
|
|
2950
3049
|
var serializeAws_json1_0UpdateFirewallPolicyRequest = function (input, context) {
|
|
2951
|
-
return __assign(__assign(__assign(__assign(__assign(__assign({}, (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.
|
|
3050
|
+
return __assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.EncryptionConfiguration !== undefined &&
|
|
3051
|
+
input.EncryptionConfiguration !== null && {
|
|
3052
|
+
EncryptionConfiguration: serializeAws_json1_0EncryptionConfiguration(input.EncryptionConfiguration, context),
|
|
3053
|
+
})), (input.FirewallPolicy !== undefined &&
|
|
2952
3054
|
input.FirewallPolicy !== null && {
|
|
2953
3055
|
FirewallPolicy: serializeAws_json1_0FirewallPolicy(input.FirewallPolicy, context),
|
|
2954
3056
|
})), (input.FirewallPolicyArn !== undefined &&
|
|
@@ -2962,7 +3064,10 @@ var serializeAws_json1_0UpdateLoggingConfigurationRequest = function (input, con
|
|
|
2962
3064
|
}));
|
|
2963
3065
|
};
|
|
2964
3066
|
var serializeAws_json1_0UpdateRuleGroupRequest = function (input, context) {
|
|
2965
|
-
return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.
|
|
3067
|
+
return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.Description !== undefined && input.Description !== null && { Description: input.Description })), (input.DryRun !== undefined && input.DryRun !== null && { DryRun: input.DryRun })), (input.EncryptionConfiguration !== undefined &&
|
|
3068
|
+
input.EncryptionConfiguration !== null && {
|
|
3069
|
+
EncryptionConfiguration: serializeAws_json1_0EncryptionConfiguration(input.EncryptionConfiguration, context),
|
|
3070
|
+
})), (input.RuleGroup !== undefined &&
|
|
2966
3071
|
input.RuleGroup !== null && { RuleGroup: serializeAws_json1_0RuleGroup(input.RuleGroup, context) })), (input.RuleGroupArn !== undefined && input.RuleGroupArn !== null && { RuleGroupArn: input.RuleGroupArn })), (input.RuleGroupName !== undefined && input.RuleGroupName !== null && { RuleGroupName: input.RuleGroupName })), (input.Rules !== undefined && input.Rules !== null && { Rules: input.Rules })), (input.Type !== undefined && input.Type !== null && { Type: input.Type })), (input.UpdateToken !== undefined && input.UpdateToken !== null && { UpdateToken: input.UpdateToken }));
|
|
2967
3072
|
};
|
|
2968
3073
|
var serializeAws_json1_0UpdateSubnetChangeProtectionRequest = function (input, context) {
|
|
@@ -3193,10 +3298,19 @@ var deserializeAws_json1_0DisassociateSubnetsResponse = function (output, contex
|
|
|
3193
3298
|
UpdateToken: __expectString(output.UpdateToken),
|
|
3194
3299
|
};
|
|
3195
3300
|
};
|
|
3301
|
+
var deserializeAws_json1_0EncryptionConfiguration = function (output, context) {
|
|
3302
|
+
return {
|
|
3303
|
+
KeyId: __expectString(output.KeyId),
|
|
3304
|
+
Type: __expectString(output.Type),
|
|
3305
|
+
};
|
|
3306
|
+
};
|
|
3196
3307
|
var deserializeAws_json1_0Firewall = function (output, context) {
|
|
3197
3308
|
return {
|
|
3198
3309
|
DeleteProtection: __expectBoolean(output.DeleteProtection),
|
|
3199
3310
|
Description: __expectString(output.Description),
|
|
3311
|
+
EncryptionConfiguration: output.EncryptionConfiguration !== undefined && output.EncryptionConfiguration !== null
|
|
3312
|
+
? deserializeAws_json1_0EncryptionConfiguration(output.EncryptionConfiguration, context)
|
|
3313
|
+
: undefined,
|
|
3200
3314
|
FirewallArn: __expectString(output.FirewallArn),
|
|
3201
3315
|
FirewallId: __expectString(output.FirewallId),
|
|
3202
3316
|
FirewallName: __expectString(output.FirewallName),
|
|
@@ -3265,6 +3379,9 @@ var deserializeAws_json1_0FirewallPolicyResponse = function (output, context) {
|
|
|
3265
3379
|
ConsumedStatefulRuleCapacity: __expectInt32(output.ConsumedStatefulRuleCapacity),
|
|
3266
3380
|
ConsumedStatelessRuleCapacity: __expectInt32(output.ConsumedStatelessRuleCapacity),
|
|
3267
3381
|
Description: __expectString(output.Description),
|
|
3382
|
+
EncryptionConfiguration: output.EncryptionConfiguration !== undefined && output.EncryptionConfiguration !== null
|
|
3383
|
+
? deserializeAws_json1_0EncryptionConfiguration(output.EncryptionConfiguration, context)
|
|
3384
|
+
: undefined,
|
|
3268
3385
|
FirewallPolicyArn: __expectString(output.FirewallPolicyArn),
|
|
3269
3386
|
FirewallPolicyId: __expectString(output.FirewallPolicyId),
|
|
3270
3387
|
FirewallPolicyName: __expectString(output.FirewallPolicyName),
|
|
@@ -3569,6 +3686,9 @@ var deserializeAws_json1_0RuleGroupResponse = function (output, context) {
|
|
|
3569
3686
|
Capacity: __expectInt32(output.Capacity),
|
|
3570
3687
|
ConsumedCapacity: __expectInt32(output.ConsumedCapacity),
|
|
3571
3688
|
Description: __expectString(output.Description),
|
|
3689
|
+
EncryptionConfiguration: output.EncryptionConfiguration !== undefined && output.EncryptionConfiguration !== null
|
|
3690
|
+
? deserializeAws_json1_0EncryptionConfiguration(output.EncryptionConfiguration, context)
|
|
3691
|
+
: undefined,
|
|
3572
3692
|
NumberOfAssociations: __expectInt32(output.NumberOfAssociations),
|
|
3573
3693
|
RuleGroupArn: __expectString(output.RuleGroupArn),
|
|
3574
3694
|
RuleGroupId: __expectString(output.RuleGroupId),
|
|
@@ -3919,6 +4039,16 @@ var deserializeAws_json1_0UpdateFirewallDescriptionResponse = function (output,
|
|
|
3919
4039
|
UpdateToken: __expectString(output.UpdateToken),
|
|
3920
4040
|
};
|
|
3921
4041
|
};
|
|
4042
|
+
var deserializeAws_json1_0UpdateFirewallEncryptionConfigurationResponse = function (output, context) {
|
|
4043
|
+
return {
|
|
4044
|
+
EncryptionConfiguration: output.EncryptionConfiguration !== undefined && output.EncryptionConfiguration !== null
|
|
4045
|
+
? deserializeAws_json1_0EncryptionConfiguration(output.EncryptionConfiguration, context)
|
|
4046
|
+
: undefined,
|
|
4047
|
+
FirewallArn: __expectString(output.FirewallArn),
|
|
4048
|
+
FirewallName: __expectString(output.FirewallName),
|
|
4049
|
+
UpdateToken: __expectString(output.UpdateToken),
|
|
4050
|
+
};
|
|
4051
|
+
};
|
|
3922
4052
|
var deserializeAws_json1_0UpdateFirewallPolicyChangeProtectionResponse = function (output, context) {
|
|
3923
4053
|
return {
|
|
3924
4054
|
FirewallArn: __expectString(output.FirewallArn),
|
|
@@ -24,6 +24,7 @@ import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/Ta
|
|
|
24
24
|
import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
|
|
25
25
|
import { UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput } from "./commands/UpdateFirewallDeleteProtectionCommand";
|
|
26
26
|
import { UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput } from "./commands/UpdateFirewallDescriptionCommand";
|
|
27
|
+
import { UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput } from "./commands/UpdateFirewallEncryptionConfigurationCommand";
|
|
27
28
|
import { UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput } from "./commands/UpdateFirewallPolicyChangeProtectionCommand";
|
|
28
29
|
import { UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput } from "./commands/UpdateFirewallPolicyCommand";
|
|
29
30
|
import { UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput } from "./commands/UpdateLoggingConfigurationCommand";
|
|
@@ -31,21 +32,21 @@ import { UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput } from "./com
|
|
|
31
32
|
import { UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput } from "./commands/UpdateSubnetChangeProtectionCommand";
|
|
32
33
|
import { NetworkFirewallClient } from "./NetworkFirewallClient";
|
|
33
34
|
/**
|
|
34
|
-
* <p>This is the API Reference for
|
|
35
|
+
* <p>This is the API Reference for Network Firewall. This guide is for developers who need
|
|
35
36
|
* detailed information about the Network Firewall API actions, data types, and errors. </p>
|
|
36
37
|
* <ul>
|
|
37
38
|
* <li>
|
|
38
39
|
* <p>The REST API requires you to handle connection details, such as calculating
|
|
39
40
|
* signatures, handling request retries, and error handling. For general information
|
|
40
|
-
* about using the
|
|
41
|
+
* about using the Amazon Web Services REST APIs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-apis.html">Amazon Web Services APIs</a>. </p>
|
|
41
42
|
* <p>To access Network Firewall using the REST API endpoint:
|
|
42
43
|
* <code>https://network-firewall.<region>.amazonaws.com </code>
|
|
43
44
|
* </p>
|
|
44
45
|
* </li>
|
|
45
46
|
* <li>
|
|
46
|
-
* <p>Alternatively, you can use one of the
|
|
47
|
+
* <p>Alternatively, you can use one of the Amazon Web Services SDKs to access an API that's tailored to
|
|
47
48
|
* the programming language or platform that you're using. For more information, see
|
|
48
|
-
*
|
|
49
|
+
* <a href="http://aws.amazon.com/tools/#SDKs">Amazon Web Services SDKs</a>.</p>
|
|
49
50
|
* </li>
|
|
50
51
|
* <li>
|
|
51
52
|
* <p>For descriptions of Network Firewall features, including and step-by-step
|
|
@@ -56,15 +57,15 @@ import { NetworkFirewallClient } from "./NetworkFirewallClient";
|
|
|
56
57
|
* <p>Network Firewall is a stateful, managed, network firewall and intrusion detection and
|
|
57
58
|
* prevention service for Amazon Virtual Private Cloud (Amazon VPC). With Network Firewall, you can filter traffic at the
|
|
58
59
|
* perimeter of your VPC. This includes filtering traffic going to and coming from an internet
|
|
59
|
-
* gateway, NAT gateway, or over VPN or
|
|
60
|
+
* gateway, NAT gateway, or over VPN or Direct Connect. Network Firewall uses rules that are compatible
|
|
60
61
|
* with Suricata, a free, open source intrusion detection system (IDS) engine.
|
|
61
|
-
*
|
|
62
|
+
* Network Firewall supports Suricata version 5.0.2. For information about Suricata,
|
|
62
63
|
* see the <a href="https://suricata-ids.org/">Suricata website</a>.</p>
|
|
63
64
|
* <p>You can use Network Firewall to monitor and protect your VPC traffic in a number of ways.
|
|
64
65
|
* The following are just a few examples: </p>
|
|
65
66
|
* <ul>
|
|
66
67
|
* <li>
|
|
67
|
-
* <p>Allow domains or IP addresses for known
|
|
68
|
+
* <p>Allow domains or IP addresses for known Amazon Web Services service endpoints, such as Amazon S3, and
|
|
68
69
|
* block all other forms of traffic.</p>
|
|
69
70
|
* </li>
|
|
70
71
|
* <li>
|
|
@@ -124,7 +125,7 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
124
125
|
/**
|
|
125
126
|
* <p>Associates the specified subnets in the Amazon VPC to the firewall. You can specify one
|
|
126
127
|
* subnet for each of the Availability Zones that the VPC spans. </p>
|
|
127
|
-
* <p>This request creates an
|
|
128
|
+
* <p>This request creates an Network Firewall firewall endpoint in each of the subnets. To
|
|
128
129
|
* enable the firewall's protections, you must also modify the VPC's route tables for each
|
|
129
130
|
* subnet's Availability Zone, to redirect the traffic that's coming into and going out of the
|
|
130
131
|
* zone through the firewall endpoint. </p>
|
|
@@ -133,12 +134,12 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
133
134
|
associateSubnets(args: AssociateSubnetsCommandInput, cb: (err: any, data?: AssociateSubnetsCommandOutput) => void): void;
|
|
134
135
|
associateSubnets(args: AssociateSubnetsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AssociateSubnetsCommandOutput) => void): void;
|
|
135
136
|
/**
|
|
136
|
-
* <p>Creates an
|
|
137
|
-
* <p>The firewall defines the configuration settings for an
|
|
137
|
+
* <p>Creates an Network Firewall <a>Firewall</a> and accompanying <a>FirewallStatus</a> for a VPC. </p>
|
|
138
|
+
* <p>The firewall defines the configuration settings for an Network Firewall firewall. The settings that you can define at creation include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall Amazon Web Services resource. </p>
|
|
138
139
|
* <p>After you create a firewall, you can provide additional settings, like the logging configuration. </p>
|
|
139
140
|
* <p>To update the settings for a firewall, you use the operations that apply to the settings
|
|
140
141
|
* themselves, for example <a>UpdateLoggingConfiguration</a>, <a>AssociateSubnets</a>, and <a>UpdateFirewallDeleteProtection</a>. </p>
|
|
141
|
-
* <p>To manage a firewall's tags, use the standard
|
|
142
|
+
* <p>To manage a firewall's tags, use the standard Amazon Web Services resource tagging operations, <a>ListTagsForResource</a>, <a>TagResource</a>, and <a>UntagResource</a>.</p>
|
|
142
143
|
* <p>To retrieve information about firewalls, use <a>ListFirewalls</a> and <a>DescribeFirewall</a>.</p>
|
|
143
144
|
*/
|
|
144
145
|
createFirewall(args: CreateFirewallCommandInput, options?: __HttpHandlerOptions): Promise<CreateFirewallCommandOutput>;
|
|
@@ -146,7 +147,7 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
146
147
|
createFirewall(args: CreateFirewallCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateFirewallCommandOutput) => void): void;
|
|
147
148
|
/**
|
|
148
149
|
* <p>Creates the firewall policy for the firewall according to the specifications. </p>
|
|
149
|
-
* <p>An
|
|
150
|
+
* <p>An Network Firewall firewall policy defines the behavior of a firewall, in a collection of
|
|
150
151
|
* stateless and stateful rule groups and other settings. You can use one firewall policy for
|
|
151
152
|
* multiple firewalls. </p>
|
|
152
153
|
*/
|
|
@@ -273,16 +274,16 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
273
274
|
* <p>Retrieves the tags associated with the specified resource. Tags are key:value pairs that
|
|
274
275
|
* you can use to categorize and manage your resources, for purposes like billing. For
|
|
275
276
|
* example, you might set the tag key to "customer" and the value to the customer name or ID.
|
|
276
|
-
* You can specify one or more tags to add to each
|
|
277
|
+
* You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a
|
|
277
278
|
* resource.</p>
|
|
278
|
-
* <p>You can tag the
|
|
279
|
+
* <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls, firewall
|
|
279
280
|
* policies, and rule groups. </p>
|
|
280
281
|
*/
|
|
281
282
|
listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
|
|
282
283
|
listTagsForResource(args: ListTagsForResourceCommandInput, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
|
|
283
284
|
listTagsForResource(args: ListTagsForResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
|
|
284
285
|
/**
|
|
285
|
-
* <p>Creates or updates an
|
|
286
|
+
* <p>Creates or updates an IAM policy for your rule group or firewall policy. Use this to share rule groups and firewall policies between accounts. This operation works in conjunction with the Amazon Web Services Resource Access Manager (RAM) service
|
|
286
287
|
* to manage resource sharing for Network Firewall. </p>
|
|
287
288
|
* <p>Use this operation to create or update a resource policy for your rule group or firewall policy. In the policy, you specify the accounts that you want to share the resource with and the operations that you want the accounts to be able to perform. </p>
|
|
288
289
|
* <p>When you add an account in the resource policy, you then run the following Resource Access Manager (RAM) operations to access and accept the shared rule group or firewall policy. </p>
|
|
@@ -296,7 +297,7 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
296
297
|
* <a href="https://docs.aws.amazon.com/ram/latest/APIReference/API_AcceptResourceShareInvitation.html">AcceptResourceShareInvitation</a> - Accepts the share invitation for a specified resource share. </p>
|
|
297
298
|
* </li>
|
|
298
299
|
* </ul>
|
|
299
|
-
* <p>For additional information about resource sharing using RAM, see <a href="https://docs.aws.amazon.com/ram/latest/userguide/what-is.html">
|
|
300
|
+
* <p>For additional information about resource sharing using RAM, see <a href="https://docs.aws.amazon.com/ram/latest/userguide/what-is.html">Resource Access Manager User Guide</a>.</p>
|
|
300
301
|
*/
|
|
301
302
|
putResourcePolicy(args: PutResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutResourcePolicyCommandOutput>;
|
|
302
303
|
putResourcePolicy(args: PutResourcePolicyCommandInput, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
|
|
@@ -305,8 +306,8 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
305
306
|
* <p>Adds the specified tags to the specified resource. Tags are key:value pairs that you can
|
|
306
307
|
* use to categorize and manage your resources, for purposes like billing. For example, you
|
|
307
308
|
* might set the tag key to "customer" and the value to the customer name or ID. You can
|
|
308
|
-
* specify one or more tags to add to each
|
|
309
|
-
* <p>You can tag the
|
|
309
|
+
* specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a resource.</p>
|
|
310
|
+
* <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls, firewall
|
|
310
311
|
* policies, and rule groups. </p>
|
|
311
312
|
*/
|
|
312
313
|
tagResource(args: TagResourceCommandInput, options?: __HttpHandlerOptions): Promise<TagResourceCommandOutput>;
|
|
@@ -316,9 +317,9 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
316
317
|
* <p>Removes the tags with the specified keys from the specified resource. Tags are key:value
|
|
317
318
|
* pairs that you can use to categorize and manage your resources, for purposes like billing.
|
|
318
319
|
* For example, you might set the tag key to "customer" and the value to the customer name or
|
|
319
|
-
* ID. You can specify one or more tags to add to each
|
|
320
|
+
* ID. You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a
|
|
320
321
|
* resource.</p>
|
|
321
|
-
* <p>You can manage tags for the
|
|
322
|
+
* <p>You can manage tags for the Amazon Web Services resources that you manage through Network Firewall:
|
|
322
323
|
* firewalls, firewall policies, and rule groups. </p>
|
|
323
324
|
*/
|
|
324
325
|
untagResource(args: UntagResourceCommandInput, options?: __HttpHandlerOptions): Promise<UntagResourceCommandOutput>;
|
|
@@ -340,6 +341,12 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
340
341
|
updateFirewallDescription(args: UpdateFirewallDescriptionCommandInput, options?: __HttpHandlerOptions): Promise<UpdateFirewallDescriptionCommandOutput>;
|
|
341
342
|
updateFirewallDescription(args: UpdateFirewallDescriptionCommandInput, cb: (err: any, data?: UpdateFirewallDescriptionCommandOutput) => void): void;
|
|
342
343
|
updateFirewallDescription(args: UpdateFirewallDescriptionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateFirewallDescriptionCommandOutput) => void): void;
|
|
344
|
+
/**
|
|
345
|
+
* <p>A complex type that contains settings for encryption of your firewall resources.</p>
|
|
346
|
+
*/
|
|
347
|
+
updateFirewallEncryptionConfiguration(args: UpdateFirewallEncryptionConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<UpdateFirewallEncryptionConfigurationCommandOutput>;
|
|
348
|
+
updateFirewallEncryptionConfiguration(args: UpdateFirewallEncryptionConfigurationCommandInput, cb: (err: any, data?: UpdateFirewallEncryptionConfigurationCommandOutput) => void): void;
|
|
349
|
+
updateFirewallEncryptionConfiguration(args: UpdateFirewallEncryptionConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateFirewallEncryptionConfigurationCommandOutput) => void): void;
|
|
343
350
|
/**
|
|
344
351
|
* <p>Updates the properties of the specified firewall policy.</p>
|
|
345
352
|
*/
|
|
@@ -31,13 +31,14 @@ import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/Ta
|
|
|
31
31
|
import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
|
|
32
32
|
import { UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput } from "./commands/UpdateFirewallDeleteProtectionCommand";
|
|
33
33
|
import { UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput } from "./commands/UpdateFirewallDescriptionCommand";
|
|
34
|
+
import { UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput } from "./commands/UpdateFirewallEncryptionConfigurationCommand";
|
|
34
35
|
import { UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput } from "./commands/UpdateFirewallPolicyChangeProtectionCommand";
|
|
35
36
|
import { UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput } from "./commands/UpdateFirewallPolicyCommand";
|
|
36
37
|
import { UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput } from "./commands/UpdateLoggingConfigurationCommand";
|
|
37
38
|
import { UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput } from "./commands/UpdateRuleGroupCommand";
|
|
38
39
|
import { UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput } from "./commands/UpdateSubnetChangeProtectionCommand";
|
|
39
|
-
export declare type ServiceInputTypes = AssociateFirewallPolicyCommandInput | AssociateSubnetsCommandInput | CreateFirewallCommandInput | CreateFirewallPolicyCommandInput | CreateRuleGroupCommandInput | DeleteFirewallCommandInput | DeleteFirewallPolicyCommandInput | DeleteResourcePolicyCommandInput | DeleteRuleGroupCommandInput | DescribeFirewallCommandInput | DescribeFirewallPolicyCommandInput | DescribeLoggingConfigurationCommandInput | DescribeResourcePolicyCommandInput | DescribeRuleGroupCommandInput | DescribeRuleGroupMetadataCommandInput | DisassociateSubnetsCommandInput | ListFirewallPoliciesCommandInput | ListFirewallsCommandInput | ListRuleGroupsCommandInput | ListTagsForResourceCommandInput | PutResourcePolicyCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateFirewallDeleteProtectionCommandInput | UpdateFirewallDescriptionCommandInput | UpdateFirewallPolicyChangeProtectionCommandInput | UpdateFirewallPolicyCommandInput | UpdateLoggingConfigurationCommandInput | UpdateRuleGroupCommandInput | UpdateSubnetChangeProtectionCommandInput;
|
|
40
|
-
export declare type ServiceOutputTypes = AssociateFirewallPolicyCommandOutput | AssociateSubnetsCommandOutput | CreateFirewallCommandOutput | CreateFirewallPolicyCommandOutput | CreateRuleGroupCommandOutput | DeleteFirewallCommandOutput | DeleteFirewallPolicyCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRuleGroupCommandOutput | DescribeFirewallCommandOutput | DescribeFirewallPolicyCommandOutput | DescribeLoggingConfigurationCommandOutput | DescribeResourcePolicyCommandOutput | DescribeRuleGroupCommandOutput | DescribeRuleGroupMetadataCommandOutput | DisassociateSubnetsCommandOutput | ListFirewallPoliciesCommandOutput | ListFirewallsCommandOutput | ListRuleGroupsCommandOutput | ListTagsForResourceCommandOutput | PutResourcePolicyCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateFirewallDeleteProtectionCommandOutput | UpdateFirewallDescriptionCommandOutput | UpdateFirewallPolicyChangeProtectionCommandOutput | UpdateFirewallPolicyCommandOutput | UpdateLoggingConfigurationCommandOutput | UpdateRuleGroupCommandOutput | UpdateSubnetChangeProtectionCommandOutput;
|
|
40
|
+
export declare type ServiceInputTypes = AssociateFirewallPolicyCommandInput | AssociateSubnetsCommandInput | CreateFirewallCommandInput | CreateFirewallPolicyCommandInput | CreateRuleGroupCommandInput | DeleteFirewallCommandInput | DeleteFirewallPolicyCommandInput | DeleteResourcePolicyCommandInput | DeleteRuleGroupCommandInput | DescribeFirewallCommandInput | DescribeFirewallPolicyCommandInput | DescribeLoggingConfigurationCommandInput | DescribeResourcePolicyCommandInput | DescribeRuleGroupCommandInput | DescribeRuleGroupMetadataCommandInput | DisassociateSubnetsCommandInput | ListFirewallPoliciesCommandInput | ListFirewallsCommandInput | ListRuleGroupsCommandInput | ListTagsForResourceCommandInput | PutResourcePolicyCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateFirewallDeleteProtectionCommandInput | UpdateFirewallDescriptionCommandInput | UpdateFirewallEncryptionConfigurationCommandInput | UpdateFirewallPolicyChangeProtectionCommandInput | UpdateFirewallPolicyCommandInput | UpdateLoggingConfigurationCommandInput | UpdateRuleGroupCommandInput | UpdateSubnetChangeProtectionCommandInput;
|
|
41
|
+
export declare type ServiceOutputTypes = AssociateFirewallPolicyCommandOutput | AssociateSubnetsCommandOutput | CreateFirewallCommandOutput | CreateFirewallPolicyCommandOutput | CreateRuleGroupCommandOutput | DeleteFirewallCommandOutput | DeleteFirewallPolicyCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRuleGroupCommandOutput | DescribeFirewallCommandOutput | DescribeFirewallPolicyCommandOutput | DescribeLoggingConfigurationCommandOutput | DescribeResourcePolicyCommandOutput | DescribeRuleGroupCommandOutput | DescribeRuleGroupMetadataCommandOutput | DisassociateSubnetsCommandOutput | ListFirewallPoliciesCommandOutput | ListFirewallsCommandOutput | ListRuleGroupsCommandOutput | ListTagsForResourceCommandOutput | PutResourcePolicyCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateFirewallDeleteProtectionCommandOutput | UpdateFirewallDescriptionCommandOutput | UpdateFirewallEncryptionConfigurationCommandOutput | UpdateFirewallPolicyChangeProtectionCommandOutput | UpdateFirewallPolicyCommandOutput | UpdateLoggingConfigurationCommandOutput | UpdateRuleGroupCommandOutput | UpdateSubnetChangeProtectionCommandOutput;
|
|
41
42
|
export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
|
|
42
43
|
/**
|
|
43
44
|
* The HTTP handler to use. Fetch in browser and Https in Nodejs.
|
|
@@ -156,21 +157,21 @@ declare type NetworkFirewallClientResolvedConfigType = __SmithyResolvedConfigura
|
|
|
156
157
|
export interface NetworkFirewallClientResolvedConfig extends NetworkFirewallClientResolvedConfigType {
|
|
157
158
|
}
|
|
158
159
|
/**
|
|
159
|
-
* <p>This is the API Reference for
|
|
160
|
+
* <p>This is the API Reference for Network Firewall. This guide is for developers who need
|
|
160
161
|
* detailed information about the Network Firewall API actions, data types, and errors. </p>
|
|
161
162
|
* <ul>
|
|
162
163
|
* <li>
|
|
163
164
|
* <p>The REST API requires you to handle connection details, such as calculating
|
|
164
165
|
* signatures, handling request retries, and error handling. For general information
|
|
165
|
-
* about using the
|
|
166
|
+
* about using the Amazon Web Services REST APIs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-apis.html">Amazon Web Services APIs</a>. </p>
|
|
166
167
|
* <p>To access Network Firewall using the REST API endpoint:
|
|
167
168
|
* <code>https://network-firewall.<region>.amazonaws.com </code>
|
|
168
169
|
* </p>
|
|
169
170
|
* </li>
|
|
170
171
|
* <li>
|
|
171
|
-
* <p>Alternatively, you can use one of the
|
|
172
|
+
* <p>Alternatively, you can use one of the Amazon Web Services SDKs to access an API that's tailored to
|
|
172
173
|
* the programming language or platform that you're using. For more information, see
|
|
173
|
-
*
|
|
174
|
+
* <a href="http://aws.amazon.com/tools/#SDKs">Amazon Web Services SDKs</a>.</p>
|
|
174
175
|
* </li>
|
|
175
176
|
* <li>
|
|
176
177
|
* <p>For descriptions of Network Firewall features, including and step-by-step
|
|
@@ -181,15 +182,15 @@ export interface NetworkFirewallClientResolvedConfig extends NetworkFirewallClie
|
|
|
181
182
|
* <p>Network Firewall is a stateful, managed, network firewall and intrusion detection and
|
|
182
183
|
* prevention service for Amazon Virtual Private Cloud (Amazon VPC). With Network Firewall, you can filter traffic at the
|
|
183
184
|
* perimeter of your VPC. This includes filtering traffic going to and coming from an internet
|
|
184
|
-
* gateway, NAT gateway, or over VPN or
|
|
185
|
+
* gateway, NAT gateway, or over VPN or Direct Connect. Network Firewall uses rules that are compatible
|
|
185
186
|
* with Suricata, a free, open source intrusion detection system (IDS) engine.
|
|
186
|
-
*
|
|
187
|
+
* Network Firewall supports Suricata version 5.0.2. For information about Suricata,
|
|
187
188
|
* see the <a href="https://suricata-ids.org/">Suricata website</a>.</p>
|
|
188
189
|
* <p>You can use Network Firewall to monitor and protect your VPC traffic in a number of ways.
|
|
189
190
|
* The following are just a few examples: </p>
|
|
190
191
|
* <ul>
|
|
191
192
|
* <li>
|
|
192
|
-
* <p>Allow domains or IP addresses for known
|
|
193
|
+
* <p>Allow domains or IP addresses for known Amazon Web Services service endpoints, such as Amazon S3, and
|
|
193
194
|
* block all other forms of traffic.</p>
|
|
194
195
|
* </li>
|
|
195
196
|
* <li>
|
|
@@ -9,7 +9,7 @@ export interface AssociateSubnetsCommandOutput extends AssociateSubnetsResponse,
|
|
|
9
9
|
/**
|
|
10
10
|
* <p>Associates the specified subnets in the Amazon VPC to the firewall. You can specify one
|
|
11
11
|
* subnet for each of the Availability Zones that the VPC spans. </p>
|
|
12
|
-
* <p>This request creates an
|
|
12
|
+
* <p>This request creates an Network Firewall firewall endpoint in each of the subnets. To
|
|
13
13
|
* enable the firewall's protections, you must also modify the VPC's route tables for each
|
|
14
14
|
* subnet's Availability Zone, to redirect the traffic that's coming into and going out of the
|
|
15
15
|
* zone through the firewall endpoint. </p>
|
|
@@ -7,12 +7,12 @@ export interface CreateFirewallCommandInput extends CreateFirewallRequest {
|
|
|
7
7
|
export interface CreateFirewallCommandOutput extends CreateFirewallResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Creates an
|
|
11
|
-
* <p>The firewall defines the configuration settings for an
|
|
10
|
+
* <p>Creates an Network Firewall <a>Firewall</a> and accompanying <a>FirewallStatus</a> for a VPC. </p>
|
|
11
|
+
* <p>The firewall defines the configuration settings for an Network Firewall firewall. The settings that you can define at creation include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall Amazon Web Services resource. </p>
|
|
12
12
|
* <p>After you create a firewall, you can provide additional settings, like the logging configuration. </p>
|
|
13
13
|
* <p>To update the settings for a firewall, you use the operations that apply to the settings
|
|
14
14
|
* themselves, for example <a>UpdateLoggingConfiguration</a>, <a>AssociateSubnets</a>, and <a>UpdateFirewallDeleteProtection</a>. </p>
|
|
15
|
-
* <p>To manage a firewall's tags, use the standard
|
|
15
|
+
* <p>To manage a firewall's tags, use the standard Amazon Web Services resource tagging operations, <a>ListTagsForResource</a>, <a>TagResource</a>, and <a>UntagResource</a>.</p>
|
|
16
16
|
* <p>To retrieve information about firewalls, use <a>ListFirewalls</a> and <a>DescribeFirewall</a>.</p>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -8,7 +8,7 @@ export interface CreateFirewallPolicyCommandOutput extends CreateFirewallPolicyR
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Creates the firewall policy for the firewall according to the specifications. </p>
|
|
11
|
-
* <p>An
|
|
11
|
+
* <p>An Network Firewall firewall policy defines the behavior of a firewall, in a collection of
|
|
12
12
|
* stateless and stateful rule groups and other settings. You can use one firewall policy for
|
|
13
13
|
* multiple firewalls. </p>
|
|
14
14
|
* @example
|
|
@@ -10,9 +10,9 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
|
|
|
10
10
|
* <p>Retrieves the tags associated with the specified resource. Tags are key:value pairs that
|
|
11
11
|
* you can use to categorize and manage your resources, for purposes like billing. For
|
|
12
12
|
* example, you might set the tag key to "customer" and the value to the customer name or ID.
|
|
13
|
-
* You can specify one or more tags to add to each
|
|
13
|
+
* You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a
|
|
14
14
|
* resource.</p>
|
|
15
|
-
* <p>You can tag the
|
|
15
|
+
* <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls, firewall
|
|
16
16
|
* policies, and rule groups. </p>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|