@aws-sdk/client-network-firewall 3.76.0 → 3.80.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +31 -0
- package/README.md +7 -7
- package/dist-cjs/NetworkFirewall.js +15 -0
- package/dist-cjs/commands/UpdateFirewallEncryptionConfigurationCommand.js +36 -0
- package/dist-cjs/commands/index.js +1 -0
- package/dist-cjs/models/models_0.js +37 -3
- package/dist-cjs/pagination/ListFirewallPoliciesPaginator.js +2 -1
- package/dist-cjs/pagination/ListFirewallsPaginator.js +2 -1
- package/dist-cjs/pagination/ListRuleGroupsPaginator.js +2 -1
- package/dist-cjs/pagination/ListTagsForResourcePaginator.js +2 -1
- package/dist-cjs/protocols/Aws_json1_0.js +161 -2
- package/dist-es/NetworkFirewall.js +15 -0
- package/dist-es/commands/UpdateFirewallEncryptionConfigurationCommand.js +39 -0
- package/dist-es/commands/index.js +1 -0
- package/dist-es/models/models_0.js +26 -0
- package/dist-es/pagination/ListFirewallPoliciesPaginator.js +3 -2
- package/dist-es/pagination/ListFirewallsPaginator.js +3 -2
- package/dist-es/pagination/ListRuleGroupsPaginator.js +3 -2
- package/dist-es/pagination/ListTagsForResourcePaginator.js +3 -2
- package/dist-es/protocols/Aws_json1_0.js +169 -10
- package/dist-types/NetworkFirewall.d.ts +27 -20
- package/dist-types/NetworkFirewallClient.d.ts +10 -9
- package/dist-types/commands/AssociateSubnetsCommand.d.ts +1 -1
- package/dist-types/commands/CreateFirewallCommand.d.ts +3 -3
- package/dist-types/commands/CreateFirewallPolicyCommand.d.ts +1 -1
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +2 -2
- package/dist-types/commands/PutResourcePolicyCommand.d.ts +2 -2
- package/dist-types/commands/TagResourceCommand.d.ts +2 -2
- package/dist-types/commands/UntagResourceCommand.d.ts +2 -2
- package/dist-types/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +35 -0
- package/dist-types/commands/index.d.ts +1 -0
- package/dist-types/models/models_0.d.ts +193 -24
- package/dist-types/protocols/Aws_json1_0.d.ts +3 -0
- package/dist-types/ts3.4/NetworkFirewall.d.ts +5 -0
- package/dist-types/ts3.4/NetworkFirewallClient.d.ts +3 -2
- package/dist-types/ts3.4/commands/UpdateFirewallEncryptionConfigurationCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/index.d.ts +1 -0
- package/dist-types/ts3.4/models/models_0.d.ts +92 -0
- package/dist-types/ts3.4/protocols/Aws_json1_0.d.ts +3 -0
- package/package.json +25 -25
|
@@ -24,6 +24,7 @@ import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/Ta
|
|
|
24
24
|
import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
|
|
25
25
|
import { UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput } from "./commands/UpdateFirewallDeleteProtectionCommand";
|
|
26
26
|
import { UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput } from "./commands/UpdateFirewallDescriptionCommand";
|
|
27
|
+
import { UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput } from "./commands/UpdateFirewallEncryptionConfigurationCommand";
|
|
27
28
|
import { UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput } from "./commands/UpdateFirewallPolicyChangeProtectionCommand";
|
|
28
29
|
import { UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput } from "./commands/UpdateFirewallPolicyCommand";
|
|
29
30
|
import { UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput } from "./commands/UpdateLoggingConfigurationCommand";
|
|
@@ -31,21 +32,21 @@ import { UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput } from "./com
|
|
|
31
32
|
import { UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput } from "./commands/UpdateSubnetChangeProtectionCommand";
|
|
32
33
|
import { NetworkFirewallClient } from "./NetworkFirewallClient";
|
|
33
34
|
/**
|
|
34
|
-
* <p>This is the API Reference for
|
|
35
|
+
* <p>This is the API Reference for Network Firewall. This guide is for developers who need
|
|
35
36
|
* detailed information about the Network Firewall API actions, data types, and errors. </p>
|
|
36
37
|
* <ul>
|
|
37
38
|
* <li>
|
|
38
39
|
* <p>The REST API requires you to handle connection details, such as calculating
|
|
39
40
|
* signatures, handling request retries, and error handling. For general information
|
|
40
|
-
* about using the
|
|
41
|
+
* about using the Amazon Web Services REST APIs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-apis.html">Amazon Web Services APIs</a>. </p>
|
|
41
42
|
* <p>To access Network Firewall using the REST API endpoint:
|
|
42
43
|
* <code>https://network-firewall.<region>.amazonaws.com </code>
|
|
43
44
|
* </p>
|
|
44
45
|
* </li>
|
|
45
46
|
* <li>
|
|
46
|
-
* <p>Alternatively, you can use one of the
|
|
47
|
+
* <p>Alternatively, you can use one of the Amazon Web Services SDKs to access an API that's tailored to
|
|
47
48
|
* the programming language or platform that you're using. For more information, see
|
|
48
|
-
*
|
|
49
|
+
* <a href="http://aws.amazon.com/tools/#SDKs">Amazon Web Services SDKs</a>.</p>
|
|
49
50
|
* </li>
|
|
50
51
|
* <li>
|
|
51
52
|
* <p>For descriptions of Network Firewall features, including and step-by-step
|
|
@@ -56,15 +57,15 @@ import { NetworkFirewallClient } from "./NetworkFirewallClient";
|
|
|
56
57
|
* <p>Network Firewall is a stateful, managed, network firewall and intrusion detection and
|
|
57
58
|
* prevention service for Amazon Virtual Private Cloud (Amazon VPC). With Network Firewall, you can filter traffic at the
|
|
58
59
|
* perimeter of your VPC. This includes filtering traffic going to and coming from an internet
|
|
59
|
-
* gateway, NAT gateway, or over VPN or
|
|
60
|
+
* gateway, NAT gateway, or over VPN or Direct Connect. Network Firewall uses rules that are compatible
|
|
60
61
|
* with Suricata, a free, open source intrusion detection system (IDS) engine.
|
|
61
|
-
*
|
|
62
|
+
* Network Firewall supports Suricata version 5.0.2. For information about Suricata,
|
|
62
63
|
* see the <a href="https://suricata-ids.org/">Suricata website</a>.</p>
|
|
63
64
|
* <p>You can use Network Firewall to monitor and protect your VPC traffic in a number of ways.
|
|
64
65
|
* The following are just a few examples: </p>
|
|
65
66
|
* <ul>
|
|
66
67
|
* <li>
|
|
67
|
-
* <p>Allow domains or IP addresses for known
|
|
68
|
+
* <p>Allow domains or IP addresses for known Amazon Web Services service endpoints, such as Amazon S3, and
|
|
68
69
|
* block all other forms of traffic.</p>
|
|
69
70
|
* </li>
|
|
70
71
|
* <li>
|
|
@@ -124,7 +125,7 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
124
125
|
/**
|
|
125
126
|
* <p>Associates the specified subnets in the Amazon VPC to the firewall. You can specify one
|
|
126
127
|
* subnet for each of the Availability Zones that the VPC spans. </p>
|
|
127
|
-
* <p>This request creates an
|
|
128
|
+
* <p>This request creates an Network Firewall firewall endpoint in each of the subnets. To
|
|
128
129
|
* enable the firewall's protections, you must also modify the VPC's route tables for each
|
|
129
130
|
* subnet's Availability Zone, to redirect the traffic that's coming into and going out of the
|
|
130
131
|
* zone through the firewall endpoint. </p>
|
|
@@ -133,12 +134,12 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
133
134
|
associateSubnets(args: AssociateSubnetsCommandInput, cb: (err: any, data?: AssociateSubnetsCommandOutput) => void): void;
|
|
134
135
|
associateSubnets(args: AssociateSubnetsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AssociateSubnetsCommandOutput) => void): void;
|
|
135
136
|
/**
|
|
136
|
-
* <p>Creates an
|
|
137
|
-
* <p>The firewall defines the configuration settings for an
|
|
137
|
+
* <p>Creates an Network Firewall <a>Firewall</a> and accompanying <a>FirewallStatus</a> for a VPC. </p>
|
|
138
|
+
* <p>The firewall defines the configuration settings for an Network Firewall firewall. The settings that you can define at creation include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall Amazon Web Services resource. </p>
|
|
138
139
|
* <p>After you create a firewall, you can provide additional settings, like the logging configuration. </p>
|
|
139
140
|
* <p>To update the settings for a firewall, you use the operations that apply to the settings
|
|
140
141
|
* themselves, for example <a>UpdateLoggingConfiguration</a>, <a>AssociateSubnets</a>, and <a>UpdateFirewallDeleteProtection</a>. </p>
|
|
141
|
-
* <p>To manage a firewall's tags, use the standard
|
|
142
|
+
* <p>To manage a firewall's tags, use the standard Amazon Web Services resource tagging operations, <a>ListTagsForResource</a>, <a>TagResource</a>, and <a>UntagResource</a>.</p>
|
|
142
143
|
* <p>To retrieve information about firewalls, use <a>ListFirewalls</a> and <a>DescribeFirewall</a>.</p>
|
|
143
144
|
*/
|
|
144
145
|
createFirewall(args: CreateFirewallCommandInput, options?: __HttpHandlerOptions): Promise<CreateFirewallCommandOutput>;
|
|
@@ -146,7 +147,7 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
146
147
|
createFirewall(args: CreateFirewallCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateFirewallCommandOutput) => void): void;
|
|
147
148
|
/**
|
|
148
149
|
* <p>Creates the firewall policy for the firewall according to the specifications. </p>
|
|
149
|
-
* <p>An
|
|
150
|
+
* <p>An Network Firewall firewall policy defines the behavior of a firewall, in a collection of
|
|
150
151
|
* stateless and stateful rule groups and other settings. You can use one firewall policy for
|
|
151
152
|
* multiple firewalls. </p>
|
|
152
153
|
*/
|
|
@@ -273,16 +274,16 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
273
274
|
* <p>Retrieves the tags associated with the specified resource. Tags are key:value pairs that
|
|
274
275
|
* you can use to categorize and manage your resources, for purposes like billing. For
|
|
275
276
|
* example, you might set the tag key to "customer" and the value to the customer name or ID.
|
|
276
|
-
* You can specify one or more tags to add to each
|
|
277
|
+
* You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a
|
|
277
278
|
* resource.</p>
|
|
278
|
-
* <p>You can tag the
|
|
279
|
+
* <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls, firewall
|
|
279
280
|
* policies, and rule groups. </p>
|
|
280
281
|
*/
|
|
281
282
|
listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
|
|
282
283
|
listTagsForResource(args: ListTagsForResourceCommandInput, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
|
|
283
284
|
listTagsForResource(args: ListTagsForResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
|
|
284
285
|
/**
|
|
285
|
-
* <p>Creates or updates an
|
|
286
|
+
* <p>Creates or updates an IAM policy for your rule group or firewall policy. Use this to share rule groups and firewall policies between accounts. This operation works in conjunction with the Amazon Web Services Resource Access Manager (RAM) service
|
|
286
287
|
* to manage resource sharing for Network Firewall. </p>
|
|
287
288
|
* <p>Use this operation to create or update a resource policy for your rule group or firewall policy. In the policy, you specify the accounts that you want to share the resource with and the operations that you want the accounts to be able to perform. </p>
|
|
288
289
|
* <p>When you add an account in the resource policy, you then run the following Resource Access Manager (RAM) operations to access and accept the shared rule group or firewall policy. </p>
|
|
@@ -296,7 +297,7 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
296
297
|
* <a href="https://docs.aws.amazon.com/ram/latest/APIReference/API_AcceptResourceShareInvitation.html">AcceptResourceShareInvitation</a> - Accepts the share invitation for a specified resource share. </p>
|
|
297
298
|
* </li>
|
|
298
299
|
* </ul>
|
|
299
|
-
* <p>For additional information about resource sharing using RAM, see <a href="https://docs.aws.amazon.com/ram/latest/userguide/what-is.html">
|
|
300
|
+
* <p>For additional information about resource sharing using RAM, see <a href="https://docs.aws.amazon.com/ram/latest/userguide/what-is.html">Resource Access Manager User Guide</a>.</p>
|
|
300
301
|
*/
|
|
301
302
|
putResourcePolicy(args: PutResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutResourcePolicyCommandOutput>;
|
|
302
303
|
putResourcePolicy(args: PutResourcePolicyCommandInput, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
|
|
@@ -305,8 +306,8 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
305
306
|
* <p>Adds the specified tags to the specified resource. Tags are key:value pairs that you can
|
|
306
307
|
* use to categorize and manage your resources, for purposes like billing. For example, you
|
|
307
308
|
* might set the tag key to "customer" and the value to the customer name or ID. You can
|
|
308
|
-
* specify one or more tags to add to each
|
|
309
|
-
* <p>You can tag the
|
|
309
|
+
* specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a resource.</p>
|
|
310
|
+
* <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls, firewall
|
|
310
311
|
* policies, and rule groups. </p>
|
|
311
312
|
*/
|
|
312
313
|
tagResource(args: TagResourceCommandInput, options?: __HttpHandlerOptions): Promise<TagResourceCommandOutput>;
|
|
@@ -316,9 +317,9 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
316
317
|
* <p>Removes the tags with the specified keys from the specified resource. Tags are key:value
|
|
317
318
|
* pairs that you can use to categorize and manage your resources, for purposes like billing.
|
|
318
319
|
* For example, you might set the tag key to "customer" and the value to the customer name or
|
|
319
|
-
* ID. You can specify one or more tags to add to each
|
|
320
|
+
* ID. You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a
|
|
320
321
|
* resource.</p>
|
|
321
|
-
* <p>You can manage tags for the
|
|
322
|
+
* <p>You can manage tags for the Amazon Web Services resources that you manage through Network Firewall:
|
|
322
323
|
* firewalls, firewall policies, and rule groups. </p>
|
|
323
324
|
*/
|
|
324
325
|
untagResource(args: UntagResourceCommandInput, options?: __HttpHandlerOptions): Promise<UntagResourceCommandOutput>;
|
|
@@ -340,6 +341,12 @@ export declare class NetworkFirewall extends NetworkFirewallClient {
|
|
|
340
341
|
updateFirewallDescription(args: UpdateFirewallDescriptionCommandInput, options?: __HttpHandlerOptions): Promise<UpdateFirewallDescriptionCommandOutput>;
|
|
341
342
|
updateFirewallDescription(args: UpdateFirewallDescriptionCommandInput, cb: (err: any, data?: UpdateFirewallDescriptionCommandOutput) => void): void;
|
|
342
343
|
updateFirewallDescription(args: UpdateFirewallDescriptionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateFirewallDescriptionCommandOutput) => void): void;
|
|
344
|
+
/**
|
|
345
|
+
* <p>A complex type that contains settings for encryption of your firewall resources.</p>
|
|
346
|
+
*/
|
|
347
|
+
updateFirewallEncryptionConfiguration(args: UpdateFirewallEncryptionConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<UpdateFirewallEncryptionConfigurationCommandOutput>;
|
|
348
|
+
updateFirewallEncryptionConfiguration(args: UpdateFirewallEncryptionConfigurationCommandInput, cb: (err: any, data?: UpdateFirewallEncryptionConfigurationCommandOutput) => void): void;
|
|
349
|
+
updateFirewallEncryptionConfiguration(args: UpdateFirewallEncryptionConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateFirewallEncryptionConfigurationCommandOutput) => void): void;
|
|
343
350
|
/**
|
|
344
351
|
* <p>Updates the properties of the specified firewall policy.</p>
|
|
345
352
|
*/
|
|
@@ -31,13 +31,14 @@ import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/Ta
|
|
|
31
31
|
import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
|
|
32
32
|
import { UpdateFirewallDeleteProtectionCommandInput, UpdateFirewallDeleteProtectionCommandOutput } from "./commands/UpdateFirewallDeleteProtectionCommand";
|
|
33
33
|
import { UpdateFirewallDescriptionCommandInput, UpdateFirewallDescriptionCommandOutput } from "./commands/UpdateFirewallDescriptionCommand";
|
|
34
|
+
import { UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput } from "./commands/UpdateFirewallEncryptionConfigurationCommand";
|
|
34
35
|
import { UpdateFirewallPolicyChangeProtectionCommandInput, UpdateFirewallPolicyChangeProtectionCommandOutput } from "./commands/UpdateFirewallPolicyChangeProtectionCommand";
|
|
35
36
|
import { UpdateFirewallPolicyCommandInput, UpdateFirewallPolicyCommandOutput } from "./commands/UpdateFirewallPolicyCommand";
|
|
36
37
|
import { UpdateLoggingConfigurationCommandInput, UpdateLoggingConfigurationCommandOutput } from "./commands/UpdateLoggingConfigurationCommand";
|
|
37
38
|
import { UpdateRuleGroupCommandInput, UpdateRuleGroupCommandOutput } from "./commands/UpdateRuleGroupCommand";
|
|
38
39
|
import { UpdateSubnetChangeProtectionCommandInput, UpdateSubnetChangeProtectionCommandOutput } from "./commands/UpdateSubnetChangeProtectionCommand";
|
|
39
|
-
export declare type ServiceInputTypes = AssociateFirewallPolicyCommandInput | AssociateSubnetsCommandInput | CreateFirewallCommandInput | CreateFirewallPolicyCommandInput | CreateRuleGroupCommandInput | DeleteFirewallCommandInput | DeleteFirewallPolicyCommandInput | DeleteResourcePolicyCommandInput | DeleteRuleGroupCommandInput | DescribeFirewallCommandInput | DescribeFirewallPolicyCommandInput | DescribeLoggingConfigurationCommandInput | DescribeResourcePolicyCommandInput | DescribeRuleGroupCommandInput | DescribeRuleGroupMetadataCommandInput | DisassociateSubnetsCommandInput | ListFirewallPoliciesCommandInput | ListFirewallsCommandInput | ListRuleGroupsCommandInput | ListTagsForResourceCommandInput | PutResourcePolicyCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateFirewallDeleteProtectionCommandInput | UpdateFirewallDescriptionCommandInput | UpdateFirewallPolicyChangeProtectionCommandInput | UpdateFirewallPolicyCommandInput | UpdateLoggingConfigurationCommandInput | UpdateRuleGroupCommandInput | UpdateSubnetChangeProtectionCommandInput;
|
|
40
|
-
export declare type ServiceOutputTypes = AssociateFirewallPolicyCommandOutput | AssociateSubnetsCommandOutput | CreateFirewallCommandOutput | CreateFirewallPolicyCommandOutput | CreateRuleGroupCommandOutput | DeleteFirewallCommandOutput | DeleteFirewallPolicyCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRuleGroupCommandOutput | DescribeFirewallCommandOutput | DescribeFirewallPolicyCommandOutput | DescribeLoggingConfigurationCommandOutput | DescribeResourcePolicyCommandOutput | DescribeRuleGroupCommandOutput | DescribeRuleGroupMetadataCommandOutput | DisassociateSubnetsCommandOutput | ListFirewallPoliciesCommandOutput | ListFirewallsCommandOutput | ListRuleGroupsCommandOutput | ListTagsForResourceCommandOutput | PutResourcePolicyCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateFirewallDeleteProtectionCommandOutput | UpdateFirewallDescriptionCommandOutput | UpdateFirewallPolicyChangeProtectionCommandOutput | UpdateFirewallPolicyCommandOutput | UpdateLoggingConfigurationCommandOutput | UpdateRuleGroupCommandOutput | UpdateSubnetChangeProtectionCommandOutput;
|
|
40
|
+
export declare type ServiceInputTypes = AssociateFirewallPolicyCommandInput | AssociateSubnetsCommandInput | CreateFirewallCommandInput | CreateFirewallPolicyCommandInput | CreateRuleGroupCommandInput | DeleteFirewallCommandInput | DeleteFirewallPolicyCommandInput | DeleteResourcePolicyCommandInput | DeleteRuleGroupCommandInput | DescribeFirewallCommandInput | DescribeFirewallPolicyCommandInput | DescribeLoggingConfigurationCommandInput | DescribeResourcePolicyCommandInput | DescribeRuleGroupCommandInput | DescribeRuleGroupMetadataCommandInput | DisassociateSubnetsCommandInput | ListFirewallPoliciesCommandInput | ListFirewallsCommandInput | ListRuleGroupsCommandInput | ListTagsForResourceCommandInput | PutResourcePolicyCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateFirewallDeleteProtectionCommandInput | UpdateFirewallDescriptionCommandInput | UpdateFirewallEncryptionConfigurationCommandInput | UpdateFirewallPolicyChangeProtectionCommandInput | UpdateFirewallPolicyCommandInput | UpdateLoggingConfigurationCommandInput | UpdateRuleGroupCommandInput | UpdateSubnetChangeProtectionCommandInput;
|
|
41
|
+
export declare type ServiceOutputTypes = AssociateFirewallPolicyCommandOutput | AssociateSubnetsCommandOutput | CreateFirewallCommandOutput | CreateFirewallPolicyCommandOutput | CreateRuleGroupCommandOutput | DeleteFirewallCommandOutput | DeleteFirewallPolicyCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRuleGroupCommandOutput | DescribeFirewallCommandOutput | DescribeFirewallPolicyCommandOutput | DescribeLoggingConfigurationCommandOutput | DescribeResourcePolicyCommandOutput | DescribeRuleGroupCommandOutput | DescribeRuleGroupMetadataCommandOutput | DisassociateSubnetsCommandOutput | ListFirewallPoliciesCommandOutput | ListFirewallsCommandOutput | ListRuleGroupsCommandOutput | ListTagsForResourceCommandOutput | PutResourcePolicyCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateFirewallDeleteProtectionCommandOutput | UpdateFirewallDescriptionCommandOutput | UpdateFirewallEncryptionConfigurationCommandOutput | UpdateFirewallPolicyChangeProtectionCommandOutput | UpdateFirewallPolicyCommandOutput | UpdateLoggingConfigurationCommandOutput | UpdateRuleGroupCommandOutput | UpdateSubnetChangeProtectionCommandOutput;
|
|
41
42
|
export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
|
|
42
43
|
/**
|
|
43
44
|
* The HTTP handler to use. Fetch in browser and Https in Nodejs.
|
|
@@ -156,21 +157,21 @@ declare type NetworkFirewallClientResolvedConfigType = __SmithyResolvedConfigura
|
|
|
156
157
|
export interface NetworkFirewallClientResolvedConfig extends NetworkFirewallClientResolvedConfigType {
|
|
157
158
|
}
|
|
158
159
|
/**
|
|
159
|
-
* <p>This is the API Reference for
|
|
160
|
+
* <p>This is the API Reference for Network Firewall. This guide is for developers who need
|
|
160
161
|
* detailed information about the Network Firewall API actions, data types, and errors. </p>
|
|
161
162
|
* <ul>
|
|
162
163
|
* <li>
|
|
163
164
|
* <p>The REST API requires you to handle connection details, such as calculating
|
|
164
165
|
* signatures, handling request retries, and error handling. For general information
|
|
165
|
-
* about using the
|
|
166
|
+
* about using the Amazon Web Services REST APIs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-apis.html">Amazon Web Services APIs</a>. </p>
|
|
166
167
|
* <p>To access Network Firewall using the REST API endpoint:
|
|
167
168
|
* <code>https://network-firewall.<region>.amazonaws.com </code>
|
|
168
169
|
* </p>
|
|
169
170
|
* </li>
|
|
170
171
|
* <li>
|
|
171
|
-
* <p>Alternatively, you can use one of the
|
|
172
|
+
* <p>Alternatively, you can use one of the Amazon Web Services SDKs to access an API that's tailored to
|
|
172
173
|
* the programming language or platform that you're using. For more information, see
|
|
173
|
-
*
|
|
174
|
+
* <a href="http://aws.amazon.com/tools/#SDKs">Amazon Web Services SDKs</a>.</p>
|
|
174
175
|
* </li>
|
|
175
176
|
* <li>
|
|
176
177
|
* <p>For descriptions of Network Firewall features, including and step-by-step
|
|
@@ -181,15 +182,15 @@ export interface NetworkFirewallClientResolvedConfig extends NetworkFirewallClie
|
|
|
181
182
|
* <p>Network Firewall is a stateful, managed, network firewall and intrusion detection and
|
|
182
183
|
* prevention service for Amazon Virtual Private Cloud (Amazon VPC). With Network Firewall, you can filter traffic at the
|
|
183
184
|
* perimeter of your VPC. This includes filtering traffic going to and coming from an internet
|
|
184
|
-
* gateway, NAT gateway, or over VPN or
|
|
185
|
+
* gateway, NAT gateway, or over VPN or Direct Connect. Network Firewall uses rules that are compatible
|
|
185
186
|
* with Suricata, a free, open source intrusion detection system (IDS) engine.
|
|
186
|
-
*
|
|
187
|
+
* Network Firewall supports Suricata version 5.0.2. For information about Suricata,
|
|
187
188
|
* see the <a href="https://suricata-ids.org/">Suricata website</a>.</p>
|
|
188
189
|
* <p>You can use Network Firewall to monitor and protect your VPC traffic in a number of ways.
|
|
189
190
|
* The following are just a few examples: </p>
|
|
190
191
|
* <ul>
|
|
191
192
|
* <li>
|
|
192
|
-
* <p>Allow domains or IP addresses for known
|
|
193
|
+
* <p>Allow domains or IP addresses for known Amazon Web Services service endpoints, such as Amazon S3, and
|
|
193
194
|
* block all other forms of traffic.</p>
|
|
194
195
|
* </li>
|
|
195
196
|
* <li>
|
|
@@ -9,7 +9,7 @@ export interface AssociateSubnetsCommandOutput extends AssociateSubnetsResponse,
|
|
|
9
9
|
/**
|
|
10
10
|
* <p>Associates the specified subnets in the Amazon VPC to the firewall. You can specify one
|
|
11
11
|
* subnet for each of the Availability Zones that the VPC spans. </p>
|
|
12
|
-
* <p>This request creates an
|
|
12
|
+
* <p>This request creates an Network Firewall firewall endpoint in each of the subnets. To
|
|
13
13
|
* enable the firewall's protections, you must also modify the VPC's route tables for each
|
|
14
14
|
* subnet's Availability Zone, to redirect the traffic that's coming into and going out of the
|
|
15
15
|
* zone through the firewall endpoint. </p>
|
|
@@ -7,12 +7,12 @@ export interface CreateFirewallCommandInput extends CreateFirewallRequest {
|
|
|
7
7
|
export interface CreateFirewallCommandOutput extends CreateFirewallResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Creates an
|
|
11
|
-
* <p>The firewall defines the configuration settings for an
|
|
10
|
+
* <p>Creates an Network Firewall <a>Firewall</a> and accompanying <a>FirewallStatus</a> for a VPC. </p>
|
|
11
|
+
* <p>The firewall defines the configuration settings for an Network Firewall firewall. The settings that you can define at creation include the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the firewall Amazon Web Services resource. </p>
|
|
12
12
|
* <p>After you create a firewall, you can provide additional settings, like the logging configuration. </p>
|
|
13
13
|
* <p>To update the settings for a firewall, you use the operations that apply to the settings
|
|
14
14
|
* themselves, for example <a>UpdateLoggingConfiguration</a>, <a>AssociateSubnets</a>, and <a>UpdateFirewallDeleteProtection</a>. </p>
|
|
15
|
-
* <p>To manage a firewall's tags, use the standard
|
|
15
|
+
* <p>To manage a firewall's tags, use the standard Amazon Web Services resource tagging operations, <a>ListTagsForResource</a>, <a>TagResource</a>, and <a>UntagResource</a>.</p>
|
|
16
16
|
* <p>To retrieve information about firewalls, use <a>ListFirewalls</a> and <a>DescribeFirewall</a>.</p>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -8,7 +8,7 @@ export interface CreateFirewallPolicyCommandOutput extends CreateFirewallPolicyR
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Creates the firewall policy for the firewall according to the specifications. </p>
|
|
11
|
-
* <p>An
|
|
11
|
+
* <p>An Network Firewall firewall policy defines the behavior of a firewall, in a collection of
|
|
12
12
|
* stateless and stateful rule groups and other settings. You can use one firewall policy for
|
|
13
13
|
* multiple firewalls. </p>
|
|
14
14
|
* @example
|
|
@@ -10,9 +10,9 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
|
|
|
10
10
|
* <p>Retrieves the tags associated with the specified resource. Tags are key:value pairs that
|
|
11
11
|
* you can use to categorize and manage your resources, for purposes like billing. For
|
|
12
12
|
* example, you might set the tag key to "customer" and the value to the customer name or ID.
|
|
13
|
-
* You can specify one or more tags to add to each
|
|
13
|
+
* You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a
|
|
14
14
|
* resource.</p>
|
|
15
|
-
* <p>You can tag the
|
|
15
|
+
* <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls, firewall
|
|
16
16
|
* policies, and rule groups. </p>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,7 +7,7 @@ export interface PutResourcePolicyCommandInput extends PutResourcePolicyRequest
|
|
|
7
7
|
export interface PutResourcePolicyCommandOutput extends PutResourcePolicyResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Creates or updates an
|
|
10
|
+
* <p>Creates or updates an IAM policy for your rule group or firewall policy. Use this to share rule groups and firewall policies between accounts. This operation works in conjunction with the Amazon Web Services Resource Access Manager (RAM) service
|
|
11
11
|
* to manage resource sharing for Network Firewall. </p>
|
|
12
12
|
* <p>Use this operation to create or update a resource policy for your rule group or firewall policy. In the policy, you specify the accounts that you want to share the resource with and the operations that you want the accounts to be able to perform. </p>
|
|
13
13
|
* <p>When you add an account in the resource policy, you then run the following Resource Access Manager (RAM) operations to access and accept the shared rule group or firewall policy. </p>
|
|
@@ -21,7 +21,7 @@ export interface PutResourcePolicyCommandOutput extends PutResourcePolicyRespons
|
|
|
21
21
|
* <a href="https://docs.aws.amazon.com/ram/latest/APIReference/API_AcceptResourceShareInvitation.html">AcceptResourceShareInvitation</a> - Accepts the share invitation for a specified resource share. </p>
|
|
22
22
|
* </li>
|
|
23
23
|
* </ul>
|
|
24
|
-
* <p>For additional information about resource sharing using RAM, see <a href="https://docs.aws.amazon.com/ram/latest/userguide/what-is.html">
|
|
24
|
+
* <p>For additional information about resource sharing using RAM, see <a href="https://docs.aws.amazon.com/ram/latest/userguide/what-is.html">Resource Access Manager User Guide</a>.</p>
|
|
25
25
|
* @example
|
|
26
26
|
* Use a bare-bones client and the command you need to make an API call.
|
|
27
27
|
* ```javascript
|
|
@@ -10,8 +10,8 @@ export interface TagResourceCommandOutput extends TagResourceResponse, __Metadat
|
|
|
10
10
|
* <p>Adds the specified tags to the specified resource. Tags are key:value pairs that you can
|
|
11
11
|
* use to categorize and manage your resources, for purposes like billing. For example, you
|
|
12
12
|
* might set the tag key to "customer" and the value to the customer name or ID. You can
|
|
13
|
-
* specify one or more tags to add to each
|
|
14
|
-
* <p>You can tag the
|
|
13
|
+
* specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a resource.</p>
|
|
14
|
+
* <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls, firewall
|
|
15
15
|
* policies, and rule groups. </p>
|
|
16
16
|
* @example
|
|
17
17
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,9 +10,9 @@ export interface UntagResourceCommandOutput extends UntagResourceResponse, __Met
|
|
|
10
10
|
* <p>Removes the tags with the specified keys from the specified resource. Tags are key:value
|
|
11
11
|
* pairs that you can use to categorize and manage your resources, for purposes like billing.
|
|
12
12
|
* For example, you might set the tag key to "customer" and the value to the customer name or
|
|
13
|
-
* ID. You can specify one or more tags to add to each
|
|
13
|
+
* ID. You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for a
|
|
14
14
|
* resource.</p>
|
|
15
|
-
* <p>You can manage tags for the
|
|
15
|
+
* <p>You can manage tags for the Amazon Web Services resources that you manage through Network Firewall:
|
|
16
16
|
* firewalls, firewall policies, and rule groups. </p>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
import { Command as $Command } from "@aws-sdk/smithy-client";
|
|
2
|
+
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
|
|
3
|
+
import { UpdateFirewallEncryptionConfigurationRequest, UpdateFirewallEncryptionConfigurationResponse } from "../models/models_0";
|
|
4
|
+
import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
|
|
5
|
+
export interface UpdateFirewallEncryptionConfigurationCommandInput extends UpdateFirewallEncryptionConfigurationRequest {
|
|
6
|
+
}
|
|
7
|
+
export interface UpdateFirewallEncryptionConfigurationCommandOutput extends UpdateFirewallEncryptionConfigurationResponse, __MetadataBearer {
|
|
8
|
+
}
|
|
9
|
+
/**
|
|
10
|
+
* <p>A complex type that contains settings for encryption of your firewall resources.</p>
|
|
11
|
+
* @example
|
|
12
|
+
* Use a bare-bones client and the command you need to make an API call.
|
|
13
|
+
* ```javascript
|
|
14
|
+
* import { NetworkFirewallClient, UpdateFirewallEncryptionConfigurationCommand } from "@aws-sdk/client-network-firewall"; // ES Modules import
|
|
15
|
+
* // const { NetworkFirewallClient, UpdateFirewallEncryptionConfigurationCommand } = require("@aws-sdk/client-network-firewall"); // CommonJS import
|
|
16
|
+
* const client = new NetworkFirewallClient(config);
|
|
17
|
+
* const command = new UpdateFirewallEncryptionConfigurationCommand(input);
|
|
18
|
+
* const response = await client.send(command);
|
|
19
|
+
* ```
|
|
20
|
+
*
|
|
21
|
+
* @see {@link UpdateFirewallEncryptionConfigurationCommandInput} for command's `input` shape.
|
|
22
|
+
* @see {@link UpdateFirewallEncryptionConfigurationCommandOutput} for command's `response` shape.
|
|
23
|
+
* @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
|
|
24
|
+
*
|
|
25
|
+
*/
|
|
26
|
+
export declare class UpdateFirewallEncryptionConfigurationCommand extends $Command<UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput, NetworkFirewallClientResolvedConfig> {
|
|
27
|
+
readonly input: UpdateFirewallEncryptionConfigurationCommandInput;
|
|
28
|
+
constructor(input: UpdateFirewallEncryptionConfigurationCommandInput);
|
|
29
|
+
/**
|
|
30
|
+
* @internal
|
|
31
|
+
*/
|
|
32
|
+
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: NetworkFirewallClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateFirewallEncryptionConfigurationCommandInput, UpdateFirewallEncryptionConfigurationCommandOutput>;
|
|
33
|
+
private serialize;
|
|
34
|
+
private deserialize;
|
|
35
|
+
}
|
|
@@ -23,6 +23,7 @@ export * from "./TagResourceCommand";
|
|
|
23
23
|
export * from "./UntagResourceCommand";
|
|
24
24
|
export * from "./UpdateFirewallDeleteProtectionCommand";
|
|
25
25
|
export * from "./UpdateFirewallDescriptionCommand";
|
|
26
|
+
export * from "./UpdateFirewallEncryptionConfigurationCommand";
|
|
26
27
|
export * from "./UpdateFirewallPolicyChangeProtectionCommand";
|
|
27
28
|
export * from "./UpdateFirewallPolicyCommand";
|
|
28
29
|
export * from "./UpdateLoggingConfigurationCommand";
|