@aws-sdk/client-network-firewall 3.828.0 → 3.831.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (57) hide show
  1. package/README.md +56 -0
  2. package/dist-cjs/index.js +343 -58
  3. package/dist-es/NetworkFirewall.js +14 -0
  4. package/dist-es/commands/AcceptNetworkFirewallTransitGatewayAttachmentCommand.js +22 -0
  5. package/dist-es/commands/AssociateAvailabilityZonesCommand.js +22 -0
  6. package/dist-es/commands/DeleteNetworkFirewallTransitGatewayAttachmentCommand.js +22 -0
  7. package/dist-es/commands/DescribeRuleGroupSummaryCommand.js +22 -0
  8. package/dist-es/commands/DisassociateAvailabilityZonesCommand.js +22 -0
  9. package/dist-es/commands/RejectNetworkFirewallTransitGatewayAttachmentCommand.js +22 -0
  10. package/dist-es/commands/UpdateAvailabilityZoneChangeProtectionCommand.js +22 -0
  11. package/dist-es/commands/index.js +7 -0
  12. package/dist-es/models/models_0.js +58 -39
  13. package/dist-es/protocols/Aws_json1_0.js +142 -6
  14. package/dist-types/NetworkFirewall.d.ts +50 -0
  15. package/dist-types/NetworkFirewallClient.d.ts +9 -2
  16. package/dist-types/commands/AcceptNetworkFirewallTransitGatewayAttachmentCommand.d.ts +104 -0
  17. package/dist-types/commands/AssociateAvailabilityZonesCommand.d.ts +124 -0
  18. package/dist-types/commands/CreateFirewallCommand.d.ts +20 -0
  19. package/dist-types/commands/CreateFirewallPolicyCommand.d.ts +1 -0
  20. package/dist-types/commands/CreateRuleGroupCommand.d.ts +11 -1
  21. package/dist-types/commands/DeleteFirewallCommand.d.ts +13 -0
  22. package/dist-types/commands/DeleteNetworkFirewallTransitGatewayAttachmentCommand.d.ts +103 -0
  23. package/dist-types/commands/DeleteRuleGroupCommand.d.ts +5 -0
  24. package/dist-types/commands/DescribeFirewallCommand.d.ts +13 -0
  25. package/dist-types/commands/DescribeFirewallMetadataCommand.d.ts +1 -0
  26. package/dist-types/commands/DescribeFirewallPolicyCommand.d.ts +1 -0
  27. package/dist-types/commands/DescribeRuleGroupCommand.d.ts +6 -1
  28. package/dist-types/commands/DescribeRuleGroupSummaryCommand.d.ts +112 -0
  29. package/dist-types/commands/DisassociateAvailabilityZonesCommand.d.ts +123 -0
  30. package/dist-types/commands/ListFirewallsCommand.d.ts +1 -0
  31. package/dist-types/commands/ListRuleGroupsCommand.d.ts +1 -1
  32. package/dist-types/commands/RejectNetworkFirewallTransitGatewayAttachmentCommand.d.ts +104 -0
  33. package/dist-types/commands/UpdateAvailabilityZoneChangeProtectionCommand.d.ts +111 -0
  34. package/dist-types/commands/UpdateFirewallPolicyCommand.d.ts +1 -0
  35. package/dist-types/commands/UpdateRuleGroupCommand.d.ts +11 -1
  36. package/dist-types/commands/index.d.ts +7 -0
  37. package/dist-types/endpoint/EndpointParameters.d.ts +7 -7
  38. package/dist-types/models/models_0.d.ts +884 -138
  39. package/dist-types/protocols/Aws_json1_0.d.ts +63 -0
  40. package/dist-types/runtimeConfig.browser.d.ts +2 -2
  41. package/dist-types/runtimeConfig.native.d.ts +2 -2
  42. package/dist-types/ts3.4/NetworkFirewall.d.ts +144 -0
  43. package/dist-types/ts3.4/NetworkFirewallClient.d.ts +42 -0
  44. package/dist-types/ts3.4/commands/AcceptNetworkFirewallTransitGatewayAttachmentCommand.d.ts +51 -0
  45. package/dist-types/ts3.4/commands/AssociateAvailabilityZonesCommand.d.ts +51 -0
  46. package/dist-types/ts3.4/commands/DeleteNetworkFirewallTransitGatewayAttachmentCommand.d.ts +51 -0
  47. package/dist-types/ts3.4/commands/DescribeRuleGroupSummaryCommand.d.ts +51 -0
  48. package/dist-types/ts3.4/commands/DisassociateAvailabilityZonesCommand.d.ts +51 -0
  49. package/dist-types/ts3.4/commands/RejectNetworkFirewallTransitGatewayAttachmentCommand.d.ts +51 -0
  50. package/dist-types/ts3.4/commands/UpdateAvailabilityZoneChangeProtectionCommand.d.ts +51 -0
  51. package/dist-types/ts3.4/commands/index.d.ts +7 -0
  52. package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +7 -7
  53. package/dist-types/ts3.4/models/models_0.d.ts +170 -45
  54. package/dist-types/ts3.4/protocols/Aws_json1_0.d.ts +84 -0
  55. package/dist-types/ts3.4/runtimeConfig.browser.d.ts +4 -2
  56. package/dist-types/ts3.4/runtimeConfig.native.d.ts +4 -2
  57. package/package.json +2 -2
@@ -0,0 +1,124 @@
1
+ import { Command as $Command } from "@smithy/smithy-client";
2
+ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
+ import { AssociateAvailabilityZonesRequest, AssociateAvailabilityZonesResponse } from "../models/models_0";
4
+ import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
5
+ /**
6
+ * @public
7
+ */
8
+ export type { __MetadataBearer };
9
+ export { $Command };
10
+ /**
11
+ * @public
12
+ *
13
+ * The input for {@link AssociateAvailabilityZonesCommand}.
14
+ */
15
+ export interface AssociateAvailabilityZonesCommandInput extends AssociateAvailabilityZonesRequest {
16
+ }
17
+ /**
18
+ * @public
19
+ *
20
+ * The output of {@link AssociateAvailabilityZonesCommand}.
21
+ */
22
+ export interface AssociateAvailabilityZonesCommandOutput extends AssociateAvailabilityZonesResponse, __MetadataBearer {
23
+ }
24
+ declare const AssociateAvailabilityZonesCommand_base: {
25
+ new (input: AssociateAvailabilityZonesCommandInput): import("@smithy/smithy-client").CommandImpl<AssociateAvailabilityZonesCommandInput, AssociateAvailabilityZonesCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
26
+ new (input: AssociateAvailabilityZonesCommandInput): import("@smithy/smithy-client").CommandImpl<AssociateAvailabilityZonesCommandInput, AssociateAvailabilityZonesCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
27
+ getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
+ };
29
+ /**
30
+ * <p>Associates the specified Availability Zones with a transit gateway-attached firewall. For each Availability Zone, Network Firewall creates a firewall endpoint to process traffic. You can specify one or more Availability Zones where you want to deploy the firewall.</p>
31
+ * <p>After adding Availability Zones, you must update your transit gateway route tables to direct traffic through the new firewall endpoints. Use <a>DescribeFirewall</a> to monitor the status of the new endpoints.</p>
32
+ * @example
33
+ * Use a bare-bones client and the command you need to make an API call.
34
+ * ```javascript
35
+ * import { NetworkFirewallClient, AssociateAvailabilityZonesCommand } from "@aws-sdk/client-network-firewall"; // ES Modules import
36
+ * // const { NetworkFirewallClient, AssociateAvailabilityZonesCommand } = require("@aws-sdk/client-network-firewall"); // CommonJS import
37
+ * const client = new NetworkFirewallClient(config);
38
+ * const input = { // AssociateAvailabilityZonesRequest
39
+ * UpdateToken: "STRING_VALUE",
40
+ * FirewallArn: "STRING_VALUE",
41
+ * FirewallName: "STRING_VALUE",
42
+ * AvailabilityZoneMappings: [ // AvailabilityZoneMappings // required
43
+ * { // AvailabilityZoneMapping
44
+ * AvailabilityZone: "STRING_VALUE", // required
45
+ * },
46
+ * ],
47
+ * };
48
+ * const command = new AssociateAvailabilityZonesCommand(input);
49
+ * const response = await client.send(command);
50
+ * // { // AssociateAvailabilityZonesResponse
51
+ * // FirewallArn: "STRING_VALUE",
52
+ * // FirewallName: "STRING_VALUE",
53
+ * // AvailabilityZoneMappings: [ // AvailabilityZoneMappings
54
+ * // { // AvailabilityZoneMapping
55
+ * // AvailabilityZone: "STRING_VALUE", // required
56
+ * // },
57
+ * // ],
58
+ * // UpdateToken: "STRING_VALUE",
59
+ * // };
60
+ *
61
+ * ```
62
+ *
63
+ * @param AssociateAvailabilityZonesCommandInput - {@link AssociateAvailabilityZonesCommandInput}
64
+ * @returns {@link AssociateAvailabilityZonesCommandOutput}
65
+ * @see {@link AssociateAvailabilityZonesCommandInput} for command's `input` shape.
66
+ * @see {@link AssociateAvailabilityZonesCommandOutput} for command's `response` shape.
67
+ * @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
68
+ *
69
+ * @throws {@link InsufficientCapacityException} (server fault)
70
+ * <p>Amazon Web Services doesn't currently have enough available capacity to fulfill your request. Try your
71
+ * request later. </p>
72
+ *
73
+ * @throws {@link InternalServerError} (server fault)
74
+ * <p>Your request is valid, but Network Firewall couldn't perform the operation because of a
75
+ * system problem. Retry your request. </p>
76
+ *
77
+ * @throws {@link InvalidOperationException} (client fault)
78
+ * <p>The operation failed because it's not valid. For example, you might have tried to delete
79
+ * a rule group or firewall policy that's in use.</p>
80
+ *
81
+ * @throws {@link InvalidRequestException} (client fault)
82
+ * <p>The operation failed because of a problem with your request. Examples include: </p>
83
+ * <ul>
84
+ * <li>
85
+ * <p>You specified an unsupported parameter name or value.</p>
86
+ * </li>
87
+ * <li>
88
+ * <p>You tried to update a property with a value that isn't among the available
89
+ * types.</p>
90
+ * </li>
91
+ * <li>
92
+ * <p>Your request references an ARN that is malformed, or corresponds to a resource
93
+ * that isn't valid in the context of the request.</p>
94
+ * </li>
95
+ * </ul>
96
+ *
97
+ * @throws {@link InvalidTokenException} (client fault)
98
+ * <p>The token you provided is stale or isn't valid for the operation. </p>
99
+ *
100
+ * @throws {@link ResourceNotFoundException} (client fault)
101
+ * <p>Unable to locate a resource using the parameters that you provided.</p>
102
+ *
103
+ * @throws {@link ThrottlingException} (client fault)
104
+ * <p>Unable to process the request due to throttling limitations.</p>
105
+ *
106
+ * @throws {@link NetworkFirewallServiceException}
107
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
108
+ *
109
+ *
110
+ * @public
111
+ */
112
+ export declare class AssociateAvailabilityZonesCommand extends AssociateAvailabilityZonesCommand_base {
113
+ /** @internal type navigation helper, not in runtime. */
114
+ protected static __types: {
115
+ api: {
116
+ input: AssociateAvailabilityZonesRequest;
117
+ output: AssociateAvailabilityZonesResponse;
118
+ };
119
+ sdk: {
120
+ input: AssociateAvailabilityZonesCommandInput;
121
+ output: AssociateAvailabilityZonesCommandOutput;
122
+ };
123
+ };
124
+ }
@@ -68,6 +68,13 @@ declare const CreateFirewallCommand_base: {
68
68
  * EnabledAnalysisTypes: [ // EnabledAnalysisTypes
69
69
  * "TLS_SNI" || "HTTP_HOST",
70
70
  * ],
71
+ * TransitGatewayId: "STRING_VALUE",
72
+ * AvailabilityZoneMappings: [ // AvailabilityZoneMappings
73
+ * { // AvailabilityZoneMapping
74
+ * AvailabilityZone: "STRING_VALUE", // required
75
+ * },
76
+ * ],
77
+ * AvailabilityZoneChangeProtection: true || false,
71
78
  * };
72
79
  * const command = new CreateFirewallCommand(input);
73
80
  * const response = await client.send(command);
@@ -102,6 +109,14 @@ declare const CreateFirewallCommand_base: {
102
109
  * // EnabledAnalysisTypes: [ // EnabledAnalysisTypes
103
110
  * // "TLS_SNI" || "HTTP_HOST",
104
111
  * // ],
112
+ * // TransitGatewayId: "STRING_VALUE",
113
+ * // TransitGatewayOwnerAccountId: "STRING_VALUE",
114
+ * // AvailabilityZoneMappings: [ // AvailabilityZoneMappings
115
+ * // { // AvailabilityZoneMapping
116
+ * // AvailabilityZone: "STRING_VALUE", // required
117
+ * // },
118
+ * // ],
119
+ * // AvailabilityZoneChangeProtection: true || false,
105
120
  * // },
106
121
  * // FirewallStatus: { // FirewallStatus
107
122
  * // Status: "PROVISIONING" || "DELETING" || "READY", // required
@@ -133,6 +148,11 @@ declare const CreateFirewallCommand_base: {
133
148
  * // },
134
149
  * // },
135
150
  * // },
151
+ * // TransitGatewayAttachmentSyncState: { // TransitGatewayAttachmentSyncState
152
+ * // AttachmentId: "STRING_VALUE",
153
+ * // TransitGatewayAttachmentStatus: "CREATING" || "DELETING" || "DELETED" || "FAILED" || "ERROR" || "READY" || "PENDING_ACCEPTANCE" || "REJECTING" || "REJECTED",
154
+ * // StatusMessage: "STRING_VALUE",
155
+ * // },
136
156
  * // },
137
157
  * // };
138
158
  *
@@ -73,6 +73,7 @@ declare const CreateFirewallPolicyCommand_base: {
73
73
  * Override: { // StatefulRuleGroupOverride
74
74
  * Action: "DROP_TO_ALERT",
75
75
  * },
76
+ * DeepThreatInspection: true || false,
76
77
  * },
77
78
  * ],
78
79
  * StatefulDefaultActions: [ // StatefulActions
@@ -78,7 +78,7 @@ declare const CreateRuleGroupCommand_base: {
78
78
  * { // StatefulRule
79
79
  * Action: "PASS" || "DROP" || "ALERT" || "REJECT", // required
80
80
  * Header: { // Header
81
- * Protocol: "IP" || "TCP" || "UDP" || "ICMP" || "HTTP" || "FTP" || "TLS" || "SMB" || "DNS" || "DCERPC" || "SSH" || "SMTP" || "IMAP" || "MSN" || "KRB5" || "IKEV2" || "TFTP" || "NTP" || "DHCP", // required
81
+ * Protocol: "IP" || "TCP" || "UDP" || "ICMP" || "HTTP" || "FTP" || "TLS" || "SMB" || "DNS" || "DCERPC" || "SSH" || "SMTP" || "IMAP" || "MSN" || "KRB5" || "IKEV2" || "TFTP" || "NTP" || "DHCP" || "HTTP2" || "QUIC", // required
82
82
  * Source: "STRING_VALUE", // required
83
83
  * SourcePort: "STRING_VALUE", // required
84
84
  * Direction: "FORWARD" || "ANY", // required
@@ -183,6 +183,11 @@ declare const CreateRuleGroupCommand_base: {
183
183
  * SourceUpdateToken: "STRING_VALUE",
184
184
  * },
185
185
  * AnalyzeRuleGroup: true || false,
186
+ * SummaryConfiguration: { // SummaryConfiguration
187
+ * RuleOptions: [ // SummaryRuleOptions
188
+ * "SID" || "MSG" || "METADATA",
189
+ * ],
190
+ * },
186
191
  * };
187
192
  * const command = new CreateRuleGroupCommand(input);
188
193
  * const response = await client.send(command);
@@ -223,6 +228,11 @@ declare const CreateRuleGroupCommand_base: {
223
228
  * // AnalysisDetail: "STRING_VALUE",
224
229
  * // },
225
230
  * // ],
231
+ * // SummaryConfiguration: { // SummaryConfiguration
232
+ * // RuleOptions: [ // SummaryRuleOptions
233
+ * // "SID" || "MSG" || "METADATA",
234
+ * // ],
235
+ * // },
226
236
  * // },
227
237
  * // };
228
238
  *
@@ -81,6 +81,14 @@ declare const DeleteFirewallCommand_base: {
81
81
  * // EnabledAnalysisTypes: [ // EnabledAnalysisTypes
82
82
  * // "TLS_SNI" || "HTTP_HOST",
83
83
  * // ],
84
+ * // TransitGatewayId: "STRING_VALUE",
85
+ * // TransitGatewayOwnerAccountId: "STRING_VALUE",
86
+ * // AvailabilityZoneMappings: [ // AvailabilityZoneMappings
87
+ * // { // AvailabilityZoneMapping
88
+ * // AvailabilityZone: "STRING_VALUE", // required
89
+ * // },
90
+ * // ],
91
+ * // AvailabilityZoneChangeProtection: true || false,
84
92
  * // },
85
93
  * // FirewallStatus: { // FirewallStatus
86
94
  * // Status: "PROVISIONING" || "DELETING" || "READY", // required
@@ -112,6 +120,11 @@ declare const DeleteFirewallCommand_base: {
112
120
  * // },
113
121
  * // },
114
122
  * // },
123
+ * // TransitGatewayAttachmentSyncState: { // TransitGatewayAttachmentSyncState
124
+ * // AttachmentId: "STRING_VALUE",
125
+ * // TransitGatewayAttachmentStatus: "CREATING" || "DELETING" || "DELETED" || "FAILED" || "ERROR" || "READY" || "PENDING_ACCEPTANCE" || "REJECTING" || "REJECTED",
126
+ * // StatusMessage: "STRING_VALUE",
127
+ * // },
115
128
  * // },
116
129
  * // };
117
130
  *
@@ -0,0 +1,103 @@
1
+ import { Command as $Command } from "@smithy/smithy-client";
2
+ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
+ import { DeleteNetworkFirewallTransitGatewayAttachmentRequest, DeleteNetworkFirewallTransitGatewayAttachmentResponse } from "../models/models_0";
4
+ import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
5
+ /**
6
+ * @public
7
+ */
8
+ export type { __MetadataBearer };
9
+ export { $Command };
10
+ /**
11
+ * @public
12
+ *
13
+ * The input for {@link DeleteNetworkFirewallTransitGatewayAttachmentCommand}.
14
+ */
15
+ export interface DeleteNetworkFirewallTransitGatewayAttachmentCommandInput extends DeleteNetworkFirewallTransitGatewayAttachmentRequest {
16
+ }
17
+ /**
18
+ * @public
19
+ *
20
+ * The output of {@link DeleteNetworkFirewallTransitGatewayAttachmentCommand}.
21
+ */
22
+ export interface DeleteNetworkFirewallTransitGatewayAttachmentCommandOutput extends DeleteNetworkFirewallTransitGatewayAttachmentResponse, __MetadataBearer {
23
+ }
24
+ declare const DeleteNetworkFirewallTransitGatewayAttachmentCommand_base: {
25
+ new (input: DeleteNetworkFirewallTransitGatewayAttachmentCommandInput): import("@smithy/smithy-client").CommandImpl<DeleteNetworkFirewallTransitGatewayAttachmentCommandInput, DeleteNetworkFirewallTransitGatewayAttachmentCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
26
+ new (input: DeleteNetworkFirewallTransitGatewayAttachmentCommandInput): import("@smithy/smithy-client").CommandImpl<DeleteNetworkFirewallTransitGatewayAttachmentCommandInput, DeleteNetworkFirewallTransitGatewayAttachmentCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
27
+ getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
+ };
29
+ /**
30
+ * <p>Deletes a transit gateway attachment from a Network Firewall. Either the firewall owner or the transit gateway owner can delete the attachment.</p>
31
+ * <important>
32
+ * <p>After you delete a transit gateway attachment, raffic will no longer flow through the firewall endpoints.</p>
33
+ * </important>
34
+ * <p>After you initiate the delete operation, use <a>DescribeFirewall</a> to monitor the deletion status.</p>
35
+ * @example
36
+ * Use a bare-bones client and the command you need to make an API call.
37
+ * ```javascript
38
+ * import { NetworkFirewallClient, DeleteNetworkFirewallTransitGatewayAttachmentCommand } from "@aws-sdk/client-network-firewall"; // ES Modules import
39
+ * // const { NetworkFirewallClient, DeleteNetworkFirewallTransitGatewayAttachmentCommand } = require("@aws-sdk/client-network-firewall"); // CommonJS import
40
+ * const client = new NetworkFirewallClient(config);
41
+ * const input = { // DeleteNetworkFirewallTransitGatewayAttachmentRequest
42
+ * TransitGatewayAttachmentId: "STRING_VALUE", // required
43
+ * };
44
+ * const command = new DeleteNetworkFirewallTransitGatewayAttachmentCommand(input);
45
+ * const response = await client.send(command);
46
+ * // { // DeleteNetworkFirewallTransitGatewayAttachmentResponse
47
+ * // TransitGatewayAttachmentId: "STRING_VALUE", // required
48
+ * // TransitGatewayAttachmentStatus: "CREATING" || "DELETING" || "DELETED" || "FAILED" || "ERROR" || "READY" || "PENDING_ACCEPTANCE" || "REJECTING" || "REJECTED", // required
49
+ * // };
50
+ *
51
+ * ```
52
+ *
53
+ * @param DeleteNetworkFirewallTransitGatewayAttachmentCommandInput - {@link DeleteNetworkFirewallTransitGatewayAttachmentCommandInput}
54
+ * @returns {@link DeleteNetworkFirewallTransitGatewayAttachmentCommandOutput}
55
+ * @see {@link DeleteNetworkFirewallTransitGatewayAttachmentCommandInput} for command's `input` shape.
56
+ * @see {@link DeleteNetworkFirewallTransitGatewayAttachmentCommandOutput} for command's `response` shape.
57
+ * @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
58
+ *
59
+ * @throws {@link InternalServerError} (server fault)
60
+ * <p>Your request is valid, but Network Firewall couldn't perform the operation because of a
61
+ * system problem. Retry your request. </p>
62
+ *
63
+ * @throws {@link InvalidRequestException} (client fault)
64
+ * <p>The operation failed because of a problem with your request. Examples include: </p>
65
+ * <ul>
66
+ * <li>
67
+ * <p>You specified an unsupported parameter name or value.</p>
68
+ * </li>
69
+ * <li>
70
+ * <p>You tried to update a property with a value that isn't among the available
71
+ * types.</p>
72
+ * </li>
73
+ * <li>
74
+ * <p>Your request references an ARN that is malformed, or corresponds to a resource
75
+ * that isn't valid in the context of the request.</p>
76
+ * </li>
77
+ * </ul>
78
+ *
79
+ * @throws {@link ResourceNotFoundException} (client fault)
80
+ * <p>Unable to locate a resource using the parameters that you provided.</p>
81
+ *
82
+ * @throws {@link ThrottlingException} (client fault)
83
+ * <p>Unable to process the request due to throttling limitations.</p>
84
+ *
85
+ * @throws {@link NetworkFirewallServiceException}
86
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
87
+ *
88
+ *
89
+ * @public
90
+ */
91
+ export declare class DeleteNetworkFirewallTransitGatewayAttachmentCommand extends DeleteNetworkFirewallTransitGatewayAttachmentCommand_base {
92
+ /** @internal type navigation helper, not in runtime. */
93
+ protected static __types: {
94
+ api: {
95
+ input: DeleteNetworkFirewallTransitGatewayAttachmentRequest;
96
+ output: DeleteNetworkFirewallTransitGatewayAttachmentResponse;
97
+ };
98
+ sdk: {
99
+ input: DeleteNetworkFirewallTransitGatewayAttachmentCommandInput;
100
+ output: DeleteNetworkFirewallTransitGatewayAttachmentCommandOutput;
101
+ };
102
+ };
103
+ }
@@ -77,6 +77,11 @@ declare const DeleteRuleGroupCommand_base: {
77
77
  * // AnalysisDetail: "STRING_VALUE",
78
78
  * // },
79
79
  * // ],
80
+ * // SummaryConfiguration: { // SummaryConfiguration
81
+ * // RuleOptions: [ // SummaryRuleOptions
82
+ * // "SID" || "MSG" || "METADATA",
83
+ * // ],
84
+ * // },
80
85
  * // },
81
86
  * // };
82
87
  *
@@ -72,6 +72,14 @@ declare const DescribeFirewallCommand_base: {
72
72
  * // EnabledAnalysisTypes: [ // EnabledAnalysisTypes
73
73
  * // "TLS_SNI" || "HTTP_HOST",
74
74
  * // ],
75
+ * // TransitGatewayId: "STRING_VALUE",
76
+ * // TransitGatewayOwnerAccountId: "STRING_VALUE",
77
+ * // AvailabilityZoneMappings: [ // AvailabilityZoneMappings
78
+ * // { // AvailabilityZoneMapping
79
+ * // AvailabilityZone: "STRING_VALUE", // required
80
+ * // },
81
+ * // ],
82
+ * // AvailabilityZoneChangeProtection: true || false,
75
83
  * // },
76
84
  * // FirewallStatus: { // FirewallStatus
77
85
  * // Status: "PROVISIONING" || "DELETING" || "READY", // required
@@ -103,6 +111,11 @@ declare const DescribeFirewallCommand_base: {
103
111
  * // },
104
112
  * // },
105
113
  * // },
114
+ * // TransitGatewayAttachmentSyncState: { // TransitGatewayAttachmentSyncState
115
+ * // AttachmentId: "STRING_VALUE",
116
+ * // TransitGatewayAttachmentStatus: "CREATING" || "DELETING" || "DELETED" || "FAILED" || "ERROR" || "READY" || "PENDING_ACCEPTANCE" || "REJECTING" || "REJECTED",
117
+ * // StatusMessage: "STRING_VALUE",
118
+ * // },
106
119
  * // },
107
120
  * // };
108
121
  *
@@ -50,6 +50,7 @@ declare const DescribeFirewallMetadataCommand_base: {
50
50
  * // IPAddressType: "DUALSTACK" || "IPV4" || "IPV6",
51
51
  * // },
52
52
  * // },
53
+ * // TransitGatewayAttachmentId: "STRING_VALUE",
53
54
  * // };
54
55
  *
55
56
  * ```
@@ -97,6 +97,7 @@ declare const DescribeFirewallPolicyCommand_base: {
97
97
  * // Override: { // StatefulRuleGroupOverride
98
98
  * // Action: "DROP_TO_ALERT",
99
99
  * // },
100
+ * // DeepThreatInspection: true || false,
100
101
  * // },
101
102
  * // ],
102
103
  * // StatefulDefaultActions: [ // StatefulActions
@@ -83,7 +83,7 @@ declare const DescribeRuleGroupCommand_base: {
83
83
  * // { // StatefulRule
84
84
  * // Action: "PASS" || "DROP" || "ALERT" || "REJECT", // required
85
85
  * // Header: { // Header
86
- * // Protocol: "IP" || "TCP" || "UDP" || "ICMP" || "HTTP" || "FTP" || "TLS" || "SMB" || "DNS" || "DCERPC" || "SSH" || "SMTP" || "IMAP" || "MSN" || "KRB5" || "IKEV2" || "TFTP" || "NTP" || "DHCP", // required
86
+ * // Protocol: "IP" || "TCP" || "UDP" || "ICMP" || "HTTP" || "FTP" || "TLS" || "SMB" || "DNS" || "DCERPC" || "SSH" || "SMTP" || "IMAP" || "MSN" || "KRB5" || "IKEV2" || "TFTP" || "NTP" || "DHCP" || "HTTP2" || "QUIC", // required
87
87
  * // Source: "STRING_VALUE", // required
88
88
  * // SourcePort: "STRING_VALUE", // required
89
89
  * // Direction: "FORWARD" || "ANY", // required
@@ -203,6 +203,11 @@ declare const DescribeRuleGroupCommand_base: {
203
203
  * // AnalysisDetail: "STRING_VALUE",
204
204
  * // },
205
205
  * // ],
206
+ * // SummaryConfiguration: { // SummaryConfiguration
207
+ * // RuleOptions: [ // SummaryRuleOptions
208
+ * // "SID" || "MSG" || "METADATA",
209
+ * // ],
210
+ * // },
206
211
  * // },
207
212
  * // };
208
213
  *
@@ -0,0 +1,112 @@
1
+ import { Command as $Command } from "@smithy/smithy-client";
2
+ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
+ import { DescribeRuleGroupSummaryRequest, DescribeRuleGroupSummaryResponse } from "../models/models_0";
4
+ import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
5
+ /**
6
+ * @public
7
+ */
8
+ export type { __MetadataBearer };
9
+ export { $Command };
10
+ /**
11
+ * @public
12
+ *
13
+ * The input for {@link DescribeRuleGroupSummaryCommand}.
14
+ */
15
+ export interface DescribeRuleGroupSummaryCommandInput extends DescribeRuleGroupSummaryRequest {
16
+ }
17
+ /**
18
+ * @public
19
+ *
20
+ * The output of {@link DescribeRuleGroupSummaryCommand}.
21
+ */
22
+ export interface DescribeRuleGroupSummaryCommandOutput extends DescribeRuleGroupSummaryResponse, __MetadataBearer {
23
+ }
24
+ declare const DescribeRuleGroupSummaryCommand_base: {
25
+ new (input: DescribeRuleGroupSummaryCommandInput): import("@smithy/smithy-client").CommandImpl<DescribeRuleGroupSummaryCommandInput, DescribeRuleGroupSummaryCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
26
+ new (...[input]: [] | [DescribeRuleGroupSummaryCommandInput]): import("@smithy/smithy-client").CommandImpl<DescribeRuleGroupSummaryCommandInput, DescribeRuleGroupSummaryCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
27
+ getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
+ };
29
+ /**
30
+ * <p>Returns detailed information for a stateful rule group.</p>
31
+ * <p>For active threat defense Amazon Web Services managed rule groups, this operation provides insight into the protections enabled by the rule group, based on Suricata rule metadata fields. Summaries are available for rule groups you manage and for active threat defense Amazon Web Services managed rule groups.</p>
32
+ * <p>To modify how threat information appears in summaries, use the <code>SummaryConfiguration</code> parameter in <a>UpdateRuleGroup</a>.</p>
33
+ * @example
34
+ * Use a bare-bones client and the command you need to make an API call.
35
+ * ```javascript
36
+ * import { NetworkFirewallClient, DescribeRuleGroupSummaryCommand } from "@aws-sdk/client-network-firewall"; // ES Modules import
37
+ * // const { NetworkFirewallClient, DescribeRuleGroupSummaryCommand } = require("@aws-sdk/client-network-firewall"); // CommonJS import
38
+ * const client = new NetworkFirewallClient(config);
39
+ * const input = { // DescribeRuleGroupSummaryRequest
40
+ * RuleGroupName: "STRING_VALUE",
41
+ * RuleGroupArn: "STRING_VALUE",
42
+ * Type: "STATELESS" || "STATEFUL",
43
+ * };
44
+ * const command = new DescribeRuleGroupSummaryCommand(input);
45
+ * const response = await client.send(command);
46
+ * // { // DescribeRuleGroupSummaryResponse
47
+ * // RuleGroupName: "STRING_VALUE", // required
48
+ * // Description: "STRING_VALUE",
49
+ * // Summary: { // Summary
50
+ * // RuleSummaries: [ // RuleSummaries
51
+ * // { // RuleSummary
52
+ * // SID: "STRING_VALUE",
53
+ * // Msg: "STRING_VALUE",
54
+ * // Metadata: "STRING_VALUE",
55
+ * // },
56
+ * // ],
57
+ * // },
58
+ * // };
59
+ *
60
+ * ```
61
+ *
62
+ * @param DescribeRuleGroupSummaryCommandInput - {@link DescribeRuleGroupSummaryCommandInput}
63
+ * @returns {@link DescribeRuleGroupSummaryCommandOutput}
64
+ * @see {@link DescribeRuleGroupSummaryCommandInput} for command's `input` shape.
65
+ * @see {@link DescribeRuleGroupSummaryCommandOutput} for command's `response` shape.
66
+ * @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
67
+ *
68
+ * @throws {@link InternalServerError} (server fault)
69
+ * <p>Your request is valid, but Network Firewall couldn't perform the operation because of a
70
+ * system problem. Retry your request. </p>
71
+ *
72
+ * @throws {@link InvalidRequestException} (client fault)
73
+ * <p>The operation failed because of a problem with your request. Examples include: </p>
74
+ * <ul>
75
+ * <li>
76
+ * <p>You specified an unsupported parameter name or value.</p>
77
+ * </li>
78
+ * <li>
79
+ * <p>You tried to update a property with a value that isn't among the available
80
+ * types.</p>
81
+ * </li>
82
+ * <li>
83
+ * <p>Your request references an ARN that is malformed, or corresponds to a resource
84
+ * that isn't valid in the context of the request.</p>
85
+ * </li>
86
+ * </ul>
87
+ *
88
+ * @throws {@link ResourceNotFoundException} (client fault)
89
+ * <p>Unable to locate a resource using the parameters that you provided.</p>
90
+ *
91
+ * @throws {@link ThrottlingException} (client fault)
92
+ * <p>Unable to process the request due to throttling limitations.</p>
93
+ *
94
+ * @throws {@link NetworkFirewallServiceException}
95
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
96
+ *
97
+ *
98
+ * @public
99
+ */
100
+ export declare class DescribeRuleGroupSummaryCommand extends DescribeRuleGroupSummaryCommand_base {
101
+ /** @internal type navigation helper, not in runtime. */
102
+ protected static __types: {
103
+ api: {
104
+ input: DescribeRuleGroupSummaryRequest;
105
+ output: DescribeRuleGroupSummaryResponse;
106
+ };
107
+ sdk: {
108
+ input: DescribeRuleGroupSummaryCommandInput;
109
+ output: DescribeRuleGroupSummaryCommandOutput;
110
+ };
111
+ };
112
+ }
@@ -0,0 +1,123 @@
1
+ import { Command as $Command } from "@smithy/smithy-client";
2
+ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
+ import { DisassociateAvailabilityZonesRequest, DisassociateAvailabilityZonesResponse } from "../models/models_0";
4
+ import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
5
+ /**
6
+ * @public
7
+ */
8
+ export type { __MetadataBearer };
9
+ export { $Command };
10
+ /**
11
+ * @public
12
+ *
13
+ * The input for {@link DisassociateAvailabilityZonesCommand}.
14
+ */
15
+ export interface DisassociateAvailabilityZonesCommandInput extends DisassociateAvailabilityZonesRequest {
16
+ }
17
+ /**
18
+ * @public
19
+ *
20
+ * The output of {@link DisassociateAvailabilityZonesCommand}.
21
+ */
22
+ export interface DisassociateAvailabilityZonesCommandOutput extends DisassociateAvailabilityZonesResponse, __MetadataBearer {
23
+ }
24
+ declare const DisassociateAvailabilityZonesCommand_base: {
25
+ new (input: DisassociateAvailabilityZonesCommandInput): import("@smithy/smithy-client").CommandImpl<DisassociateAvailabilityZonesCommandInput, DisassociateAvailabilityZonesCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
26
+ new (input: DisassociateAvailabilityZonesCommandInput): import("@smithy/smithy-client").CommandImpl<DisassociateAvailabilityZonesCommandInput, DisassociateAvailabilityZonesCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
27
+ getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
+ };
29
+ /**
30
+ * <p>Removes the specified Availability Zone associations from a transit gateway-attached firewall. This removes the firewall endpoints from these Availability Zones and stops traffic filtering in those zones. Before removing an Availability Zone, ensure you've updated your transit gateway route tables to redirect traffic appropriately.</p>
31
+ * <note>
32
+ * <p>If <code>AvailabilityZoneChangeProtection</code> is enabled, you must first disable it using <a>UpdateAvailabilityZoneChangeProtection</a>.</p>
33
+ * </note>
34
+ * <p>To verify the status of your Availability Zone changes, use <a>DescribeFirewall</a>.</p>
35
+ * @example
36
+ * Use a bare-bones client and the command you need to make an API call.
37
+ * ```javascript
38
+ * import { NetworkFirewallClient, DisassociateAvailabilityZonesCommand } from "@aws-sdk/client-network-firewall"; // ES Modules import
39
+ * // const { NetworkFirewallClient, DisassociateAvailabilityZonesCommand } = require("@aws-sdk/client-network-firewall"); // CommonJS import
40
+ * const client = new NetworkFirewallClient(config);
41
+ * const input = { // DisassociateAvailabilityZonesRequest
42
+ * UpdateToken: "STRING_VALUE",
43
+ * FirewallArn: "STRING_VALUE",
44
+ * FirewallName: "STRING_VALUE",
45
+ * AvailabilityZoneMappings: [ // AvailabilityZoneMappings // required
46
+ * { // AvailabilityZoneMapping
47
+ * AvailabilityZone: "STRING_VALUE", // required
48
+ * },
49
+ * ],
50
+ * };
51
+ * const command = new DisassociateAvailabilityZonesCommand(input);
52
+ * const response = await client.send(command);
53
+ * // { // DisassociateAvailabilityZonesResponse
54
+ * // FirewallArn: "STRING_VALUE",
55
+ * // FirewallName: "STRING_VALUE",
56
+ * // AvailabilityZoneMappings: [ // AvailabilityZoneMappings
57
+ * // { // AvailabilityZoneMapping
58
+ * // AvailabilityZone: "STRING_VALUE", // required
59
+ * // },
60
+ * // ],
61
+ * // UpdateToken: "STRING_VALUE",
62
+ * // };
63
+ *
64
+ * ```
65
+ *
66
+ * @param DisassociateAvailabilityZonesCommandInput - {@link DisassociateAvailabilityZonesCommandInput}
67
+ * @returns {@link DisassociateAvailabilityZonesCommandOutput}
68
+ * @see {@link DisassociateAvailabilityZonesCommandInput} for command's `input` shape.
69
+ * @see {@link DisassociateAvailabilityZonesCommandOutput} for command's `response` shape.
70
+ * @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
71
+ *
72
+ * @throws {@link InternalServerError} (server fault)
73
+ * <p>Your request is valid, but Network Firewall couldn't perform the operation because of a
74
+ * system problem. Retry your request. </p>
75
+ *
76
+ * @throws {@link InvalidOperationException} (client fault)
77
+ * <p>The operation failed because it's not valid. For example, you might have tried to delete
78
+ * a rule group or firewall policy that's in use.</p>
79
+ *
80
+ * @throws {@link InvalidRequestException} (client fault)
81
+ * <p>The operation failed because of a problem with your request. Examples include: </p>
82
+ * <ul>
83
+ * <li>
84
+ * <p>You specified an unsupported parameter name or value.</p>
85
+ * </li>
86
+ * <li>
87
+ * <p>You tried to update a property with a value that isn't among the available
88
+ * types.</p>
89
+ * </li>
90
+ * <li>
91
+ * <p>Your request references an ARN that is malformed, or corresponds to a resource
92
+ * that isn't valid in the context of the request.</p>
93
+ * </li>
94
+ * </ul>
95
+ *
96
+ * @throws {@link InvalidTokenException} (client fault)
97
+ * <p>The token you provided is stale or isn't valid for the operation. </p>
98
+ *
99
+ * @throws {@link ResourceNotFoundException} (client fault)
100
+ * <p>Unable to locate a resource using the parameters that you provided.</p>
101
+ *
102
+ * @throws {@link ThrottlingException} (client fault)
103
+ * <p>Unable to process the request due to throttling limitations.</p>
104
+ *
105
+ * @throws {@link NetworkFirewallServiceException}
106
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
107
+ *
108
+ *
109
+ * @public
110
+ */
111
+ export declare class DisassociateAvailabilityZonesCommand extends DisassociateAvailabilityZonesCommand_base {
112
+ /** @internal type navigation helper, not in runtime. */
113
+ protected static __types: {
114
+ api: {
115
+ input: DisassociateAvailabilityZonesRequest;
116
+ output: DisassociateAvailabilityZonesResponse;
117
+ };
118
+ sdk: {
119
+ input: DisassociateAvailabilityZonesCommandInput;
120
+ output: DisassociateAvailabilityZonesCommandOutput;
121
+ };
122
+ };
123
+ }