@aws-sdk/client-network-firewall 3.828.0 → 3.831.0

package/dist-types/commands/ListFirewallsCommand.d.ts

@@ -52,6 +52,7 @@ declare const ListFirewallsCommand_base: {
  * //     { // FirewallMetadata
  * //       FirewallName: "STRING_VALUE",
  * //       FirewallArn: "STRING_VALUE",
+ * //       TransitGatewayAttachmentId: "STRING_VALUE",
  * //     },
  * //   ],
  * // };

package/dist-types/commands/ListRuleGroupsCommand.d.ts

@@ -40,7 +40,7 @@ declare const ListRuleGroupsCommand_base: {
  *   NextToken: "STRING_VALUE",
  *   MaxResults: Number("int"),
  *   Scope: "MANAGED" || "ACCOUNT",
- *   ManagedType: "AWS_MANAGED_THREAT_SIGNATURES" || "AWS_MANAGED_DOMAIN_LISTS",
+ *   ManagedType: "AWS_MANAGED_THREAT_SIGNATURES" || "AWS_MANAGED_DOMAIN_LISTS" || "ACTIVE_THREAT_DEFENSE",
  *   Type: "STATELESS" || "STATEFUL",
  * };
  * const command = new ListRuleGroupsCommand(input);

package/dist-types/commands/RejectNetworkFirewallTransitGatewayAttachmentCommand.d.ts

@@ -0,0 +1,104 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import { RejectNetworkFirewallTransitGatewayAttachmentRequest, RejectNetworkFirewallTransitGatewayAttachmentResponse } from "../models/models_0";
+import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link RejectNetworkFirewallTransitGatewayAttachmentCommand}.
+ */
+export interface RejectNetworkFirewallTransitGatewayAttachmentCommandInput extends RejectNetworkFirewallTransitGatewayAttachmentRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link RejectNetworkFirewallTransitGatewayAttachmentCommand}.
+ */
+export interface RejectNetworkFirewallTransitGatewayAttachmentCommandOutput extends RejectNetworkFirewallTransitGatewayAttachmentResponse, __MetadataBearer {
+}
+declare const RejectNetworkFirewallTransitGatewayAttachmentCommand_base: {
+    new (input: RejectNetworkFirewallTransitGatewayAttachmentCommandInput): import("@smithy/smithy-client").CommandImpl<RejectNetworkFirewallTransitGatewayAttachmentCommandInput, RejectNetworkFirewallTransitGatewayAttachmentCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: RejectNetworkFirewallTransitGatewayAttachmentCommandInput): import("@smithy/smithy-client").CommandImpl<RejectNetworkFirewallTransitGatewayAttachmentCommandInput, RejectNetworkFirewallTransitGatewayAttachmentCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Rejects a transit gateway attachment request for Network Firewall. When you reject the attachment request, Network Firewall cancels the creation of routing components between the transit gateway and firewall endpoints.</p>
+ *          <p>Only the firewall owner can reject the attachment. After rejection, no traffic will flow through the firewall endpoints for this attachment.</p>
+ *          <p>Use <a>DescribeFirewall</a> to monitor the rejection status. To accept the attachment instead of rejecting it, use <a>AcceptNetworkFirewallTransitGatewayAttachment</a>.</p>
+ *          <note>
+ *             <p>Once rejected, you cannot reverse this action. To establish connectivity, you must create a new transit gateway-attached firewall.</p>
+ *          </note>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { NetworkFirewallClient, RejectNetworkFirewallTransitGatewayAttachmentCommand } from "@aws-sdk/client-network-firewall"; // ES Modules import
+ * // const { NetworkFirewallClient, RejectNetworkFirewallTransitGatewayAttachmentCommand } = require("@aws-sdk/client-network-firewall"); // CommonJS import
+ * const client = new NetworkFirewallClient(config);
+ * const input = { // RejectNetworkFirewallTransitGatewayAttachmentRequest
+ *   TransitGatewayAttachmentId: "STRING_VALUE", // required
+ * };
+ * const command = new RejectNetworkFirewallTransitGatewayAttachmentCommand(input);
+ * const response = await client.send(command);
+ * // { // RejectNetworkFirewallTransitGatewayAttachmentResponse
+ * //   TransitGatewayAttachmentId: "STRING_VALUE", // required
+ * //   TransitGatewayAttachmentStatus: "CREATING" || "DELETING" || "DELETED" || "FAILED" || "ERROR" || "READY" || "PENDING_ACCEPTANCE" || "REJECTING" || "REJECTED", // required
+ * // };
+ *
+ * ```
+ *
+ * @param RejectNetworkFirewallTransitGatewayAttachmentCommandInput - {@link RejectNetworkFirewallTransitGatewayAttachmentCommandInput}
+ * @returns {@link RejectNetworkFirewallTransitGatewayAttachmentCommandOutput}
+ * @see {@link RejectNetworkFirewallTransitGatewayAttachmentCommandInput} for command's `input` shape.
+ * @see {@link RejectNetworkFirewallTransitGatewayAttachmentCommandOutput} for command's `response` shape.
+ * @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
+ *
+ * @throws {@link InternalServerError} (server fault)
+ *  <p>Your request is valid, but Network Firewall couldn't perform the operation because of a
+ *          system problem. Retry your request. </p>
+ *
+ * @throws {@link InvalidRequestException} (client fault)
+ *  <p>The operation failed because of a problem with your request. Examples include: </p>
+ *          <ul>
+ *             <li>
+ *                <p>You specified an unsupported parameter name or value.</p>
+ *             </li>
+ *             <li>
+ *                <p>You tried to update a property with a value that isn't among the available
+ *                types.</p>
+ *             </li>
+ *             <li>
+ *                <p>Your request references an ARN that is malformed, or corresponds to a resource
+ *                that isn't valid in the context of the request.</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>Unable to locate a resource using the parameters that you provided.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>Unable to process the request due to throttling limitations.</p>
+ *
+ * @throws {@link NetworkFirewallServiceException}
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
+ *
+ *
+ * @public
+ */
+export declare class RejectNetworkFirewallTransitGatewayAttachmentCommand extends RejectNetworkFirewallTransitGatewayAttachmentCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: RejectNetworkFirewallTransitGatewayAttachmentRequest;
+            output: RejectNetworkFirewallTransitGatewayAttachmentResponse;
+        };
+        sdk: {
+            input: RejectNetworkFirewallTransitGatewayAttachmentCommandInput;
+            output: RejectNetworkFirewallTransitGatewayAttachmentCommandOutput;
+        };
+    };
+}

package/dist-types/commands/UpdateAvailabilityZoneChangeProtectionCommand.d.ts

@@ -0,0 +1,111 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import { UpdateAvailabilityZoneChangeProtectionRequest, UpdateAvailabilityZoneChangeProtectionResponse } from "../models/models_0";
+import { NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../NetworkFirewallClient";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link UpdateAvailabilityZoneChangeProtectionCommand}.
+ */
+export interface UpdateAvailabilityZoneChangeProtectionCommandInput extends UpdateAvailabilityZoneChangeProtectionRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link UpdateAvailabilityZoneChangeProtectionCommand}.
+ */
+export interface UpdateAvailabilityZoneChangeProtectionCommandOutput extends UpdateAvailabilityZoneChangeProtectionResponse, __MetadataBearer {
+}
+declare const UpdateAvailabilityZoneChangeProtectionCommand_base: {
+    new (input: UpdateAvailabilityZoneChangeProtectionCommandInput): import("@smithy/smithy-client").CommandImpl<UpdateAvailabilityZoneChangeProtectionCommandInput, UpdateAvailabilityZoneChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: UpdateAvailabilityZoneChangeProtectionCommandInput): import("@smithy/smithy-client").CommandImpl<UpdateAvailabilityZoneChangeProtectionCommandInput, UpdateAvailabilityZoneChangeProtectionCommandOutput, NetworkFirewallClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Modifies the <code>AvailabilityZoneChangeProtection</code> setting for a transit gateway-attached firewall. When enabled, this setting prevents accidental changes to the firewall's Availability Zone configuration. This helps protect against disrupting traffic flow in production environments.</p>
+ *          <p>When enabled, you must disable this protection before using <a>AssociateAvailabilityZones</a> or <a>DisassociateAvailabilityZones</a> to modify the firewall's Availability Zone configuration.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { NetworkFirewallClient, UpdateAvailabilityZoneChangeProtectionCommand } from "@aws-sdk/client-network-firewall"; // ES Modules import
+ * // const { NetworkFirewallClient, UpdateAvailabilityZoneChangeProtectionCommand } = require("@aws-sdk/client-network-firewall"); // CommonJS import
+ * const client = new NetworkFirewallClient(config);
+ * const input = { // UpdateAvailabilityZoneChangeProtectionRequest
+ *   UpdateToken: "STRING_VALUE",
+ *   FirewallArn: "STRING_VALUE",
+ *   FirewallName: "STRING_VALUE",
+ *   AvailabilityZoneChangeProtection: true || false, // required
+ * };
+ * const command = new UpdateAvailabilityZoneChangeProtectionCommand(input);
+ * const response = await client.send(command);
+ * // { // UpdateAvailabilityZoneChangeProtectionResponse
+ * //   UpdateToken: "STRING_VALUE",
+ * //   FirewallArn: "STRING_VALUE",
+ * //   FirewallName: "STRING_VALUE",
+ * //   AvailabilityZoneChangeProtection: true || false,
+ * // };
+ *
+ * ```
+ *
+ * @param UpdateAvailabilityZoneChangeProtectionCommandInput - {@link UpdateAvailabilityZoneChangeProtectionCommandInput}
+ * @returns {@link UpdateAvailabilityZoneChangeProtectionCommandOutput}
+ * @see {@link UpdateAvailabilityZoneChangeProtectionCommandInput} for command's `input` shape.
+ * @see {@link UpdateAvailabilityZoneChangeProtectionCommandOutput} for command's `response` shape.
+ * @see {@link NetworkFirewallClientResolvedConfig | config} for NetworkFirewallClient's `config` shape.
+ *
+ * @throws {@link InternalServerError} (server fault)
+ *  <p>Your request is valid, but Network Firewall couldn't perform the operation because of a
+ *          system problem. Retry your request. </p>
+ *
+ * @throws {@link InvalidRequestException} (client fault)
+ *  <p>The operation failed because of a problem with your request. Examples include: </p>
+ *          <ul>
+ *             <li>
+ *                <p>You specified an unsupported parameter name or value.</p>
+ *             </li>
+ *             <li>
+ *                <p>You tried to update a property with a value that isn't among the available
+ *                types.</p>
+ *             </li>
+ *             <li>
+ *                <p>Your request references an ARN that is malformed, or corresponds to a resource
+ *                that isn't valid in the context of the request.</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link InvalidTokenException} (client fault)
+ *  <p>The token you provided is stale or isn't valid for the operation. </p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>Unable to locate a resource using the parameters that you provided.</p>
+ *
+ * @throws {@link ResourceOwnerCheckException} (client fault)
+ *  <p>Unable to change the resource because your account doesn't own it. </p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>Unable to process the request due to throttling limitations.</p>
+ *
+ * @throws {@link NetworkFirewallServiceException}
+ * <p>Base exception class for all service exceptions from NetworkFirewall service.</p>
+ *
+ *
+ * @public
+ */
+export declare class UpdateAvailabilityZoneChangeProtectionCommand extends UpdateAvailabilityZoneChangeProtectionCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: UpdateAvailabilityZoneChangeProtectionRequest;
+            output: UpdateAvailabilityZoneChangeProtectionResponse;
+        };
+        sdk: {
+            input: UpdateAvailabilityZoneChangeProtectionCommandInput;
+            output: UpdateAvailabilityZoneChangeProtectionCommandOutput;
+        };
+    };
+}

package/dist-types/commands/UpdateFirewallPolicyCommand.d.ts

@@ -72,6 +72,7 @@ declare const UpdateFirewallPolicyCommand_base: {
  *         Override: { // StatefulRuleGroupOverride
  *           Action: "DROP_TO_ALERT",
  *         },
+ *         DeepThreatInspection: true || false,
  *       },
  *     ],
  *     StatefulDefaultActions: [ // StatefulActions

package/dist-types/commands/UpdateRuleGroupCommand.d.ts

@@ -82,7 +82,7 @@ declare const UpdateRuleGroupCommand_base: {
  *         { // StatefulRule
  *           Action: "PASS" || "DROP" || "ALERT" || "REJECT", // required
  *           Header: { // Header
- *             Protocol: "IP" || "TCP" || "UDP" || "ICMP" || "HTTP" || "FTP" || "TLS" || "SMB" || "DNS" || "DCERPC" || "SSH" || "SMTP" || "IMAP" || "MSN" || "KRB5" || "IKEV2" || "TFTP" || "NTP" || "DHCP", // required
+ *             Protocol: "IP" || "TCP" || "UDP" || "ICMP" || "HTTP" || "FTP" || "TLS" || "SMB" || "DNS" || "DCERPC" || "SSH" || "SMTP" || "IMAP" || "MSN" || "KRB5" || "IKEV2" || "TFTP" || "NTP" || "DHCP" || "HTTP2" || "QUIC", // required
  *             Source: "STRING_VALUE", // required
  *             SourcePort: "STRING_VALUE", // required
  *             Direction: "FORWARD" || "ANY", // required
@@ -180,6 +180,11 @@ declare const UpdateRuleGroupCommand_base: {
  *     SourceUpdateToken: "STRING_VALUE",
  *   },
  *   AnalyzeRuleGroup: true || false,
+ *   SummaryConfiguration: { // SummaryConfiguration
+ *     RuleOptions: [ // SummaryRuleOptions
+ *       "SID" || "MSG" || "METADATA",
+ *     ],
+ *   },
  * };
  * const command = new UpdateRuleGroupCommand(input);
  * const response = await client.send(command);
@@ -220,6 +225,11 @@ declare const UpdateRuleGroupCommand_base: {
  * //         AnalysisDetail: "STRING_VALUE",
  * //       },
  * //     ],
+ * //     SummaryConfiguration: { // SummaryConfiguration
+ * //       RuleOptions: [ // SummaryRuleOptions
+ * //         "SID" || "MSG" || "METADATA",
+ * //       ],
+ * //     },
  * //   },
  * // };
  *

package/dist-types/commands/index.d.ts

@@ -1,3 +1,5 @@
+export * from "./AcceptNetworkFirewallTransitGatewayAttachmentCommand";
+export * from "./AssociateAvailabilityZonesCommand";
 export * from "./AssociateFirewallPolicyCommand";
 export * from "./AssociateSubnetsCommand";
 export * from "./CreateFirewallCommand";
@@ -7,6 +9,7 @@ export * from "./CreateTLSInspectionConfigurationCommand";
 export * from "./CreateVpcEndpointAssociationCommand";
 export * from "./DeleteFirewallCommand";
 export * from "./DeleteFirewallPolicyCommand";
+export * from "./DeleteNetworkFirewallTransitGatewayAttachmentCommand";
 export * from "./DeleteResourcePolicyCommand";
 export * from "./DeleteRuleGroupCommand";
 export * from "./DeleteTLSInspectionConfigurationCommand";
@@ -19,8 +22,10 @@ export * from "./DescribeLoggingConfigurationCommand";
 export * from "./DescribeResourcePolicyCommand";
 export * from "./DescribeRuleGroupCommand";
 export * from "./DescribeRuleGroupMetadataCommand";
+export * from "./DescribeRuleGroupSummaryCommand";
 export * from "./DescribeTLSInspectionConfigurationCommand";
 export * from "./DescribeVpcEndpointAssociationCommand";
+export * from "./DisassociateAvailabilityZonesCommand";
 export * from "./DisassociateSubnetsCommand";
 export * from "./GetAnalysisReportResultsCommand";
 export * from "./ListAnalysisReportsCommand";
@@ -33,11 +38,13 @@ export * from "./ListTLSInspectionConfigurationsCommand";
 export * from "./ListTagsForResourceCommand";
 export * from "./ListVpcEndpointAssociationsCommand";
 export * from "./PutResourcePolicyCommand";
+export * from "./RejectNetworkFirewallTransitGatewayAttachmentCommand";
 export * from "./StartAnalysisReportCommand";
 export * from "./StartFlowCaptureCommand";
 export * from "./StartFlowFlushCommand";
 export * from "./TagResourceCommand";
 export * from "./UntagResourceCommand";
+export * from "./UpdateAvailabilityZoneChangeProtectionCommand";
 export * from "./UpdateFirewallAnalysisSettingsCommand";
 export * from "./UpdateFirewallDeleteProtectionCommand";
 export * from "./UpdateFirewallDescriptionCommand";

package/dist-types/endpoint/EndpointParameters.d.ts

@@ -3,9 +3,9 @@ import { Endpoint, EndpointParameters as __EndpointParameters, EndpointV2, Provi
  * @public
  */
 export interface ClientInputEndpointParameters {
-    region?: string | Provider<string>;
-    useDualstackEndpoint?: boolean | Provider<boolean>;
-    useFipsEndpoint?: boolean | Provider<boolean>;
+    region?: string | undefined | Provider<string | undefined>;
+    useDualstackEndpoint?: boolean | undefined | Provider<boolean | undefined>;
+    useFipsEndpoint?: boolean | undefined | Provider<boolean | undefined>;
     endpoint?: string | Provider<string> | Endpoint | Provider<Endpoint> | EndpointV2 | Provider<EndpointV2>;
 }
 export type ClientResolvedEndpointParameters = ClientInputEndpointParameters & {
@@ -31,8 +31,8 @@ export declare const commonParams: {
     };
 };
 export interface EndpointParameters extends __EndpointParameters {
-    Region?: string;
-    UseDualStack?: boolean;
-    UseFIPS?: boolean;
-    Endpoint?: string;
+    Region?: string | undefined;
+    UseDualStack?: boolean | undefined;
+    UseFIPS?: boolean | undefined;
+    Endpoint?: string | undefined;
 }