@aws-sdk/client-network-firewall 3.934.0 → 3.935.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/index.js +188 -168
- package/dist-es/index.js +2 -1
- package/dist-es/models/enums.js +171 -0
- package/dist-es/models/errors.js +169 -0
- package/dist-es/models/models_0.js +1 -333
- package/dist-es/schemas/schemas_0.js +16 -5
- package/dist-types/commands/CreateFirewallCommand.d.ts +1 -1
- package/dist-types/commands/DeleteFirewallCommand.d.ts +1 -1
- package/dist-types/commands/DescribeFirewallCommand.d.ts +1 -1
- package/dist-types/commands/DescribeRuleGroupMetadataCommand.d.ts +3 -0
- package/dist-types/commands/ListRuleGroupsCommand.d.ts +3 -1
- package/dist-types/commands/UpdateFirewallAnalysisSettingsCommand.d.ts +3 -0
- package/dist-types/index.d.ts +3 -1
- package/dist-types/models/enums.d.ts +403 -0
- package/dist-types/models/errors.d.ts +174 -0
- package/dist-types/models/models_0.d.ts +26 -562
- package/dist-types/ts3.4/index.d.ts +3 -1
- package/dist-types/ts3.4/models/enums.d.ts +223 -0
- package/dist-types/ts3.4/models/errors.d.ts +101 -0
- package/dist-types/ts3.4/models/models_0.d.ts +36 -315
- package/package.json +12 -12
- package/dist-es/models/index.js +0 -1
- package/dist-types/models/index.d.ts +0 -1
- package/dist-types/ts3.4/models/index.d.ts +0 -1
|
@@ -1,5 +1,4 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import { NetworkFirewallServiceException as __BaseException } from "./NetworkFirewallServiceException";
|
|
1
|
+
import { AttachmentStatus, ConfigurationSyncState, EnabledAnalysisType, EncryptionType, FirewallStatusValue, FlowOperationStatus, FlowOperationType, GeneratedRulesType, IdentifiedType, IPAddressType, LogDestinationType, LogType, OverrideAction, PerObjectSyncStatus, ResourceManagedStatus, ResourceManagedType, ResourceStatus, RevocationCheckAction, RuleGroupType, RuleOrder, StatefulAction, StatefulRuleDirection, StatefulRuleProtocol, StreamExceptionPolicy, SubscriptionStatus, SummaryRuleOption, TargetType, TCPFlag, TransitGatewayAttachmentStatus } from "./enums";
|
|
3
2
|
/**
|
|
4
3
|
* @public
|
|
5
4
|
*/
|
|
@@ -10,25 +9,6 @@ export interface AcceptNetworkFirewallTransitGatewayAttachmentRequest {
|
|
|
10
9
|
*/
|
|
11
10
|
TransitGatewayAttachmentId: string | undefined;
|
|
12
11
|
}
|
|
13
|
-
/**
|
|
14
|
-
* @public
|
|
15
|
-
* @enum
|
|
16
|
-
*/
|
|
17
|
-
export declare const TransitGatewayAttachmentStatus: {
|
|
18
|
-
readonly CREATING: "CREATING";
|
|
19
|
-
readonly DELETED: "DELETED";
|
|
20
|
-
readonly DELETING: "DELETING";
|
|
21
|
-
readonly ERROR: "ERROR";
|
|
22
|
-
readonly FAILED: "FAILED";
|
|
23
|
-
readonly PENDING_ACCEPTANCE: "PENDING_ACCEPTANCE";
|
|
24
|
-
readonly READY: "READY";
|
|
25
|
-
readonly REJECTED: "REJECTED";
|
|
26
|
-
readonly REJECTING: "REJECTING";
|
|
27
|
-
};
|
|
28
|
-
/**
|
|
29
|
-
* @public
|
|
30
|
-
*/
|
|
31
|
-
export type TransitGatewayAttachmentStatus = (typeof TransitGatewayAttachmentStatus)[keyof typeof TransitGatewayAttachmentStatus];
|
|
32
12
|
/**
|
|
33
13
|
* @public
|
|
34
14
|
*/
|
|
@@ -82,72 +62,6 @@ export interface AcceptNetworkFirewallTransitGatewayAttachmentResponse {
|
|
|
82
62
|
*/
|
|
83
63
|
TransitGatewayAttachmentStatus: TransitGatewayAttachmentStatus | undefined;
|
|
84
64
|
}
|
|
85
|
-
/**
|
|
86
|
-
* <p>Your request is valid, but Network Firewall couldn't perform the operation because of a
|
|
87
|
-
* system problem. Retry your request. </p>
|
|
88
|
-
* @public
|
|
89
|
-
*/
|
|
90
|
-
export declare class InternalServerError extends __BaseException {
|
|
91
|
-
readonly name: "InternalServerError";
|
|
92
|
-
readonly $fault: "server";
|
|
93
|
-
Message?: string | undefined;
|
|
94
|
-
/**
|
|
95
|
-
* @internal
|
|
96
|
-
*/
|
|
97
|
-
constructor(opts: __ExceptionOptionType<InternalServerError, __BaseException>);
|
|
98
|
-
}
|
|
99
|
-
/**
|
|
100
|
-
* <p>The operation failed because of a problem with your request. Examples include: </p>
|
|
101
|
-
* <ul>
|
|
102
|
-
* <li>
|
|
103
|
-
* <p>You specified an unsupported parameter name or value.</p>
|
|
104
|
-
* </li>
|
|
105
|
-
* <li>
|
|
106
|
-
* <p>You tried to update a property with a value that isn't among the available
|
|
107
|
-
* types.</p>
|
|
108
|
-
* </li>
|
|
109
|
-
* <li>
|
|
110
|
-
* <p>Your request references an ARN that is malformed, or corresponds to a resource
|
|
111
|
-
* that isn't valid in the context of the request.</p>
|
|
112
|
-
* </li>
|
|
113
|
-
* </ul>
|
|
114
|
-
* @public
|
|
115
|
-
*/
|
|
116
|
-
export declare class InvalidRequestException extends __BaseException {
|
|
117
|
-
readonly name: "InvalidRequestException";
|
|
118
|
-
readonly $fault: "client";
|
|
119
|
-
Message?: string | undefined;
|
|
120
|
-
/**
|
|
121
|
-
* @internal
|
|
122
|
-
*/
|
|
123
|
-
constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
|
|
124
|
-
}
|
|
125
|
-
/**
|
|
126
|
-
* <p>Unable to locate a resource using the parameters that you provided.</p>
|
|
127
|
-
* @public
|
|
128
|
-
*/
|
|
129
|
-
export declare class ResourceNotFoundException extends __BaseException {
|
|
130
|
-
readonly name: "ResourceNotFoundException";
|
|
131
|
-
readonly $fault: "client";
|
|
132
|
-
Message?: string | undefined;
|
|
133
|
-
/**
|
|
134
|
-
* @internal
|
|
135
|
-
*/
|
|
136
|
-
constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
|
|
137
|
-
}
|
|
138
|
-
/**
|
|
139
|
-
* <p>Unable to process the request due to throttling limitations.</p>
|
|
140
|
-
* @public
|
|
141
|
-
*/
|
|
142
|
-
export declare class ThrottlingException extends __BaseException {
|
|
143
|
-
readonly name: "ThrottlingException";
|
|
144
|
-
readonly $fault: "client";
|
|
145
|
-
Message?: string | undefined;
|
|
146
|
-
/**
|
|
147
|
-
* @internal
|
|
148
|
-
*/
|
|
149
|
-
constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
|
|
150
|
-
}
|
|
151
65
|
/**
|
|
152
66
|
* <p>The value to use in an Amazon CloudWatch custom metric dimension. This is used in the
|
|
153
67
|
* <code>PublishMetrics</code>
|
|
@@ -222,18 +136,6 @@ export interface Address {
|
|
|
222
136
|
*/
|
|
223
137
|
AddressDefinition: string | undefined;
|
|
224
138
|
}
|
|
225
|
-
/**
|
|
226
|
-
* @public
|
|
227
|
-
* @enum
|
|
228
|
-
*/
|
|
229
|
-
export declare const EnabledAnalysisType: {
|
|
230
|
-
readonly HTTP_HOST: "HTTP_HOST";
|
|
231
|
-
readonly TLS_SNI: "TLS_SNI";
|
|
232
|
-
};
|
|
233
|
-
/**
|
|
234
|
-
* @public
|
|
235
|
-
*/
|
|
236
|
-
export type EnabledAnalysisType = (typeof EnabledAnalysisType)[keyof typeof EnabledAnalysisType];
|
|
237
139
|
/**
|
|
238
140
|
* <p>A report that captures key activity from the last 30 days of network traffic monitored by your firewall.</p>
|
|
239
141
|
* <p>You can generate up to one report per traffic type, per 30 day period. For example, when you successfully create an HTTP traffic report,
|
|
@@ -322,18 +224,6 @@ export interface AnalysisTypeReportResult {
|
|
|
322
224
|
*/
|
|
323
225
|
UniqueSources?: UniqueSources | undefined;
|
|
324
226
|
}
|
|
325
|
-
/**
|
|
326
|
-
* @public
|
|
327
|
-
* @enum
|
|
328
|
-
*/
|
|
329
|
-
export declare const IdentifiedType: {
|
|
330
|
-
readonly STATELESS_RULE_CONTAINS_TCP_FLAGS: "STATELESS_RULE_CONTAINS_TCP_FLAGS";
|
|
331
|
-
readonly STATELESS_RULE_FORWARDING_ASYMMETRICALLY: "STATELESS_RULE_FORWARDING_ASYMMETRICALLY";
|
|
332
|
-
};
|
|
333
|
-
/**
|
|
334
|
-
* @public
|
|
335
|
-
*/
|
|
336
|
-
export type IdentifiedType = (typeof IdentifiedType)[keyof typeof IdentifiedType];
|
|
337
227
|
/**
|
|
338
228
|
* <p>The analysis result for Network Firewall's stateless rule group analyzer. Every time you call <a>CreateRuleGroup</a>, <a>UpdateRuleGroup</a>, or <a>DescribeRuleGroup</a> on a stateless rule group, Network Firewall analyzes the stateless rule groups in your account and identifies the rules that might adversely effect your firewall's functionality. For example, if Network Firewall detects a rule that's routing traffic asymmetrically, which impacts the service's ability to properly process traffic, the service includes the rule in a list of analysis results.</p>
|
|
339
229
|
* <p>The <code>AnalysisResult</code> data type is not related to traffic analysis reports you generate using <a>StartAnalysisReport</a>. For information on traffic analysis report results, see <a>AnalysisTypeReportResult</a>.</p>
|
|
@@ -448,47 +338,6 @@ export interface AssociateAvailabilityZonesResponse {
|
|
|
448
338
|
*/
|
|
449
339
|
UpdateToken?: string | undefined;
|
|
450
340
|
}
|
|
451
|
-
/**
|
|
452
|
-
* <p>Amazon Web Services doesn't currently have enough available capacity to fulfill your request. Try your
|
|
453
|
-
* request later. </p>
|
|
454
|
-
* @public
|
|
455
|
-
*/
|
|
456
|
-
export declare class InsufficientCapacityException extends __BaseException {
|
|
457
|
-
readonly name: "InsufficientCapacityException";
|
|
458
|
-
readonly $fault: "server";
|
|
459
|
-
Message?: string | undefined;
|
|
460
|
-
/**
|
|
461
|
-
* @internal
|
|
462
|
-
*/
|
|
463
|
-
constructor(opts: __ExceptionOptionType<InsufficientCapacityException, __BaseException>);
|
|
464
|
-
}
|
|
465
|
-
/**
|
|
466
|
-
* <p>The operation failed because it's not valid. For example, you might have tried to delete
|
|
467
|
-
* a rule group or firewall policy that's in use.</p>
|
|
468
|
-
* @public
|
|
469
|
-
*/
|
|
470
|
-
export declare class InvalidOperationException extends __BaseException {
|
|
471
|
-
readonly name: "InvalidOperationException";
|
|
472
|
-
readonly $fault: "client";
|
|
473
|
-
Message?: string | undefined;
|
|
474
|
-
/**
|
|
475
|
-
* @internal
|
|
476
|
-
*/
|
|
477
|
-
constructor(opts: __ExceptionOptionType<InvalidOperationException, __BaseException>);
|
|
478
|
-
}
|
|
479
|
-
/**
|
|
480
|
-
* <p>The token you provided is stale or isn't valid for the operation. </p>
|
|
481
|
-
* @public
|
|
482
|
-
*/
|
|
483
|
-
export declare class InvalidTokenException extends __BaseException {
|
|
484
|
-
readonly name: "InvalidTokenException";
|
|
485
|
-
readonly $fault: "client";
|
|
486
|
-
Message?: string | undefined;
|
|
487
|
-
/**
|
|
488
|
-
* @internal
|
|
489
|
-
*/
|
|
490
|
-
constructor(opts: __ExceptionOptionType<InvalidTokenException, __BaseException>);
|
|
491
|
-
}
|
|
492
341
|
/**
|
|
493
342
|
* @public
|
|
494
343
|
*/
|
|
@@ -545,19 +394,6 @@ export interface AssociateFirewallPolicyResponse {
|
|
|
545
394
|
*/
|
|
546
395
|
UpdateToken?: string | undefined;
|
|
547
396
|
}
|
|
548
|
-
/**
|
|
549
|
-
* @public
|
|
550
|
-
* @enum
|
|
551
|
-
*/
|
|
552
|
-
export declare const IPAddressType: {
|
|
553
|
-
readonly DUALSTACK: "DUALSTACK";
|
|
554
|
-
readonly IPV4: "IPV4";
|
|
555
|
-
readonly IPV6: "IPV6";
|
|
556
|
-
};
|
|
557
|
-
/**
|
|
558
|
-
* @public
|
|
559
|
-
*/
|
|
560
|
-
export type IPAddressType = (typeof IPAddressType)[keyof typeof IPAddressType];
|
|
561
397
|
/**
|
|
562
398
|
* <p>The ID for a subnet that's used in an association with a firewall. This is used in
|
|
563
399
|
* <a>CreateFirewall</a>, <a>AssociateSubnets</a>, and <a>CreateVpcEndpointAssociation</a>. Network Firewall
|
|
@@ -633,22 +469,6 @@ export interface AssociateSubnetsResponse {
|
|
|
633
469
|
*/
|
|
634
470
|
UpdateToken?: string | undefined;
|
|
635
471
|
}
|
|
636
|
-
/**
|
|
637
|
-
* @public
|
|
638
|
-
* @enum
|
|
639
|
-
*/
|
|
640
|
-
export declare const AttachmentStatus: {
|
|
641
|
-
readonly CREATING: "CREATING";
|
|
642
|
-
readonly DELETING: "DELETING";
|
|
643
|
-
readonly ERROR: "ERROR";
|
|
644
|
-
readonly FAILED: "FAILED";
|
|
645
|
-
readonly READY: "READY";
|
|
646
|
-
readonly SCALING: "SCALING";
|
|
647
|
-
};
|
|
648
|
-
/**
|
|
649
|
-
* @public
|
|
650
|
-
*/
|
|
651
|
-
export type AttachmentStatus = (typeof AttachmentStatus)[keyof typeof AttachmentStatus];
|
|
652
472
|
/**
|
|
653
473
|
* <p>The definition and status of the firewall endpoint for a single subnet. In each configured subnet, Network Firewall instantiates a firewall
|
|
654
474
|
* endpoint to handle network traffic. </p>
|
|
@@ -792,19 +612,6 @@ export interface TlsCertificateData {
|
|
|
792
612
|
*/
|
|
793
613
|
StatusMessage?: string | undefined;
|
|
794
614
|
}
|
|
795
|
-
/**
|
|
796
|
-
* @public
|
|
797
|
-
* @enum
|
|
798
|
-
*/
|
|
799
|
-
export declare const RevocationCheckAction: {
|
|
800
|
-
readonly DROP: "DROP";
|
|
801
|
-
readonly PASS: "PASS";
|
|
802
|
-
readonly REJECT: "REJECT";
|
|
803
|
-
};
|
|
804
|
-
/**
|
|
805
|
-
* @public
|
|
806
|
-
*/
|
|
807
|
-
export type RevocationCheckAction = (typeof RevocationCheckAction)[keyof typeof RevocationCheckAction];
|
|
808
615
|
/**
|
|
809
616
|
* <p>Defines the actions to take on the SSL/TLS connection if the certificate presented by the server in the connection has a revoked or unknown status.</p>
|
|
810
617
|
* @public
|
|
@@ -849,31 +656,6 @@ export interface CheckCertificateRevocationStatusActions {
|
|
|
849
656
|
*/
|
|
850
657
|
UnknownStatusAction?: RevocationCheckAction | undefined;
|
|
851
658
|
}
|
|
852
|
-
/**
|
|
853
|
-
* @public
|
|
854
|
-
* @enum
|
|
855
|
-
*/
|
|
856
|
-
export declare const ConfigurationSyncState: {
|
|
857
|
-
readonly CAPACITY_CONSTRAINED: "CAPACITY_CONSTRAINED";
|
|
858
|
-
readonly IN_SYNC: "IN_SYNC";
|
|
859
|
-
readonly PENDING: "PENDING";
|
|
860
|
-
};
|
|
861
|
-
/**
|
|
862
|
-
* @public
|
|
863
|
-
*/
|
|
864
|
-
export type ConfigurationSyncState = (typeof ConfigurationSyncState)[keyof typeof ConfigurationSyncState];
|
|
865
|
-
/**
|
|
866
|
-
* @public
|
|
867
|
-
* @enum
|
|
868
|
-
*/
|
|
869
|
-
export declare const EncryptionType: {
|
|
870
|
-
readonly AWS_OWNED_KMS_KEY: "AWS_OWNED_KMS_KEY";
|
|
871
|
-
readonly CUSTOMER_KMS: "CUSTOMER_KMS";
|
|
872
|
-
};
|
|
873
|
-
/**
|
|
874
|
-
* @public
|
|
875
|
-
*/
|
|
876
|
-
export type EncryptionType = (typeof EncryptionType)[keyof typeof EncryptionType];
|
|
877
659
|
/**
|
|
878
660
|
* <p>A complex type that contains optional Amazon Web Services Key Management Service (KMS) encryption settings for your Network Firewall resources. Your data is encrypted by default with an Amazon Web Services owned key that Amazon Web Services owns and manages for you. You can use either the Amazon Web Services owned key, or provide your own customer managed key. To learn more about KMS encryption of your Network Firewall resources, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-encryption-at-rest.html">Encryption at rest with Amazon Web Services Key Managment Service</a> in the <i>Network Firewall Developer Guide</i>.</p>
|
|
879
661
|
* @public
|
|
@@ -1115,32 +897,6 @@ export interface Firewall {
|
|
|
1115
897
|
*/
|
|
1116
898
|
AvailabilityZoneChangeProtection?: boolean | undefined;
|
|
1117
899
|
}
|
|
1118
|
-
/**
|
|
1119
|
-
* @public
|
|
1120
|
-
* @enum
|
|
1121
|
-
*/
|
|
1122
|
-
export declare const FirewallStatusValue: {
|
|
1123
|
-
readonly DELETING: "DELETING";
|
|
1124
|
-
readonly PROVISIONING: "PROVISIONING";
|
|
1125
|
-
readonly READY: "READY";
|
|
1126
|
-
};
|
|
1127
|
-
/**
|
|
1128
|
-
* @public
|
|
1129
|
-
*/
|
|
1130
|
-
export type FirewallStatusValue = (typeof FirewallStatusValue)[keyof typeof FirewallStatusValue];
|
|
1131
|
-
/**
|
|
1132
|
-
* @public
|
|
1133
|
-
* @enum
|
|
1134
|
-
*/
|
|
1135
|
-
export declare const PerObjectSyncStatus: {
|
|
1136
|
-
readonly CAPACITY_CONSTRAINED: "CAPACITY_CONSTRAINED";
|
|
1137
|
-
readonly IN_SYNC: "IN_SYNC";
|
|
1138
|
-
readonly PENDING: "PENDING";
|
|
1139
|
-
};
|
|
1140
|
-
/**
|
|
1141
|
-
* @public
|
|
1142
|
-
*/
|
|
1143
|
-
export type PerObjectSyncStatus = (typeof PerObjectSyncStatus)[keyof typeof PerObjectSyncStatus];
|
|
1144
900
|
/**
|
|
1145
901
|
* <p>Provides configuration status for a single policy or rule group that is used for a firewall endpoint. Network Firewall
|
|
1146
902
|
* provides each endpoint with the rules that are configured in the firewall policy. Each time
|
|
@@ -1360,19 +1116,6 @@ export interface CreateFirewallResponse {
|
|
|
1360
1116
|
*/
|
|
1361
1117
|
FirewallStatus?: FirewallStatus | undefined;
|
|
1362
1118
|
}
|
|
1363
|
-
/**
|
|
1364
|
-
* <p>Unable to perform the operation because doing so would violate a limit setting. </p>
|
|
1365
|
-
* @public
|
|
1366
|
-
*/
|
|
1367
|
-
export declare class LimitExceededException extends __BaseException {
|
|
1368
|
-
readonly name: "LimitExceededException";
|
|
1369
|
-
readonly $fault: "client";
|
|
1370
|
-
Message?: string | undefined;
|
|
1371
|
-
/**
|
|
1372
|
-
* @internal
|
|
1373
|
-
*/
|
|
1374
|
-
constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
|
|
1375
|
-
}
|
|
1376
1119
|
/**
|
|
1377
1120
|
* <p>A list of IP addresses and address ranges, in CIDR notation. This is part of a <a>RuleVariables</a>. </p>
|
|
1378
1121
|
* @public
|
|
@@ -1415,31 +1158,6 @@ export interface FlowTimeouts {
|
|
|
1415
1158
|
*/
|
|
1416
1159
|
TcpIdleTimeoutSeconds?: number | undefined;
|
|
1417
1160
|
}
|
|
1418
|
-
/**
|
|
1419
|
-
* @public
|
|
1420
|
-
* @enum
|
|
1421
|
-
*/
|
|
1422
|
-
export declare const RuleOrder: {
|
|
1423
|
-
readonly DEFAULT_ACTION_ORDER: "DEFAULT_ACTION_ORDER";
|
|
1424
|
-
readonly STRICT_ORDER: "STRICT_ORDER";
|
|
1425
|
-
};
|
|
1426
|
-
/**
|
|
1427
|
-
* @public
|
|
1428
|
-
*/
|
|
1429
|
-
export type RuleOrder = (typeof RuleOrder)[keyof typeof RuleOrder];
|
|
1430
|
-
/**
|
|
1431
|
-
* @public
|
|
1432
|
-
* @enum
|
|
1433
|
-
*/
|
|
1434
|
-
export declare const StreamExceptionPolicy: {
|
|
1435
|
-
readonly CONTINUE: "CONTINUE";
|
|
1436
|
-
readonly DROP: "DROP";
|
|
1437
|
-
readonly REJECT: "REJECT";
|
|
1438
|
-
};
|
|
1439
|
-
/**
|
|
1440
|
-
* @public
|
|
1441
|
-
*/
|
|
1442
|
-
export type StreamExceptionPolicy = (typeof StreamExceptionPolicy)[keyof typeof StreamExceptionPolicy];
|
|
1443
1161
|
/**
|
|
1444
1162
|
* <p>Configuration settings for the handling of the stateful rule groups in a firewall policy. </p>
|
|
1445
1163
|
* @public
|
|
@@ -1485,17 +1203,6 @@ export interface StatefulEngineOptions {
|
|
|
1485
1203
|
*/
|
|
1486
1204
|
FlowTimeouts?: FlowTimeouts | undefined;
|
|
1487
1205
|
}
|
|
1488
|
-
/**
|
|
1489
|
-
* @public
|
|
1490
|
-
* @enum
|
|
1491
|
-
*/
|
|
1492
|
-
export declare const OverrideAction: {
|
|
1493
|
-
readonly DROP_TO_ALERT: "DROP_TO_ALERT";
|
|
1494
|
-
};
|
|
1495
|
-
/**
|
|
1496
|
-
* @public
|
|
1497
|
-
*/
|
|
1498
|
-
export type OverrideAction = (typeof OverrideAction)[keyof typeof OverrideAction];
|
|
1499
1206
|
/**
|
|
1500
1207
|
* <p>The setting that allows the policy owner to change the behavior of the rule group within a policy. </p>
|
|
1501
1208
|
* @public
|
|
@@ -1744,19 +1451,6 @@ export interface CreateFirewallPolicyRequest {
|
|
|
1744
1451
|
*/
|
|
1745
1452
|
EncryptionConfiguration?: EncryptionConfiguration | undefined;
|
|
1746
1453
|
}
|
|
1747
|
-
/**
|
|
1748
|
-
* @public
|
|
1749
|
-
* @enum
|
|
1750
|
-
*/
|
|
1751
|
-
export declare const ResourceStatus: {
|
|
1752
|
-
readonly ACTIVE: "ACTIVE";
|
|
1753
|
-
readonly DELETING: "DELETING";
|
|
1754
|
-
readonly ERROR: "ERROR";
|
|
1755
|
-
};
|
|
1756
|
-
/**
|
|
1757
|
-
* @public
|
|
1758
|
-
*/
|
|
1759
|
-
export type ResourceStatus = (typeof ResourceStatus)[keyof typeof ResourceStatus];
|
|
1760
1454
|
/**
|
|
1761
1455
|
* <p>The high-level properties of a firewall policy. This, along with the <a>FirewallPolicy</a>, define the policy. You can retrieve all objects for a firewall policy by calling <a>DescribeFirewallPolicy</a>. </p>
|
|
1762
1456
|
* @public
|
|
@@ -1866,32 +1560,6 @@ export interface ReferenceSets {
|
|
|
1866
1560
|
*/
|
|
1867
1561
|
IPSetReferences?: Record<string, IPSetReference> | undefined;
|
|
1868
1562
|
}
|
|
1869
|
-
/**
|
|
1870
|
-
* @public
|
|
1871
|
-
* @enum
|
|
1872
|
-
*/
|
|
1873
|
-
export declare const GeneratedRulesType: {
|
|
1874
|
-
readonly ALERTLIST: "ALERTLIST";
|
|
1875
|
-
readonly ALLOWLIST: "ALLOWLIST";
|
|
1876
|
-
readonly DENYLIST: "DENYLIST";
|
|
1877
|
-
readonly REJECTLIST: "REJECTLIST";
|
|
1878
|
-
};
|
|
1879
|
-
/**
|
|
1880
|
-
* @public
|
|
1881
|
-
*/
|
|
1882
|
-
export type GeneratedRulesType = (typeof GeneratedRulesType)[keyof typeof GeneratedRulesType];
|
|
1883
|
-
/**
|
|
1884
|
-
* @public
|
|
1885
|
-
* @enum
|
|
1886
|
-
*/
|
|
1887
|
-
export declare const TargetType: {
|
|
1888
|
-
readonly HTTP_HOST: "HTTP_HOST";
|
|
1889
|
-
readonly TLS_SNI: "TLS_SNI";
|
|
1890
|
-
};
|
|
1891
|
-
/**
|
|
1892
|
-
* @public
|
|
1893
|
-
*/
|
|
1894
|
-
export type TargetType = (typeof TargetType)[keyof typeof TargetType];
|
|
1895
1563
|
/**
|
|
1896
1564
|
* <p>Stateful inspection criteria for a domain list rule group. </p>
|
|
1897
1565
|
* <p>For HTTPS traffic, domain filtering is SNI-based. It uses the server name indicator extension of the TLS handshake.</p>
|
|
@@ -1928,63 +1596,6 @@ export interface RulesSourceList {
|
|
|
1928
1596
|
*/
|
|
1929
1597
|
GeneratedRulesType: GeneratedRulesType | undefined;
|
|
1930
1598
|
}
|
|
1931
|
-
/**
|
|
1932
|
-
* @public
|
|
1933
|
-
* @enum
|
|
1934
|
-
*/
|
|
1935
|
-
export declare const StatefulAction: {
|
|
1936
|
-
readonly ALERT: "ALERT";
|
|
1937
|
-
readonly DROP: "DROP";
|
|
1938
|
-
readonly PASS: "PASS";
|
|
1939
|
-
readonly REJECT: "REJECT";
|
|
1940
|
-
};
|
|
1941
|
-
/**
|
|
1942
|
-
* @public
|
|
1943
|
-
*/
|
|
1944
|
-
export type StatefulAction = (typeof StatefulAction)[keyof typeof StatefulAction];
|
|
1945
|
-
/**
|
|
1946
|
-
* @public
|
|
1947
|
-
* @enum
|
|
1948
|
-
*/
|
|
1949
|
-
export declare const StatefulRuleDirection: {
|
|
1950
|
-
readonly ANY: "ANY";
|
|
1951
|
-
readonly FORWARD: "FORWARD";
|
|
1952
|
-
};
|
|
1953
|
-
/**
|
|
1954
|
-
* @public
|
|
1955
|
-
*/
|
|
1956
|
-
export type StatefulRuleDirection = (typeof StatefulRuleDirection)[keyof typeof StatefulRuleDirection];
|
|
1957
|
-
/**
|
|
1958
|
-
* @public
|
|
1959
|
-
* @enum
|
|
1960
|
-
*/
|
|
1961
|
-
export declare const StatefulRuleProtocol: {
|
|
1962
|
-
readonly ANY: "IP";
|
|
1963
|
-
readonly DCERPC: "DCERPC";
|
|
1964
|
-
readonly DHCP: "DHCP";
|
|
1965
|
-
readonly DNS: "DNS";
|
|
1966
|
-
readonly FTP: "FTP";
|
|
1967
|
-
readonly HTTP: "HTTP";
|
|
1968
|
-
readonly HTTP2: "HTTP2";
|
|
1969
|
-
readonly ICMP: "ICMP";
|
|
1970
|
-
readonly IKEV2: "IKEV2";
|
|
1971
|
-
readonly IMAP: "IMAP";
|
|
1972
|
-
readonly KRB5: "KRB5";
|
|
1973
|
-
readonly MSN: "MSN";
|
|
1974
|
-
readonly NTP: "NTP";
|
|
1975
|
-
readonly QUIC: "QUIC";
|
|
1976
|
-
readonly SMB: "SMB";
|
|
1977
|
-
readonly SMTP: "SMTP";
|
|
1978
|
-
readonly SSH: "SSH";
|
|
1979
|
-
readonly TCP: "TCP";
|
|
1980
|
-
readonly TFTP: "TFTP";
|
|
1981
|
-
readonly TLS: "TLS";
|
|
1982
|
-
readonly UDP: "UDP";
|
|
1983
|
-
};
|
|
1984
|
-
/**
|
|
1985
|
-
* @public
|
|
1986
|
-
*/
|
|
1987
|
-
export type StatefulRuleProtocol = (typeof StatefulRuleProtocol)[keyof typeof StatefulRuleProtocol];
|
|
1988
1599
|
/**
|
|
1989
1600
|
* <p>The basic rule criteria for Network Firewall to use to inspect packet headers in stateful
|
|
1990
1601
|
* traffic flow inspection. Traffic flows that match the criteria are a match for the
|
|
@@ -2157,24 +1768,6 @@ export interface PortRange {
|
|
|
2157
1768
|
*/
|
|
2158
1769
|
ToPort: number | undefined;
|
|
2159
1770
|
}
|
|
2160
|
-
/**
|
|
2161
|
-
* @public
|
|
2162
|
-
* @enum
|
|
2163
|
-
*/
|
|
2164
|
-
export declare const TCPFlag: {
|
|
2165
|
-
readonly ACK: "ACK";
|
|
2166
|
-
readonly CWR: "CWR";
|
|
2167
|
-
readonly ECE: "ECE";
|
|
2168
|
-
readonly FIN: "FIN";
|
|
2169
|
-
readonly PSH: "PSH";
|
|
2170
|
-
readonly RST: "RST";
|
|
2171
|
-
readonly SYN: "SYN";
|
|
2172
|
-
readonly URG: "URG";
|
|
2173
|
-
};
|
|
2174
|
-
/**
|
|
2175
|
-
* @public
|
|
2176
|
-
*/
|
|
2177
|
-
export type TCPFlag = (typeof TCPFlag)[keyof typeof TCPFlag];
|
|
2178
1771
|
/**
|
|
2179
1772
|
* <p>TCP flags and masks to inspect packets for, used in stateless rules <a>MatchAttributes</a> settings.</p>
|
|
2180
1773
|
* @public
|
|
@@ -2481,19 +2074,6 @@ export interface SourceMetadata {
|
|
|
2481
2074
|
*/
|
|
2482
2075
|
SourceUpdateToken?: string | undefined;
|
|
2483
2076
|
}
|
|
2484
|
-
/**
|
|
2485
|
-
* @public
|
|
2486
|
-
* @enum
|
|
2487
|
-
*/
|
|
2488
|
-
export declare const SummaryRuleOption: {
|
|
2489
|
-
readonly METADATA: "METADATA";
|
|
2490
|
-
readonly MSG: "MSG";
|
|
2491
|
-
readonly SID: "SID";
|
|
2492
|
-
};
|
|
2493
|
-
/**
|
|
2494
|
-
* @public
|
|
2495
|
-
*/
|
|
2496
|
-
export type SummaryRuleOption = (typeof SummaryRuleOption)[keyof typeof SummaryRuleOption];
|
|
2497
2077
|
/**
|
|
2498
2078
|
* <p>A complex type that specifies which Suricata rule metadata fields to use when displaying threat information. Contains:</p>
|
|
2499
2079
|
* <ul>
|
|
@@ -2512,18 +2092,6 @@ export interface SummaryConfiguration {
|
|
|
2512
2092
|
*/
|
|
2513
2093
|
RuleOptions?: SummaryRuleOption[] | undefined;
|
|
2514
2094
|
}
|
|
2515
|
-
/**
|
|
2516
|
-
* @public
|
|
2517
|
-
* @enum
|
|
2518
|
-
*/
|
|
2519
|
-
export declare const RuleGroupType: {
|
|
2520
|
-
readonly STATEFUL: "STATEFUL";
|
|
2521
|
-
readonly STATELESS: "STATELESS";
|
|
2522
|
-
};
|
|
2523
|
-
/**
|
|
2524
|
-
* @public
|
|
2525
|
-
*/
|
|
2526
|
-
export type RuleGroupType = (typeof RuleGroupType)[keyof typeof RuleGroupType];
|
|
2527
2095
|
/**
|
|
2528
2096
|
* @public
|
|
2529
2097
|
*/
|
|
@@ -3171,19 +2739,6 @@ export interface DeleteFirewallResponse {
|
|
|
3171
2739
|
*/
|
|
3172
2740
|
FirewallStatus?: FirewallStatus | undefined;
|
|
3173
2741
|
}
|
|
3174
|
-
/**
|
|
3175
|
-
* <p>The operation you requested isn't supported by Network Firewall. </p>
|
|
3176
|
-
* @public
|
|
3177
|
-
*/
|
|
3178
|
-
export declare class UnsupportedOperationException extends __BaseException {
|
|
3179
|
-
readonly name: "UnsupportedOperationException";
|
|
3180
|
-
readonly $fault: "client";
|
|
3181
|
-
Message?: string | undefined;
|
|
3182
|
-
/**
|
|
3183
|
-
* @internal
|
|
3184
|
-
*/
|
|
3185
|
-
constructor(opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>);
|
|
3186
|
-
}
|
|
3187
2742
|
/**
|
|
3188
2743
|
* @public
|
|
3189
2744
|
*/
|
|
@@ -3291,19 +2846,6 @@ export interface DeleteResourcePolicyRequest {
|
|
|
3291
2846
|
*/
|
|
3292
2847
|
export interface DeleteResourcePolicyResponse {
|
|
3293
2848
|
}
|
|
3294
|
-
/**
|
|
3295
|
-
* <p>The policy statement failed validation.</p>
|
|
3296
|
-
* @public
|
|
3297
|
-
*/
|
|
3298
|
-
export declare class InvalidResourcePolicyException extends __BaseException {
|
|
3299
|
-
readonly name: "InvalidResourcePolicyException";
|
|
3300
|
-
readonly $fault: "client";
|
|
3301
|
-
Message?: string | undefined;
|
|
3302
|
-
/**
|
|
3303
|
-
* @internal
|
|
3304
|
-
*/
|
|
3305
|
-
constructor(opts: __ExceptionOptionType<InvalidResourcePolicyException, __BaseException>);
|
|
3306
|
-
}
|
|
3307
2849
|
/**
|
|
3308
2850
|
* @public
|
|
3309
2851
|
*/
|
|
@@ -3609,32 +3151,6 @@ export interface FlowOperation {
|
|
|
3609
3151
|
*/
|
|
3610
3152
|
FlowFilters?: FlowFilter[] | undefined;
|
|
3611
3153
|
}
|
|
3612
|
-
/**
|
|
3613
|
-
* @public
|
|
3614
|
-
* @enum
|
|
3615
|
-
*/
|
|
3616
|
-
export declare const FlowOperationStatus: {
|
|
3617
|
-
readonly COMPLETED: "COMPLETED";
|
|
3618
|
-
readonly COMPLETED_WITH_ERRORS: "COMPLETED_WITH_ERRORS";
|
|
3619
|
-
readonly FAILED: "FAILED";
|
|
3620
|
-
readonly IN_PROGRESS: "IN_PROGRESS";
|
|
3621
|
-
};
|
|
3622
|
-
/**
|
|
3623
|
-
* @public
|
|
3624
|
-
*/
|
|
3625
|
-
export type FlowOperationStatus = (typeof FlowOperationStatus)[keyof typeof FlowOperationStatus];
|
|
3626
|
-
/**
|
|
3627
|
-
* @public
|
|
3628
|
-
* @enum
|
|
3629
|
-
*/
|
|
3630
|
-
export declare const FlowOperationType: {
|
|
3631
|
-
readonly FLOW_CAPTURE: "FLOW_CAPTURE";
|
|
3632
|
-
readonly FLOW_FLUSH: "FLOW_FLUSH";
|
|
3633
|
-
};
|
|
3634
|
-
/**
|
|
3635
|
-
* @public
|
|
3636
|
-
*/
|
|
3637
|
-
export type FlowOperationType = (typeof FlowOperationType)[keyof typeof FlowOperationType];
|
|
3638
3154
|
/**
|
|
3639
3155
|
* @public
|
|
3640
3156
|
*/
|
|
@@ -3710,32 +3226,6 @@ export interface DescribeLoggingConfigurationRequest {
|
|
|
3710
3226
|
*/
|
|
3711
3227
|
FirewallName?: string | undefined;
|
|
3712
3228
|
}
|
|
3713
|
-
/**
|
|
3714
|
-
* @public
|
|
3715
|
-
* @enum
|
|
3716
|
-
*/
|
|
3717
|
-
export declare const LogDestinationType: {
|
|
3718
|
-
readonly CLOUDWATCH_LOGS: "CloudWatchLogs";
|
|
3719
|
-
readonly KINESIS_DATA_FIREHOSE: "KinesisDataFirehose";
|
|
3720
|
-
readonly S3: "S3";
|
|
3721
|
-
};
|
|
3722
|
-
/**
|
|
3723
|
-
* @public
|
|
3724
|
-
*/
|
|
3725
|
-
export type LogDestinationType = (typeof LogDestinationType)[keyof typeof LogDestinationType];
|
|
3726
|
-
/**
|
|
3727
|
-
* @public
|
|
3728
|
-
* @enum
|
|
3729
|
-
*/
|
|
3730
|
-
export declare const LogType: {
|
|
3731
|
-
readonly ALERT: "ALERT";
|
|
3732
|
-
readonly FLOW: "FLOW";
|
|
3733
|
-
readonly TLS: "TLS";
|
|
3734
|
-
};
|
|
3735
|
-
/**
|
|
3736
|
-
* @public
|
|
3737
|
-
*/
|
|
3738
|
-
export type LogType = (typeof LogType)[keyof typeof LogType];
|
|
3739
3229
|
/**
|
|
3740
3230
|
* <p>Defines where Network Firewall sends logs for the firewall for one log type. This is used
|
|
3741
3231
|
* in <a>LoggingConfiguration</a>. You can send each type of log to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.</p>
|
|
@@ -3995,6 +3485,21 @@ export interface DescribeRuleGroupMetadataResponse {
|
|
|
3995
3485
|
* @public
|
|
3996
3486
|
*/
|
|
3997
3487
|
LastModifiedTime?: Date | undefined;
|
|
3488
|
+
/**
|
|
3489
|
+
* <p>The name of the Amazon Web Services Marketplace vendor that provides this rule group.</p>
|
|
3490
|
+
* @public
|
|
3491
|
+
*/
|
|
3492
|
+
VendorName?: string | undefined;
|
|
3493
|
+
/**
|
|
3494
|
+
* <p>The unique identifier for the product listing associated with this rule group.</p>
|
|
3495
|
+
* @public
|
|
3496
|
+
*/
|
|
3497
|
+
ProductId?: string | undefined;
|
|
3498
|
+
/**
|
|
3499
|
+
* <p>The display name of the product listing for this rule group.</p>
|
|
3500
|
+
* @public
|
|
3501
|
+
*/
|
|
3502
|
+
ListingName?: string | undefined;
|
|
3998
3503
|
}
|
|
3999
3504
|
/**
|
|
4000
3505
|
* @public
|
|
@@ -4784,31 +4289,6 @@ export interface ListFlowOperationsResponse {
|
|
|
4784
4289
|
*/
|
|
4785
4290
|
NextToken?: string | undefined;
|
|
4786
4291
|
}
|
|
4787
|
-
/**
|
|
4788
|
-
* @public
|
|
4789
|
-
* @enum
|
|
4790
|
-
*/
|
|
4791
|
-
export declare const ResourceManagedType: {
|
|
4792
|
-
readonly ACTIVE_THREAT_DEFENSE: "ACTIVE_THREAT_DEFENSE";
|
|
4793
|
-
readonly AWS_MANAGED_DOMAIN_LISTS: "AWS_MANAGED_DOMAIN_LISTS";
|
|
4794
|
-
readonly AWS_MANAGED_THREAT_SIGNATURES: "AWS_MANAGED_THREAT_SIGNATURES";
|
|
4795
|
-
};
|
|
4796
|
-
/**
|
|
4797
|
-
* @public
|
|
4798
|
-
*/
|
|
4799
|
-
export type ResourceManagedType = (typeof ResourceManagedType)[keyof typeof ResourceManagedType];
|
|
4800
|
-
/**
|
|
4801
|
-
* @public
|
|
4802
|
-
* @enum
|
|
4803
|
-
*/
|
|
4804
|
-
export declare const ResourceManagedStatus: {
|
|
4805
|
-
readonly ACCOUNT: "ACCOUNT";
|
|
4806
|
-
readonly MANAGED: "MANAGED";
|
|
4807
|
-
};
|
|
4808
|
-
/**
|
|
4809
|
-
* @public
|
|
4810
|
-
*/
|
|
4811
|
-
export type ResourceManagedStatus = (typeof ResourceManagedStatus)[keyof typeof ResourceManagedStatus];
|
|
4812
4292
|
/**
|
|
4813
4293
|
* @public
|
|
4814
4294
|
*/
|
|
@@ -4839,6 +4319,11 @@ export interface ListRuleGroupsRequest {
|
|
|
4839
4319
|
* @public
|
|
4840
4320
|
*/
|
|
4841
4321
|
ManagedType?: ResourceManagedType | undefined;
|
|
4322
|
+
/**
|
|
4323
|
+
* <p>Filters the results to show only rule groups with the specified subscription status. Use this to find subscribed or unsubscribed rule groups.</p>
|
|
4324
|
+
* @public
|
|
4325
|
+
*/
|
|
4326
|
+
SubscriptionStatus?: SubscriptionStatus | undefined;
|
|
4842
4327
|
/**
|
|
4843
4328
|
* <p>Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains stateless rules. If it is stateful, it contains stateful rules.</p>
|
|
4844
4329
|
* @public
|
|
@@ -4862,6 +4347,11 @@ export interface RuleGroupMetadata {
|
|
|
4862
4347
|
* @public
|
|
4863
4348
|
*/
|
|
4864
4349
|
Arn?: string | undefined;
|
|
4350
|
+
/**
|
|
4351
|
+
* <p>The name of the Amazon Web Services Marketplace seller that provides this rule group.</p>
|
|
4352
|
+
* @public
|
|
4353
|
+
*/
|
|
4354
|
+
VendorName?: string | undefined;
|
|
4865
4355
|
}
|
|
4866
4356
|
/**
|
|
4867
4357
|
* @public
|
|
@@ -5031,19 +4521,6 @@ export interface ListVpcEndpointAssociationsResponse {
|
|
|
5031
4521
|
*/
|
|
5032
4522
|
VpcEndpointAssociations?: VpcEndpointAssociationMetadata[] | undefined;
|
|
5033
4523
|
}
|
|
5034
|
-
/**
|
|
5035
|
-
* <p>Unable to send logs to a configured logging destination. </p>
|
|
5036
|
-
* @public
|
|
5037
|
-
*/
|
|
5038
|
-
export declare class LogDestinationPermissionException extends __BaseException {
|
|
5039
|
-
readonly name: "LogDestinationPermissionException";
|
|
5040
|
-
readonly $fault: "client";
|
|
5041
|
-
Message?: string | undefined;
|
|
5042
|
-
/**
|
|
5043
|
-
* @internal
|
|
5044
|
-
*/
|
|
5045
|
-
constructor(opts: __ExceptionOptionType<LogDestinationPermissionException, __BaseException>);
|
|
5046
|
-
}
|
|
5047
4524
|
/**
|
|
5048
4525
|
* @public
|
|
5049
4526
|
*/
|
|
@@ -5356,19 +4833,6 @@ export interface UntagResourceRequest {
|
|
|
5356
4833
|
*/
|
|
5357
4834
|
export interface UntagResourceResponse {
|
|
5358
4835
|
}
|
|
5359
|
-
/**
|
|
5360
|
-
* <p>Unable to change the resource because your account doesn't own it. </p>
|
|
5361
|
-
* @public
|
|
5362
|
-
*/
|
|
5363
|
-
export declare class ResourceOwnerCheckException extends __BaseException {
|
|
5364
|
-
readonly name: "ResourceOwnerCheckException";
|
|
5365
|
-
readonly $fault: "client";
|
|
5366
|
-
Message?: string | undefined;
|
|
5367
|
-
/**
|
|
5368
|
-
* @internal
|
|
5369
|
-
*/
|
|
5370
|
-
constructor(opts: __ExceptionOptionType<ResourceOwnerCheckException, __BaseException>);
|
|
5371
|
-
}
|
|
5372
4836
|
/**
|
|
5373
4837
|
* @public
|
|
5374
4838
|
*/
|