AWS::NetworkFirewall::RuleGroup CustomAction

An optional, non-standard action to use for stateless packet handling. You can define this in addition to the standard action that you must specify.

You define and name the custom actions that you want to be able to use, and then you reference them by name in your actions settings.

You can use custom actions in the following places:

• In an AWS::NetworkFirewall::RuleGroup StatelessRulesAndCustomActions. The custom actions are available for use by name inside the StatelessRulesAndCustomActions where you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes.

• In an AWS::NetworkFirewall::FirewallPolicy specification, in StatelessCustomActions. The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "ActionDefinition" : ActionDefinition,
  "ActionName" : String
}

YAML

  ActionDefinition: 
    ActionDefinition
  ActionName: String

Properties

ActionDefinition

The custom action associated with the action name.

Required: Yes

Type: ActionDefinition

Update requires: No interruption

ActionName

The descriptive name of the custom action. You can't change the name of a custom action after you create it.

Required: Yes

Type: String

Pattern: ^[a-zA-Z0-9]+$

Minimum: 1

Maximum: 128

Update requires: No interruption