View a markdown version of this page

IpsRuleGroup - AWS Network Firewall

IpsRuleGroup

The object that defines an IPS engine rule group, for use in a Next Generation policy. An IPS engine rule group provides threat-detection rules that the IPS engine evaluates in the context of the traffic flow. You provide the rules as a Suricata-compatible rule string. For more information, see Rule groups for a firewall using a Next Generation policy in the AWS Network Firewall Developer Guide.

Contents

RulesSource

The stateful inspection criteria for the IPS engine rule group.

Type: IpsRulesSource object

Required: Yes

ReferenceSets

The list of a rule group's reference sets.

Type: ReferenceSets object

Required: No

RuleVariables

Settings that are available for use in the rules in the IPS engine rule group.

Type: RuleVariables object

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: