FirewallRulesSource
The source of the rules for a firewall engine rule group. You provide the rules as a single Suricata-compatible rule string, as a list of structured firewall rules, or as a list of domain names to generate rules from.
Contents
- FirewallRules
-
An array of individual firewall engine rules, provided as structured rules rather than as a rule string.
Type: Array of FirewallRule objects
Required: No
- RulesSourceList
-
Stateful inspection criteria for a domain list, specified as the list of domain names that Network Firewall generates firewall engine rules from.
Type: RulesSourceList object
Required: No
- RulesString
-
Firewall engine rules, provided as a single Suricata-compatible rule string in firewall mode. Use this to provide rules that you've already written in the Suricata firewall-mode format. For the rule format, see Rule groups for a firewall using a Next Generation policy in the AWS Network Firewall Developer Guide.
Type: String
Length Constraints: Minimum length of 0. Maximum length of 2000000.
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
