FirewallPolicyDetails - AWS Security Hub

FirewallPolicyDetails

Defines the behavior of the firewall.

Contents

StatefulRuleGroupReferences

The stateful rule groups that are used in the firewall policy.

Type: Array of FirewallPolicyStatefulRuleGroupReferencesDetails objects

Required: No

StatelessCustomActions

The custom action definitions that are available to use in the firewall policy's StatelessDefaultActions setting.

Type: Array of FirewallPolicyStatelessCustomActionsDetails objects

Required: No

StatelessDefaultActions

The actions to take on a packet if it doesn't match any of the stateless rules in the policy.

You must specify a standard action (aws:pass, aws:drop, aws:forward_to_sfe), and can optionally include a custom action from StatelessCustomActions.

Type: Array of strings

Pattern: .*\S.*

Required: No

StatelessFragmentDefaultActions

The actions to take on a fragmented UDP packet if it doesn't match any of the stateless rules in the policy.

You must specify a standard action (aws:pass, aws:drop, aws:forward_to_sfe), and can optionally include a custom action from StatelessCustomActions.

Type: Array of strings

Pattern: .*\S.*

Required: No

StatelessRuleGroupReferences

The stateless rule groups that are used in the firewall policy.

Type: Array of FirewallPolicyStatelessRuleGroupReferencesDetails objects

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: