IpsRuleGroup
The object that defines an IPS engine rule group, for use in a Next Generation policy. An IPS engine rule group provides threat-detection rules that the IPS engine evaluates in the context of the traffic flow. You provide the rules as a Suricata-compatible rule string. For more information, see Rule groups for a firewall using a Next Generation policy in the AWS Network Firewall Developer Guide.
Contents
- RulesSource
-
The stateful inspection criteria for the IPS engine rule group.
Type: IpsRulesSource object
Required: Yes
- ReferenceSets
-
The list of a rule group's reference sets.
Type: ReferenceSets object
Required: No
- RuleVariables
-
Settings that are available for use in the rules in the IPS engine rule group.
Type: RuleVariables object
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
