Rule groups for Next Generation policies in AWS Network Firewall

Next Generation policies use two rule group types, one for each inspection engine: firewall rule groups for the firewall engine and IPS rule groups for the IPS engine. These rule group types use the same RuleGroup resource and the same API operations as the stateless and stateful rule groups described in Managing your rule groups—CreateRuleGroup, UpdateRuleGroup, DescribeRuleGroup, DeleteRuleGroup, and ListRuleGroups. You select the rule group type when you create the rule group, and you can't change it afterward.

As with stateless and stateful rule groups, you can share firewall and IPS rule groups across accounts using AWS Resource Access Manager, and you can reference the same rule group from multiple policies. For information about sharing, see Sharing Network Firewall resources. For the maximum number of rules per policy and other quotas, see AWS Network Firewall quotas.

Topics

• Common rule group settings in AWS Network Firewall

• Viewing your rule groups in AWS Network Firewall

• Creating a rule group for a Next Generation policy

• Updating a rule group for a Next Generation policy

• Deleting a rule group for a Next Generation policy

• Working with firewall rule groups in AWS Network Firewall

• Working with IPS rule groups in AWS Network Firewall

• Setting rule group capacity in AWS Network Firewall