Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

FirewallPolicyDetails - AWS Security Hub

FirewallPolicyDetails

Defines the behavior of the firewall.

Contents

StatefulRuleGroupReferences

The stateful rule groups that are used in the firewall policy.

Type: Array of FirewallPolicyStatefulRuleGroupReferencesDetails objects

Required: No

StatelessCustomActions

The custom action definitions that are available to use in the firewall policy's StatelessDefaultActions setting.

Type: Array of FirewallPolicyStatelessCustomActionsDetails objects

Required: No

StatelessDefaultActions

The actions to take on a packet if it doesn't match any of the stateless rules in the policy.

You must specify a standard action (aws:pass, aws:drop, aws:forward_to_sfe), and can optionally include a custom action from StatelessCustomActions.

Type: Array of strings

Pattern: .*\S.*

Required: No

StatelessFragmentDefaultActions

The actions to take on a fragmented UDP packet if it doesn't match any of the stateless rules in the policy.

You must specify a standard action (aws:pass, aws:drop, aws:forward_to_sfe), and can optionally include a custom action from StatelessCustomActions.

Type: Array of strings

Pattern: .*\S.*

Required: No

StatelessRuleGroupReferences

The stateless rule groups that are used in the firewall policy.

Type: Array of FirewallPolicyStatelessRuleGroupReferencesDetails objects

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following:

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.