FirewallRuleGroup
The object that defines a firewall engine rule group, for use in a Next Generation policy. A firewall engine rule group provides access-control rules that the firewall engine evaluates at connection-state hooks. You provide the rules as a Suricata-compatible rule string, as structured firewall rules, or generated from a list of domain names. For more information, see Rule groups for a firewall using a Next Generation policy in the AWS Network Firewall Developer Guide.
Contents
- RulesSource
-
The stateful inspection criteria for the firewall engine rule group.
Type: FirewallRulesSource object
Required: Yes
- ReferenceSets
-
The list of a rule group's reference sets. Firewall engine rule groups don't support IP set references (reference sets); this setting applies to IPS engine rule groups. To use CIDR ranges in firewall engine rules, use rule variables instead.
Type: ReferenceSets object
Required: No
- RuleVariables
-
Settings that are available for use in the rules in the firewall engine rule group, such as IP set and port variables that the rules reference.
Type: RuleVariables object
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
