Network Firewall Firewall

This table represents the Network Firewall Firewall resource from Amazon Web Services.

aws.network_firewall_firewall

Fields

TitleIDTypeData TypeDescription
_keycorestring
account_idcorestring
delete_protectioncoreboolA flag indicating whether it is possible to delete the firewall. A setting of <code>TRUE</code> indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to <code>TRUE</code>.
descriptioncorestringA description of the firewall.
encryption_configurationcorejsonA complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall.
firewall_arncorestringThe Amazon Resource Name (ARN) of the firewall.
firewall_idcorestringThe unique identifier for the firewall.
firewall_namecorestringThe descriptive name of the firewall. You can't change the name of a firewall after you create it.
firewall_policycorejsonThe policy for the specified firewall policy.
firewall_policy_arncorestringThe Amazon Resource Name (ARN) of the firewall policy. The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.
firewall_policy_change_protectioncoreboolA setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to <code>TRUE</code>.
firewall_policy_responsecorejsonThe high-level properties of a firewall policy. This, along with the <a>FirewallPolicy</a>, define the policy. You can retrieve all objects for a firewall policy by calling <a>DescribeFirewallPolicy</a>.
firewall_statuscorejsonDetailed information about the current status of a <a>Firewall</a>. You can retrieve this for a firewall by calling <a>DescribeFirewall</a> and providing the firewall name and ARN.
logging_configurationcorejson
subnet_change_protectioncoreboolA setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to <code>TRUE</code>.
subnet_mappingscorejsonThe public subnets that Network Firewall is using for the firewall. Each subnet must belong to a different Availability Zone.
tagscorehstore
update_tokencorestringA token used for optimistic locking. Network Firewall returns a token to your requests that access the firewall policy. The token marks the state of the policy resource at the time of the request. To make changes to the policy, you provide the token in your request. Network Firewall uses the token to ensure that the policy hasn't changed since you last retrieved it. If it has changed, the operation fails with an <code>InvalidTokenException</code>. If this happens, retrieve the firewall policy again to get a current copy of it with current token. Reapply your changes as needed, then try the operation again using the new token.
vpc_idcorestringThe unique identifier of the VPC where the firewall is in use.