---
title: Network Firewall Firewall
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Network Firewall Firewall
---

# Network Firewall Firewall

This table represents the Network Firewall Firewall resource from Amazon Web Services.

```
aws.network_firewall_firewall
```

## Fields

| Title                             | ID   | Type       | Data Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | Description |
| --------------------------------- | ---- | ---------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                              | core | string     |
| account_id                        | core | string     |
| delete_protection                 | core | bool       | A flag indicating whether it is possible to delete the firewall. A setting of <code>TRUE</code> indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to <code>TRUE</code>.                                                                                                                                                                                                                                                                                                                     |
| description                       | core | string     | A description of the firewall.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| encryption_configuration          | core | json       | A complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| firewall_arn                      | core | string     | The Amazon Resource Name (ARN) of the firewall.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| firewall_id                       | core | string     | The unique identifier for the firewall.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| firewall_name                     | core | string     | The descriptive name of the firewall. You can't change the name of a firewall after you create it.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| firewall_policy                   | core | json       | The policy for the specified firewall policy.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| firewall_policy_arn               | core | string     | The Amazon Resource Name (ARN) of the firewall policy. The relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.                                                                                                                                                                                                                                                                                                                                                                                                           |
| firewall_policy_change_protection | core | bool       | A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to <code>TRUE</code>.                                                                                                                                                                                                                                                                                                                                        |
| firewall_policy_response          | core | json       | The high-level properties of a firewall policy. This, along with the <a>FirewallPolicy</a>, define the policy. You can retrieve all objects for a firewall policy by calling <a>DescribeFirewallPolicy</a>.                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| firewall_status                   | core | json       | Detailed information about the current status of a <a>Firewall</a>. You can retrieve this for a firewall by calling <a>DescribeFirewall</a> and providing the firewall name and ARN.                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| logging_configuration             | core | json       |
| subnet_change_protection          | core | bool       | A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to <code>TRUE</code>.                                                                                                                                                                                                                                                                                                                                             |
| subnet_mappings                   | core | json       | The public subnets that Network Firewall is using for the firewall. Each subnet must belong to a different Availability Zone.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| tags                              | core | hstore_csv |
| update_token                      | core | string     | A token used for optimistic locking. Network Firewall returns a token to your requests that access the firewall policy. The token marks the state of the policy resource at the time of the request. To make changes to the policy, you provide the token in your request. Network Firewall uses the token to ensure that the policy hasn't changed since you last retrieved it. If it has changed, the operation fails with an <code>InvalidTokenException</code>. If this happens, retrieve the firewall policy again to get a current copy of it with current token. Reapply your changes as needed, then try the operation again using the new token. |
| vpc_id                            | core | string     | The unique identifier of the VPC where the firewall is in use.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |