NetworkConfig / CentralNetworkServicesConfig / NfwConfig / NfwRuleGroupConfig / NfwRuleGroupRuleConfig / NfwRuleSourceConfig / NfwRuleSourceStatefulRuleConfig / NfwRuleSourceStatefulRuleOptionsConfig

Network Firewall stateful rule options configuration. Use this configuration to specify keywords and setting metadata for stateful rules.

Keywords and settings can be used to define specific metadata for stateful firewall rules that are defined using the NfwRuleSourceStatefulRuleHeaderConfig. For Suricata-compatible rules, include the rule options in the Suricata string.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-ruleoption.html.

The following example creates a sid keyword with a value of 100:

- keyword: sid
settings: ['100']
interface INfwRuleSourceStatefulRuleOptionsConfig {
    keyword: string;
    settings?: string[];
}

Properties

Properties

keyword: string

A Suricata-compatible keyword.

settings?: string[]

An array of values for the keyword.