Network Firewall rule variable definition configuration.
Use this configuration to define rule variable definitions for Network Firewall.
Rule variables can be used in Suricata-compatible and domain list rule definitions.
They are not supported in stateful rule IP header definitions.
NetworkConfig / CentralNetworkServicesConfig / NfwConfig / NfwRuleGroupConfig / NfwRuleGroupRuleConfig / NfwRuleVariableConfig / NfwRuleVariableDefinitionConfig
Network Firewall rule variable definition configuration. Use this configuration to define rule variable definitions for Network Firewall. Rule variables can be used in Suricata-compatible and domain list rule definitions. They are not supported in stateful rule IP header definitions.
See
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-rulevariables.html
Example