NfwConfig | Landing Zone Accelerator on AWS

NetworkConfig / CentralNetworkServicesConfig / NfwConfig

Network Firewall configuration. Used to define Network Firewall configurations for the accelerator.

example

networkFirewall:
  firewalls:
    - name: accelerator-nfw
      description: Accelerator Firewall
      firewallPolicy: accelerator-nfw-policy
      subnets:
        - Subnet-A
        - Subnet-B
      vpc: Network-Inspection
      loggingConfiguration:
        - destination: s3
          type: ALERT
      tags: []
  policies:
    - name: accelerator-nfw-policy
      firewallPolicy:
        statelessDefaultActions: ['aws:forward_to_sfe']
        statelessFragmentDefaultActions: ['aws:forward_to_sfe']
        statefulRuleGroups:
          - name: accelerator-stateful-group
        statelessRuleGroups:
          - name: accelerator-stateless-group
            priority: 100
      regions:
        - us-east-1
      shareTargets:
        organizationalUnits:
          - Root
      tags: []
  rules:
    - name: accelerator-stateful-group
      regions:
        - us-east-1
      capacity: 100
      type: STATEFUL
      ruleGroup:
        rulesSource:
          rulesFile: path/to/rules.txt
      shareTargets:
        organizationalUnits:
          - Root
      tags: []