Detailed information about the current status of a Firewall. You can retrieve this for a firewall by calling DescribeFirewall and providing the firewall name and ARN.
Type: objectProperties: 4Required: 2
FirewallIntrusion DetectionNetwork SecurityVPC
FirewallStatus is a JSON Structure definition published by Amazon Network Firewall, describing 4 properties, of which 2 are required. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.
{
"$schema": "https://json-structure.org/meta/core/v0/#",
"$id": "https://raw.githubusercontent.com/api-evangelist/amazon-network-firewall/refs/heads/main/json-structure/openapi-firewall-status-structure.json",
"name": "FirewallStatus",
"description": "Detailed information about the current status of a <a>Firewall</a>. You can retrieve this for a firewall by calling <a>DescribeFirewall</a> and providing the firewall name and ARN.",
"type": "object",
"properties": {
"Status": {
"allOf": [
{
"$ref": "#/components/schemas/FirewallStatusValue"
},
{
"description": "The readiness of the configured firewall to handle network traffic across all of the Availability Zones where you've configured it. This setting is <code>READY</code> only when the <code>ConfigurationSyncStateSummary</code> value is <code>IN_SYNC</code> and the <code>Attachment</code> <code>Status</code> values for all of the configured subnets are <code>READY</code>. "
}
]
},
"ConfigurationSyncStateSummary": {
"allOf": [
{
"$ref": "#/components/schemas/ConfigurationSyncState"
},
{
"description": "<p>The configuration sync state for the firewall. This summarizes the sync states reported in the <code>Config</code> settings for all of the Availability Zones where you have configured the firewall. </p> <p>When you create a firewall or update its configuration, for example by adding a rule group to its firewall policy, Network Firewall distributes the configuration changes to all zones where the firewall is in use. This summary indicates whether the configuration changes have been applied everywhere. </p> <p>This status must be <code>IN_SYNC</code> for the firewall to be ready for use, but it doesn't indicate that the firewall is ready. The <code>Status</code> setting indicates firewall readiness.</p>"
}
]
},
"SyncStates": {
"allOf": [
{
"$ref": "#/components/schemas/SyncStates"
},
{
"description": "The subnets that you've configured for use by the Network Firewall firewall. This contains one array element per Availability Zone where you've configured a subnet. These objects provide details of the information that is summarized in the <code>ConfigurationSyncStateSummary</code> and <code>Status</code>, broken down by zone and configuration object. "
}
]
},
"CapacityUsageSummary": {
"allOf": [
{
"$ref": "#/components/schemas/CapacityUsageSummary"
},
{
"description": "Describes the capacity usage of the resources contained in a firewall's reference sets. Network Firewall calclulates the capacity usage by taking an aggregated count of all of the resources used by all of the reference sets in a firewall."
}
]
}
},
"required": [
"Status",
"ConfigurationSyncStateSummary"
]
}
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.