Amazon Network Firewall website screenshot

Amazon Network Firewall

AWS Network Firewall is a stateful, managed, network firewall and intrusion detection and prevention service for your virtual private cloud (VPC). It enables you to filter traffic at the perimeter of your VPC with a flexible rules engine with support for thousands of custom rules.

1 APIs 0 Features
FirewallIntrusion DetectionNetwork SecurityVPC

APIs

AWS Network Firewall API

The AWS Network Firewall API provides programmatic access to create and manage firewalls, firewall policies, rule groups, and TLS inspection configurations for network traffic f...

Collections

Pricing Plans

Rate Limits

FinOps

Semantic Vocabularies

Amazon Network Firewall Openapi Context

170 classes · 147 properties

JSON-LD

API Governance Rules

Amazon Network Firewall API Rules

21 rules · 10 errors 10 warnings 1 info

SPECTRAL

JSON Structure

Openapi Action Definition Structure

1 properties

JSON STRUCTURE

Openapi Action Name Structure

0 properties

JSON STRUCTURE

Openapi Address Definition Structure

0 properties

JSON STRUCTURE

Openapi Address Structure

1 properties

JSON STRUCTURE

Openapi Addresses Structure

0 properties

JSON STRUCTURE

Openapi Associate Subnets Request Structure

4 properties

JSON STRUCTURE

Openapi Associate Subnets Response Structure

4 properties

JSON STRUCTURE

Openapi Attachment Status Structure

0 properties

JSON STRUCTURE

Openapi Attachment Structure

4 properties

JSON STRUCTURE

Openapi Availability Zone Structure

0 properties

JSON STRUCTURE

Openapi Az Subnet Structure

0 properties

JSON STRUCTURE

Openapi Az Subnets Structure

0 properties

JSON STRUCTURE

Openapi Boolean Structure

0 properties

JSON STRUCTURE

Openapi Capacity Usage Summary Structure

1 properties

JSON STRUCTURE

Openapi Certificates Structure

0 properties

JSON STRUCTURE

Openapi Cidr Count Structure

0 properties

JSON STRUCTURE

Openapi Cidr Summary Structure

3 properties

JSON STRUCTURE

Openapi Collection Member String Structure

0 properties

JSON STRUCTURE

Openapi Configuration Sync State Structure

0 properties

JSON STRUCTURE

Openapi Create Firewall Request Structure

10 properties

JSON STRUCTURE

Openapi Create Firewall Response Structure

2 properties

JSON STRUCTURE

Openapi Create Rule Group Request Structure

10 properties

JSON STRUCTURE

Openapi Create Rule Group Response Structure

2 properties

JSON STRUCTURE

Openapi Custom Action Structure

2 properties

JSON STRUCTURE

Openapi Custom Actions Structure

0 properties

JSON STRUCTURE

Openapi Delete Firewall Request Structure

2 properties

JSON STRUCTURE

Openapi Delete Firewall Response Structure

2 properties

JSON STRUCTURE

Openapi Delete Rule Group Request Structure

3 properties

JSON STRUCTURE

Openapi Delete Rule Group Response Structure

1 properties

JSON STRUCTURE

Openapi Describe Firewall Request Structure

2 properties

JSON STRUCTURE

Openapi Describe Firewall Response Structure

3 properties

JSON STRUCTURE

Openapi Describe Rule Group Request Structure

3 properties

JSON STRUCTURE

Openapi Description Structure

0 properties

JSON STRUCTURE

Openapi Destination Structure

0 properties

JSON STRUCTURE

Openapi Dimension Structure

1 properties

JSON STRUCTURE

Openapi Dimension Value Structure

0 properties

JSON STRUCTURE

Openapi Dimensions Structure

0 properties

JSON STRUCTURE

Openapi Encryption Configuration Structure

2 properties

JSON STRUCTURE

Openapi Encryption Type Structure

0 properties

JSON STRUCTURE

Openapi Endpoint Id Structure

0 properties

JSON STRUCTURE

Openapi Firewall Metadata Structure

2 properties

JSON STRUCTURE

Openapi Firewall Policies Structure

0 properties

JSON STRUCTURE

Openapi Firewall Policy Metadata Structure

2 properties

JSON STRUCTURE

Openapi Firewall Policy Response Structure

11 properties

JSON STRUCTURE

Openapi Firewall Policy Structure

8 properties

JSON STRUCTURE

Openapi Firewall Status Structure

4 properties

JSON STRUCTURE

Openapi Firewall Status Value Structure

0 properties

JSON STRUCTURE

Openapi Firewall Structure

12 properties

JSON STRUCTURE

Openapi Firewalls Structure

0 properties

JSON STRUCTURE

Openapi Flags Structure

0 properties

JSON STRUCTURE

Openapi Generated Rules Type Structure

0 properties

JSON STRUCTURE

Openapi Hash Map Key Structure

0 properties

JSON STRUCTURE

Openapi Hash Map Value Structure

0 properties

JSON STRUCTURE

Openapi Header Structure

6 properties

JSON STRUCTURE

Openapi Internal Server Error Structure

0 properties

JSON STRUCTURE

Openapi Invalid Operation Exception Structure

0 properties

JSON STRUCTURE

Openapi Invalid Request Exception Structure

0 properties

JSON STRUCTURE

Openapi Invalid Token Exception Structure

0 properties

JSON STRUCTURE

Openapi Ip Address Type Structure

0 properties

JSON STRUCTURE

Openapi Ip Set Arn Structure

0 properties

JSON STRUCTURE

Openapi Ip Set Metadata Map Structure

0 properties

JSON STRUCTURE

Openapi Ip Set Metadata Structure

1 properties

JSON STRUCTURE

Openapi Ip Set Reference Map Structure

0 properties

JSON STRUCTURE

Openapi Ip Set Reference Name Structure

0 properties

JSON STRUCTURE

Openapi Ip Set Reference Structure

1 properties

JSON STRUCTURE

Openapi Ip Set Structure

1 properties

JSON STRUCTURE

Openapi Ip Sets Structure

0 properties

JSON STRUCTURE

Openapi Key Id Structure

0 properties

JSON STRUCTURE

Openapi Keyword Structure

0 properties

JSON STRUCTURE

Openapi Last Update Time Structure

0 properties

JSON STRUCTURE

Openapi Limit Exceeded Exception Structure

0 properties

JSON STRUCTURE

Openapi List Firewalls Request Structure

3 properties

JSON STRUCTURE

Openapi List Firewalls Response Structure

2 properties

JSON STRUCTURE

Openapi List Rule Groups Request Structure

5 properties

JSON STRUCTURE

Openapi List Rule Groups Response Structure

2 properties

JSON STRUCTURE

Openapi Log Destination Config Structure

3 properties

JSON STRUCTURE

Openapi Log Destination Configs Structure

0 properties

JSON STRUCTURE

Openapi Log Destination Map Structure

0 properties

JSON STRUCTURE

Openapi Log Destination Type Structure

0 properties

JSON STRUCTURE

Openapi Log Type Structure

0 properties

JSON STRUCTURE

Openapi Logging Configuration Structure

1 properties

JSON STRUCTURE

Openapi Match Attributes Structure

6 properties

JSON STRUCTURE

Openapi Number Of Associations Structure

0 properties

JSON STRUCTURE

Openapi Override Action Structure

0 properties

JSON STRUCTURE

Openapi Pagination Max Results Structure

0 properties

JSON STRUCTURE

Openapi Pagination Token Structure

0 properties

JSON STRUCTURE

Openapi Per Object Status Structure

2 properties

JSON STRUCTURE

Openapi Per Object Sync Status Structure

0 properties

JSON STRUCTURE

Openapi Policy String Structure

0 properties

JSON STRUCTURE

Openapi Port Range Bound Structure

0 properties

JSON STRUCTURE

Openapi Port Range Structure

2 properties

JSON STRUCTURE

Openapi Port Ranges Structure

0 properties

JSON STRUCTURE

Openapi Port Set Structure

1 properties

JSON STRUCTURE

Openapi Port Sets Structure

0 properties

JSON STRUCTURE

Openapi Port Structure

0 properties

JSON STRUCTURE

Openapi Priority Structure

0 properties

JSON STRUCTURE

Openapi Protocol Number Structure

0 properties

JSON STRUCTURE

Openapi Protocol Numbers Structure

0 properties

JSON STRUCTURE

Openapi Publish Metric Action Structure

1 properties

JSON STRUCTURE

Openapi Put Resource Policy Request Structure

2 properties

JSON STRUCTURE

Openapi Reference Sets Structure

1 properties

JSON STRUCTURE

Openapi Resource Arn Structure

0 properties

JSON STRUCTURE

Openapi Resource Id Structure

0 properties

JSON STRUCTURE

Openapi Resource Managed Status Structure

0 properties

JSON STRUCTURE

Openapi Resource Managed Type Structure

0 properties

JSON STRUCTURE

Openapi Resource Name Structure

0 properties

JSON STRUCTURE

Openapi Resource Status Structure

0 properties

JSON STRUCTURE

Openapi Rule Capacity Structure

0 properties

JSON STRUCTURE

Openapi Rule Definition Structure

2 properties

JSON STRUCTURE

Openapi Rule Group Metadata Structure

2 properties

JSON STRUCTURE

Openapi Rule Group Response Structure

14 properties

JSON STRUCTURE

Openapi Rule Group Structure

4 properties

JSON STRUCTURE

Openapi Rule Group Type Structure

0 properties

JSON STRUCTURE

Openapi Rule Groups Structure

0 properties

JSON STRUCTURE

Openapi Rule Option Structure

2 properties

JSON STRUCTURE

Openapi Rule Options Structure

0 properties

JSON STRUCTURE

Openapi Rule Order Structure

0 properties

JSON STRUCTURE

Openapi Rule Targets Structure

0 properties

JSON STRUCTURE

Openapi Rule Variable Name Structure

0 properties

JSON STRUCTURE

Openapi Rule Variables Structure

2 properties

JSON STRUCTURE

Openapi Rules Source List Structure

3 properties

JSON STRUCTURE

Openapi Rules Source Structure

4 properties

JSON STRUCTURE

Openapi Rules String Structure

0 properties

JSON STRUCTURE

Openapi Server Certificate Scope Structure

5 properties

JSON STRUCTURE

Openapi Server Certificate Scopes Structure

0 properties

JSON STRUCTURE

Openapi Server Certificate Structure

1 properties

JSON STRUCTURE

Openapi Server Certificates Structure

0 properties

JSON STRUCTURE

Openapi Setting Structure

0 properties

JSON STRUCTURE

Openapi Settings Structure

0 properties

JSON STRUCTURE

Openapi Source Metadata Structure

2 properties

JSON STRUCTURE

Openapi Source Structure

0 properties

JSON STRUCTURE

Openapi Stateful Action Structure

0 properties

JSON STRUCTURE

Openapi Stateful Actions Structure

0 properties

JSON STRUCTURE

Openapi Stateful Engine Options Structure

2 properties

JSON STRUCTURE

Openapi Stateful Rule Direction Structure

0 properties

JSON STRUCTURE

Openapi Stateful Rule Options Structure

1 properties

JSON STRUCTURE

Openapi Stateful Rule Protocol Structure

0 properties

JSON STRUCTURE

Openapi Stateful Rule Structure

3 properties

JSON STRUCTURE

Openapi Stateful Rules Structure

0 properties

JSON STRUCTURE

Openapi Stateless Actions Structure

0 properties

JSON STRUCTURE

Openapi Stateless Rule Structure

2 properties

JSON STRUCTURE

Openapi Stateless Rules Structure

0 properties

JSON STRUCTURE

Openapi Status Message Structure

0 properties

JSON STRUCTURE

Openapi Status Reason Structure

0 properties

JSON STRUCTURE

Openapi Stream Exception Policy Structure

0 properties

JSON STRUCTURE

Openapi Subnet Mapping Structure

2 properties

JSON STRUCTURE

Openapi Subnet Mappings Structure

0 properties

JSON STRUCTURE

Openapi Sync State Config Structure

0 properties

JSON STRUCTURE

Openapi Sync State Structure

2 properties

JSON STRUCTURE

Openapi Sync States Structure

0 properties

JSON STRUCTURE

Openapi Tag Key List Structure

0 properties

JSON STRUCTURE

Openapi Tag Key Structure

0 properties

JSON STRUCTURE

Openapi Tag List Structure

0 properties

JSON STRUCTURE

Openapi Tag Resource Request Structure

2 properties

JSON STRUCTURE

Openapi Tag Resource Response Structure

0 properties

JSON STRUCTURE

Openapi Tag Structure

2 properties

JSON STRUCTURE

Openapi Tag Value Structure

0 properties

JSON STRUCTURE

Openapi Tags Pagination Max Results Structure

0 properties

JSON STRUCTURE

Openapi Target Type Structure

0 properties

JSON STRUCTURE

Openapi Target Types Structure

0 properties

JSON STRUCTURE

Openapi Tcp Flag Field Structure

2 properties

JSON STRUCTURE

Openapi Tcp Flag Structure

0 properties

JSON STRUCTURE

Openapi Tcp Flags Structure

0 properties

JSON STRUCTURE

Openapi Throttling Exception Structure

0 properties

JSON STRUCTURE

Openapi Tls Certificate Data Structure

4 properties

JSON STRUCTURE

Openapi Untag Resource Request Structure

2 properties

JSON STRUCTURE

Openapi Untag Resource Response Structure

0 properties

JSON STRUCTURE

Openapi Update Rule Group Request Structure

10 properties

JSON STRUCTURE

Openapi Update Rule Group Response Structure

2 properties

JSON STRUCTURE

Openapi Update Token Structure

0 properties

JSON STRUCTURE

Openapi Variable Definition List Structure

0 properties

JSON STRUCTURE

Openapi Variable Definition Structure

0 properties

JSON STRUCTURE

Openapi Vpc Id Structure

0 properties

JSON STRUCTURE

Openapi Vpc Ids Structure

0 properties

JSON STRUCTURE

Example Payloads

Openapi Address Example

1 fields

EXAMPLE

Openapi Attachment Example

4 fields

EXAMPLE

Openapi Cidr Summary Example

3 fields

EXAMPLE

Openapi Dimension Example

1 fields

EXAMPLE

Openapi Firewall Example

12 fields

EXAMPLE

Openapi Header Example

6 fields

EXAMPLE

Openapi Ip Set Example

1 fields

EXAMPLE

Openapi Port Range Example

2 fields

EXAMPLE

Openapi Port Set Example

1 fields

EXAMPLE

Openapi Rule Group Example

4 fields

EXAMPLE

Openapi Rule Option Example

2 fields

EXAMPLE

Openapi Rules Source Example

4 fields

EXAMPLE

Openapi Sync State Example

2 fields

EXAMPLE

Openapi Tag Example

2 fields

EXAMPLE

Resources

🌐
Portal
Portal
🔗
Website
Website
🔗
Documentation
Documentation
📜
TermsOfService
TermsOfService
📜
PrivacyPolicy
PrivacyPolicy
💬
Support
Support
📰
Blog
Blog
👥
GitHubOrganization
GitHubOrganization
🌐
Console
Console
📝
Signup
Signup
🔗
Login
Login
🟢
StatusPage
StatusPage
🔗
Contact
Contact
🔗
SpectralRules
SpectralRules
🔗
Vocabulary
Vocabulary
🔗
JSONLD
JSONLD
🔗
Openapi Action Definition
JSONSchema
🔗
Openapi Action Name
JSONSchema
🔗
Openapi Address Definition
JSONSchema
🔗
Openapi Address
JSONSchema
🔗
Openapi Addresses
JSONSchema

Sources

Raw ↑
opencollection: 1.0.0
info:
  name: AWS Network Firewall
  version: Wed Nov 11 2020 19:00:00 GMT-0500 (Eastern Standard Time)
request:
  auth:
    type: apikey
    key: Authorization
    value: '{{Authorization}}'
    placement: header
items:
- info:
    name: Amazon Network Firewall Associate Firewall Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.AssociateFirewallPolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Associates a <a>FirewallPolicy</a> to a <a>Firewall</a>. </p> <p>A firewall policy defines how to monitor and manage
    your VPC network traffic, using a collection of inspection rule groups and other settings. Each firewall requires one
    firewall policy association, and you can use the same firewall policy for multiple firewalls. </p>
- info:
    name: Amazon Network Firewall Associate Subnets
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.AssociateSubnets
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Associates the specified subnets in the Amazon VPC to the firewall. You can specify one subnet for each of the
    Availability Zones that the VPC spans. </p> <p>This request creates an Network Firewall firewall endpoint in each of the
    subnets. To enable the firewall's protections, you must also modify the VPC's route tables for each subnet's Availability
    Zone, to redirect the traffic that's coming into and going out of the zone through the firewall endpoint. </p>
- info:
    name: Amazon Network Firewall Create Firewall
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.CreateFirewall
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Creates an Network Firewall <a>Firewall</a> and accompanying <a>FirewallStatus</a> for a VPC. </p> <p>The firewall
    defines the configuration settings for an Network Firewall firewall. The settings that you can define at creation include
    the firewall policy, the subnets in your VPC to use for the firewall endpoints, and any tags that are attached to the
    firewall Amazon Web Services resource. </p> <p>After you create a firewall, you can provide additional settings, like
    the logging configuratio
- info:
    name: Amazon Network Firewall Create Firewall Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.CreateFirewallPolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Creates the firewall policy for the firewall according to the specifications. </p> <p>An Network Firewall firewall
    policy defines the behavior of a firewall, in a collection of stateless and stateful rule groups and other settings. You
    can use one firewall policy for multiple firewalls. </p>
- info:
    name: Amazon Network Firewall Create Rule Group
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.CreateRuleGroup
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Creates the specified stateless or stateful rule group, which includes the rules for network traffic inspection,
    a capacity setting, and tags. </p> <p>You provide your rule group specification in your request using either <code>RuleGroup</code>
    or <code>Rules</code>.</p>
- info:
    name: Amazon Network Firewall Create T L S Inspection Configuration
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.CreateTLSInspectionConfiguration
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Creates an Network Firewall TLS inspection configuration. A TLS inspection configuration contains the Certificate
    Manager certificate references that Network Firewall uses to decrypt and re-encrypt inbound traffic.</p> <p>After you
    create a TLS inspection configuration, you associate it with a firewall policy.</p> <p>To update the settings for a TLS
    inspection configuration, use <a>UpdateTLSInspectionConfiguration</a>.</p> <p>To manage a TLS inspection configuration's
    tags, use the standard A
- info:
    name: Amazon Network Firewall Delete Firewall
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DeleteFirewall
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: '<p>Deletes the specified <a>Firewall</a> and its <a>FirewallStatus</a>. This operation requires the firewall''s <code>DeleteProtection</code>
    flag to be <code>FALSE</code>. You can''t revert this operation. </p> <p>You can check whether a firewall is in use by
    reviewing the route tables for the Availability Zones where you have firewall subnet mappings. Retrieve the subnet mappings
    by calling <a>DescribeFirewall</a>. You define and update the route tables through Amazon VPC. As needed, update the '
- info:
    name: Amazon Network Firewall Delete Firewall Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DeleteFirewallPolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Deletes the specified <a>FirewallPolicy</a>. '
- info:
    name: Amazon Network Firewall Delete Resource Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DeleteResourcePolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Deletes a resource policy that you created in a <a>PutResourcePolicy</a> request. '
- info:
    name: Amazon Network Firewall Delete Rule Group
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DeleteRuleGroup
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Deletes the specified <a>RuleGroup</a>. '
- info:
    name: Amazon Network Firewall Delete T L S Inspection Configuration
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DeleteTLSInspectionConfiguration
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: Deletes the specified <a>TLSInspectionConfiguration</a>.
- info:
    name: Amazon Network Firewall Describe Firewall
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DescribeFirewall
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Returns the data objects for the specified firewall. '
- info:
    name: Amazon Network Firewall Describe Firewall Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DescribeFirewallPolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Returns the data objects for the specified firewall policy. '
- info:
    name: Amazon Network Firewall Describe Logging Configuration
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DescribeLoggingConfiguration
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Returns the logging configuration for the specified firewall. '
- info:
    name: Amazon Network Firewall Describe Resource Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DescribeResourcePolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Retrieves a resource policy that you created in a <a>PutResourcePolicy</a> request. '
- info:
    name: Amazon Network Firewall Describe Rule Group
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DescribeRuleGroup
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Returns the data objects for the specified rule group. '
- info:
    name: Amazon Network Firewall Describe Rule Group Metadata
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DescribeRuleGroupMetadata
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'High-level information about a rule group, returned by operations like create and describe. You can use the information
    provided in the metadata to retrieve and manage a rule group. You can retrieve all objects for a rule group by calling
    <a>DescribeRuleGroup</a>. '
- info:
    name: Amazon Network Firewall Describe T L S Inspection Configuration
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DescribeTLSInspectionConfiguration
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: Returns the data objects for the specified TLS inspection configuration.
- info:
    name: Amazon Network Firewall Disassociate Subnets
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.DisassociateSubnets
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Removes the specified subnet associations from the firewall. This removes the firewall endpoints from the subnets
    and removes any network filtering protections that the endpoints were providing. '
- info:
    name: Amazon Network Firewall List Firewall Policies
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.ListFirewallPolicies
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    params:
    - name: MaxResults
      value: ''
      type: query
      description: Pagination limit
    - name: NextToken
      value: ''
      type: query
      description: Pagination token
    body:
      type: json
      data: '{}'
  docs: 'Retrieves the metadata for the firewall policies that you have defined. Depending on your setting for max results
    and the number of firewall policies, a single call might not return the full list. '
- info:
    name: Amazon Network Firewall List Firewalls
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.ListFirewalls
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    params:
    - name: MaxResults
      value: ''
      type: query
      description: Pagination limit
    - name: NextToken
      value: ''
      type: query
      description: Pagination token
    body:
      type: json
      data: '{}'
  docs: <p>Retrieves the metadata for the firewalls that you have defined. If you provide VPC identifiers in your request,
    this returns only the firewalls for those VPCs.</p> <p>Depending on your setting for max results and the number of firewalls,
    a single call might not return the full list. </p>
- info:
    name: Amazon Network Firewall List Rule Groups
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.ListRuleGroups
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    params:
    - name: MaxResults
      value: ''
      type: query
      description: Pagination limit
    - name: NextToken
      value: ''
      type: query
      description: Pagination token
    body:
      type: json
      data: '{}'
  docs: 'Retrieves the metadata for the rule groups that you have defined. Depending on your setting for max results and the
    number of rule groups, a single call might not return the full list. '
- info:
    name: Amazon Network Firewall List T L S Inspection Configurations
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.ListTLSInspectionConfigurations
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    params:
    - name: MaxResults
      value: ''
      type: query
      description: Pagination limit
    - name: NextToken
      value: ''
      type: query
      description: Pagination token
    body:
      type: json
      data: '{}'
  docs: Retrieves the metadata for the TLS inspection configurations that you have defined. Depending on your setting for
    max results and the number of TLS inspection configurations, a single call might not return the full list.
- info:
    name: Amazon Network Firewall List Tags for Resource
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.ListTagsForResource
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    params:
    - name: MaxResults
      value: ''
      type: query
      description: Pagination limit
    - name: NextToken
      value: ''
      type: query
      description: Pagination token
    body:
      type: json
      data: '{}'
  docs: '<p>Retrieves the tags associated with the specified resource. Tags are key:value pairs that you can use to categorize
    and manage your resources, for purposes like billing. For example, you might set the tag key to "customer" and the value
    to the customer name or ID. You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags
    for a resource.</p> <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls,
    firewall policies, '
- info:
    name: Amazon Network Firewall Put Resource Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.PutResourcePolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Creates or updates an IAM policy for your rule group or firewall policy. Use this to share rule groups and firewall
    policies between accounts. This operation works in conjunction with the Amazon Web Services Resource Access Manager (RAM)
    service to manage resource sharing for Network Firewall. </p> <p>Use this operation to create or update a resource policy
    for your rule group or firewall policy. In the policy, you specify the accounts that you want to share the resource with
    and the operatio
- info:
    name: Amazon Network Firewall Tag Resource
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.TagResource
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: '<p>Adds the specified tags to the specified resource. Tags are key:value pairs that you can use to categorize and
    manage your resources, for purposes like billing. For example, you might set the tag key to "customer" and the value to
    the customer name or ID. You can specify one or more tags to add to each Amazon Web Services resource, up to 50 tags for
    a resource.</p> <p>You can tag the Amazon Web Services resources that you manage through Network Firewall: firewalls,
    firewall policies, and rule'
- info:
    name: Amazon Network Firewall Untag Resource
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UntagResource
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: '<p>Removes the tags with the specified keys from the specified resource. Tags are key:value pairs that you can use
    to categorize and manage your resources, for purposes like billing. For example, you might set the tag key to "customer"
    and the value to the customer name or ID. You can specify one or more tags to add to each Amazon Web Services resource,
    up to 50 tags for a resource.</p> <p>You can manage tags for the Amazon Web Services resources that you manage through
    Network Firewall: firewal'
- info:
    name: Amazon Network Firewall Update Firewall Delete Protection
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateFirewallDeleteProtection
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Modifies the flag, <code>DeleteProtection</code>, which indicates whether it is possible to delete the firewall.
    If the flag is set to <code>TRUE</code>, the firewall is protected against deletion. This setting helps protect against
    accidentally deleting a firewall that''s in use. '
- info:
    name: Amazon Network Firewall Update Firewall Description
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateFirewallDescription
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: 'Modifies the description for the specified firewall. Use the description to help you identify the firewall when you''re
    working with it. '
- info:
    name: Amazon Network Firewall Update Firewall Encryption Configuration
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateFirewallEncryptionConfiguration
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: A complex type that contains settings for encryption of your firewall resources.
- info:
    name: Amazon Network Firewall Update Firewall Policy
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateFirewallPolicy
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: Updates the properties of the specified firewall policy.
- info:
    name: Amazon Network Firewall Update Firewall Policy Change Protection
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateFirewallPolicyChangeProtection
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: Modifies the flag, <code>ChangeProtection</code>, which indicates whether it is possible to change the firewall. If
    the flag is set to <code>TRUE</code>, the firewall is protected from changes. This setting helps protect against accidentally
    changing a firewall that's in use.
- info:
    name: Amazon Network Firewall Update Logging Configuration
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateLoggingConfiguration
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Sets the logging configuration for the specified firewall. </p> <p>To change the logging configuration, retrieve
    the <a>LoggingConfiguration</a> by calling <a>DescribeLoggingConfiguration</a>, then change it and provide the modified
    object to this update call. You must change the logging configuration one <a>LogDestinationConfig</a> at a time inside
    the retrieved <a>LoggingConfiguration</a> object. </p> <p>You can perform only one of the following actions in any call
    to <code>UpdateLoggingCon
- info:
    name: Amazon Network Firewall Update Rule Group
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateRuleGroup
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
      type: json
      data: '{}'
  docs: <p>Updates the rule settings for the specified rule group. You use a rule group by reference in one or more firewall
    policies. When you modify a rule group, you modify all firewall policies that use the rule group. </p> <p>To update a
    rule group, first call <a>DescribeRuleGroup</a> to retrieve the current <a>RuleGroup</a> object, update the object as
    needed, and then provide the updated object to this call. </p>
- info:
    name: Amazon Network Firewall Update Subnet Change Protection
    type: http
  http:
    method: POST
    url: http://network-firewall.{region}.amazonaws.com/#X-Amz-Target=NetworkFirewall_20201112.UpdateSubnetChangeProtection
    headers:
    - name: X-Amz-Content-Sha256
      value: ''
    - name: X-Amz-Date
      value: ''
    - name: X-Amz-Algorithm
      value: ''
    - name: X-Amz-Credential
      value: ''
    - name: X-Amz-Security-Token
      value: ''
    - name: X-Amz-Signature
      value: ''
    - name: X-Amz-SignedHeaders
      value: ''
    - name: X-Amz-Target
      value: ''
    body:
  

# --- truncated at 32 KB (33 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/amazon-network-firewall/refs/heads/main/apis.yml