AWS Network Firewall

aws Firewallaws-network-firewall

Managed stateful firewall and intrusion prevention service that filters traffic at the VPC perimeter.

Provider: aws
Kind: Firewall
Category: Security
Official docs: https://docs.aws.amazon.com/network-firewall/latest/developerguide/what-is-aws-network-firewall.html

Properties · 4 set by this component

property	type	values	required	kind default	this component
customerManagedKey · component property	boolean	—	no	false	inherited
defaultAction	enum	allow \| deny	no	—	inherited
deploymentMode · component property	enum	source-preservation \| no-source-preservation	no	source-preservation	inherited
intrusionPrevention	boolean	—	no	—	▸ true
logging	boolean	—	no	—	▸ false
managed	boolean	—	no	false	▸ true
ruleCount	integer	—	no	—	inherited
ruleOrder · component property	enum	default-action-order \| strict-order	no	—	inherited
stateful	boolean	—	no	—	▸ true
tcpIdleTimeoutSeconds · component property	integer	—	no	350	inherited
tlsInspection · component property	boolean	—	no	false	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "network-firewall", component: "aws-network-firewall" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Network Firewall: managed stateful firewall and intrusion prevention service for a VPC, with
3# firewall endpoints per Availability Zone and Suricata-compatible stateful rules; it runs in
4# source-preservation mode by default ("What is AWS Network Firewall?"). Logging is opt-in, TLS
5# inspection is optional, resources are encrypted with AWS owned keys and the TCP idle timeout is
6# 350 seconds ("Firewall policy settings in AWS Network Firewall").
7schemaVersion: "1"
8type: "component"
9id: "aws-network-firewall"
10kind: "firewall"
11provider: "aws"
12docs: "https://docs.aws.amazon.com/network-firewall/latest/developerguide/what-is-aws-network-firewall.html"
13defaults:
14  managed: true
15  stateful: true
16  intrusionPrevention: true
17  logging: false
18properties:
19  deploymentMode:
20    type: "enum"
21    values: ["source-preservation", "no-source-preservation"]
22    default: "source-preservation"
23  ruleOrder:
24    type: "enum"
25    values: ["default-action-order", "strict-order"]
26  tlsInspection:
27    type: "boolean"
28    default: false
29  tcpIdleTimeoutSeconds:
30    type: "integer"
31    default: 350
32  customerManagedKey:
33    type: "boolean"
34    default: false

The same page as markdown, for an agent: /catalogue/components/aws-network-firewall.md