networkfirewall_policy

manage AWS Network Firewall policies

Collection: community.aws

Full Name: community.aws.networkfirewall_policy

Synopsis

manage AWS Network Firewall policies

Parameters

Name	Type	Default
access_key	str
arn	str
aws_ca_bundle	path
aws_config	dict
debug_botocore_endpoint_logs	bool	`false`
description	str
endpoint_url	str
name	str
profile	str
purge_stateless_custom_actions	bool	`true`
purge_tags	bool	`true`
region	str
secret_key	str
session_token	str
state	str	`present`
stateful_default_actions	list
stateful_rule_groups	list
stateful_rule_order	str
stateless_custom_actions	list
stateless_default_actions	list
stateless_fragment_default_actions	list
stateless_rule_groups	list
tags	dict
validate_certs	bool	`true`
wait	bool	`true`
wait_timeout	int

Example

yaml

# Create an AWS Network Firewall Policy with default rule order
- name: manage AWS Network Firewall policies
  community.aws.networkfirewall_policy:
    stateful_rule_order: 'default'
    state: present
    name: 'ExamplePolicy'

# Create an AWS Network Firewall Policy with strict rule order
- name: manage AWS Network Firewall policies
  community.aws.networkfirewall_policy:
    stateful_rule_order: 'strict'
    state: present
    name: 'ExampleStrictPolicy'

# Create an AWS Network Firewall Policy that defaults to dropping all packets
- name: manage AWS Network Firewall policies
  community.aws.networkfirewall_policy:
    stateful_rule_order: 'strict'
    state: present
    name: 'ExampleDropPolicy'
    stateful_default_actions:
        - 'aws:drop_strict'
    stateful_rule_groups:
        - 'ExampleStrictRuleGroup'
        - 'arn:aws:network-firewall:us-east-1:aws-managed:stateful-rulegroup/BotNetCommandAndControlDomainsStrictOrder'

# Delete an AWS Network Firewall Policy
- name: manage AWS Network Firewall policies
  community.aws.networkfirewall_policy:
    state: absent
    name: 'ExampleDropPolicy'