(Boto3) How can I call the VPC Route tables to return an indication that a Network Firewall is being used?

Question

I'm currently writing a config rule. I was able to write a config rule to see if a Network Firewall is attached to the VPC. I am not revieiwing the boto3 documentation here to determine if a networkfirewall is being used.

Is there a method or certain Filters I can call to determine if the subnet is going to a Network Firewall?

Answer

There's nothing that is going to directly indicate that a Network Firewall is being used. However, what you can do is get a list of Network Firewall endpoints that are deployed into the VPC; then check the route entries in each route table and see if the destination is one of those endpoints.

(Boto3) How can I call the VPC Route tables to return an indication that a Network Firewall is being used?

Contenido relevante