How to add managed stateful rule groups to network firewall with CloudFormation ?
Via the console, we can add managed stateful rule groups : how to achieve the same thing using a cloud formation template ?
For example :
| Priority | Name |
|---|---|
| 1 | AbusedLegitMalwareDomainsStrictOrder |
| 2 | BotNetCommandAndControlDomainsStrictOrder |
| 3 | AbusedLegitBotNetCommandAndControlDomainsStrictOrder |
| 4 | ThreatSignaturesBotnetStrictOrder |
| 5 | ThreatSignaturesBotnetWebStrictOrder |
The objective is also to have a strict order of priorities as indicated, as an example, in the table above.
Thank you in advance for your answers.
- Temas
- Administración y gobiernoDevOpsSeguridad, identidad y cumplimientoRedes y entrega de contenidoAWS Well-Architected Framework
- Idioma
- English
preguntada hace 4 años1,9 mil visualizaciones
- Más nuevo
- Más votos
- Más comentarios
Hello,
You can use AWS::NetworkFirewall::FirewallPolicy to add managed rule groups to your Network Firewall policies. Sub-Property StatefulRuleGroupReference can be used to set Priority for each managed rule group specified in property ResourceArn. To get the ARN of the AWS managed rule group, use list-rule-groups AWS CLI. See example for reference.
ResourceArns for Managed Rulegroups follow the pattern: "arn:aws:network-firewall:<region>:aws-managed:stateful-rulegroup/<rulegroup-name"
For example: "arn:aws:network-firewall:ap-southeast-2:aws-managed:stateful-rulegroup/ThreatSignaturesMalwareMobileActionOrder"
respondido hace 3 años
Hello,
Please follow the below link to add managed stateful rule groups to network firewall with CloudFormation: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#aws-resource-networkfirewall-rulegroup--examples
Contenido relevante
preguntada hace un año
preguntada hace 6 meses
preguntada hace 9 meses
preguntada hace 9 meses
- OFICIAL DE AWSActualizada hace 10 meses
Thank you for your answer, but it does not answer my question. The question is about the stateful rule groups managed by AWS, not the rules you create yourself.