I'm currently writing a config rule. I was able to write a config rule to see if a Network Firewall is attached to the VPC. I am not revieiwing the boto3 documentation [here](https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/ec2.html#EC2.Client.describe_route_tables) to determine if a networkfirewall is being used. Is there a method or certain Filters I can call to determine if the subnet is going to a Network Firewall?

(Boto3) How can I call the VPC Route tables to return an indication that a Network Firewall is being used?

I'm currently writing a config rule. I was able to write a config rule to see if a Network Firewall is attached to the VPC. I am not revieiwing the boto3 documentation here to determine if a networkfirewall is being used.

Is there a method or certain Filters I can call to determine if the subnet is going to a Network Firewall?

Sujets

Réseaux et diffusion de contenu Sécurité, identité et conformité

Balises

Amazon VPC Pare-feu réseau AWS

Langue

English

rePost-User-8984971

demandé il y a 2 ans286 vues

1 réponse

Le plus récent
Le plus de votes
La plupart des commentaires

There's nothing that is going to directly indicate that a Network Firewall is being used. However, what you can do is get a list of Network Firewall endpoints that are deployed into the VPC; then check the route entries in each route table and see if the destination is one of those endpoints.

EXPERT

Brettski-AWS

répondu il y a 2 ans

EXPERT

Tushar_J

vérifié il y a 2 ans

rePost-User-8984971
il y a 2 ans
Do I use filter to get a list of the route entries?

The filters in boto3 docuemntation for describe_route tables?
Brettski-AWS EXPERT
il y a 2 ans
You may be able to filter on route.gateway-id.

Contenus pertinents

account is currently blocked and not recognized as a valid account
Yves Boah
demandé il y a un an
[ACTION REQUIRED] Update your TLS connections to 1.2 : quelles applications sont concernées ?
rePost-User-7550145
demandé il y a un an
Pourquoi ma facture a doublée
rePost-User-7168342
demandé il y a un an
démarrage d'instances a mon insu
marc
demandé il y a 7 mois
Comment résoudre l'erreur « CloudFront wasn't able to connect to the origin » (« CloudFront n'a pas pu se connecter à l'origine ») ?
AWS OFFICIELA mis à jour il y a 2 ans
Comment résoudre l’erreur « [AWS service] was unable to place a task because no container instance met all of its requirements » rencontrée dans Amazon ECS ?
AWS OFFICIELA mis à jour il y a un an
Pourquoi le paramètre DeliveryFrequency de mon instantané de configuration AWS Config a-t-elle changé ?
AWS OFFICIELA mis à jour il y a 3 ans
Pourquoi ma connexionAWS Site-to-Site VPN a-t-elle le statut DOWN IPSEC UP alors que la passerelle client est ACTIVE ?
AWS OFFICIELA mis à jour il y a un an