(Boto3) How can I call the VPC Route tables to return an indication that a Network Firewall is being used?

0

I'm currently writing a config rule. I was able to write a config rule to see if a Network Firewall is attached to the VPC. I am not revieiwing the boto3 documentation here to determine if a networkfirewall is being used.

Is there a method or certain Filters I can call to determine if the subnet is going to a Network Firewall?

1回答
3

There's nothing that is going to directly indicate that a Network Firewall is being used. However, what you can do is get a list of Network Firewall endpoints that are deployed into the VPC; then check the route entries in each route table and see if the destination is one of those endpoints.

profile pictureAWS
エキスパート
回答済み 2年前
profile pictureAWS
エキスパート
レビュー済み 2年前
  • Do I use filter to get a list of the route entries?

    The filters in boto3 docuemntation for describe_route tables?

  • You may be able to filter on route.gateway-id.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ