How to add managed stateful rule groups to network firewall with CloudFormation ?
Via the console, we can add managed stateful rule groups : how to achieve the same thing using a cloud formation template ?
For example :
| Priority | Name |
|---|---|
| 1 | AbusedLegitMalwareDomainsStrictOrder |
| 2 | BotNetCommandAndControlDomainsStrictOrder |
| 3 | AbusedLegitBotNetCommandAndControlDomainsStrictOrder |
| 4 | ThreatSignaturesBotnetStrictOrder |
| 5 | ThreatSignaturesBotnetWebStrictOrder |
The objective is also to have a strict order of priorities as indicated, as an example, in the table above.
Thank you in advance for your answers.
- 언어
- English
질문됨 4년 전1.9천회 조회
- 최신
- 최다 투표
- 가장 많은 댓글
Hello,
You can use AWS::NetworkFirewall::FirewallPolicy to add managed rule groups to your Network Firewall policies. Sub-Property StatefulRuleGroupReference can be used to set Priority for each managed rule group specified in property ResourceArn. To get the ARN of the AWS managed rule group, use list-rule-groups AWS CLI. See example for reference.
ResourceArns for Managed Rulegroups follow the pattern: "arn:aws:network-firewall:<region>:aws-managed:stateful-rulegroup/<rulegroup-name"
For example: "arn:aws:network-firewall:ap-southeast-2:aws-managed:stateful-rulegroup/ThreatSignaturesMalwareMobileActionOrder"
답변함 3년 전
Hello,
Please follow the below link to add managed stateful rule groups to network firewall with CloudFormation: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#aws-resource-networkfirewall-rulegroup--examples
Thank you for your answer, but it does not answer my question. The question is about the stateful rule groups managed by AWS, not the rules you create yourself.