How to add managed stateful rule groups to network firewall with CloudFormation ?
Via the console, we can add managed stateful rule groups : how to achieve the same thing using a cloud formation template ?
For example :
| Priority | Name |
|---|---|
| 1 | AbusedLegitMalwareDomainsStrictOrder |
| 2 | BotNetCommandAndControlDomainsStrictOrder |
| 3 | AbusedLegitBotNetCommandAndControlDomainsStrictOrder |
| 4 | ThreatSignaturesBotnetStrictOrder |
| 5 | ThreatSignaturesBotnetWebStrictOrder |
The objective is also to have a strict order of priorities as indicated, as an example, in the table above.
Thank you in advance for your answers.
- Tópicos
- DevOpsGestão e governançaSegurança, identidade e conformidadeRedes e entrega de conteúdoAWS Well-Architected Framework
- Idioma
- English
feita há 4 anos1,9 mil visualizações
- Mais recentes
- Mais votos
- Mais comentários
Hello,
You can use AWS::NetworkFirewall::FirewallPolicy to add managed rule groups to your Network Firewall policies. Sub-Property StatefulRuleGroupReference can be used to set Priority for each managed rule group specified in property ResourceArn. To get the ARN of the AWS managed rule group, use list-rule-groups AWS CLI. See example for reference.
ResourceArns for Managed Rulegroups follow the pattern: "arn:aws:network-firewall:<region>:aws-managed:stateful-rulegroup/<rulegroup-name"
For example: "arn:aws:network-firewall:ap-southeast-2:aws-managed:stateful-rulegroup/ThreatSignaturesMalwareMobileActionOrder"
respondido há 3 anos
Hello,
Please follow the below link to add managed stateful rule groups to network firewall with CloudFormation: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-rulegroup.html#aws-resource-networkfirewall-rulegroup--examples
Conteúdo relevante
- AWS OFICIALAtualizada há 10 meses
Thank you for your answer, but it does not answer my question. The question is about the stateful rule groups managed by AWS, not the rules you create yourself.