By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

(Boto3) How can I call the VPC Route tables to return an indication that a Network Firewall is being used?

0

I'm currently writing a config rule. I was able to write a config rule to see if a Network Firewall is attached to the VPC. I am not revieiwing the boto3 documentation here to determine if a networkfirewall is being used.

Is there a method or certain Filters I can call to determine if the subnet is going to a Network Firewall?

Topics
Networking & Content DeliverySecurity, Identity, & Compliance
Tags
Amazon VPCAWS Network Firewall
Language
English
rePost-User-8984971
asked 2 years ago276 views
1 Answer
3

There's nothing that is going to directly indicate that a Network Firewall is being used. However, what you can do is get a list of Network Firewall endpoints that are deployed into the VPC; then check the route entries in each route table and see if the destination is one of those endpoints.

profile pictureAWS
EXPERT
Brettski-AWS
answered 2 years ago
profile pictureAWS
EXPERT
Tushar_J
reviewed a year ago
  • rePost-User-8984971
    2 years ago

    Do I use filter to get a list of the route entries?

    The filters in boto3 docuemntation for describe_route tables?

  • Brettski-AWS EXPERT
    2 years ago

    You may be able to filter on route.gateway-id.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content