Skip to content

Commit d19841e

Browse files
author
AWS
committed
AWS Network Firewall Update: Correct the documentation about how you can provide rule group rules
1 parent b9bb589 commit d19841e

File tree

2 files changed

+9
-3
lines changed

2 files changed

+9
-3
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS Network Firewall",
4+
"contributor": "",
5+
"description": "Correct the documentation about how you can provide rule group rules"
6+
}

services/networkfirewall/src/main/resources/codegen-resources/service-2.json

+3-3
Original file line numberDiff line numberDiff line change
@@ -794,7 +794,7 @@
794794
},
795795
"Rules":{
796796
"shape":"RulesString",
797-
"documentation":"<p>The name of a file containing stateful rule group rules specifications in Suricata flat format, with one rule per line. Use this to import your existing Suricata compatible rule groups. </p> <note> <p>You must provide either this rules setting or a populated <code>RuleGroup</code> setting, but not both. </p> </note> <p>You can provide your rule group specification in a file through this setting when you create or update your rule group. The call response returns a <a>RuleGroup</a> object that Network Firewall has populated from your file. Network Firewall uses the file contents to populate the rule group rules, but does not maintain a reference to the file or use the file in any way after performing the create or update. If you call <a>DescribeRuleGroup</a> to retrieve the rule group, Network Firewall returns rules settings inside a <a>RuleGroup</a> object. </p>"
797+
"documentation":"<p>A string containing stateful rule group rules specifications in Suricata flat format, with one rule per line. Use this to import your existing Suricata compatible rule groups. </p> <note> <p>You must provide either this rules setting or a populated <code>RuleGroup</code> setting, but not both. </p> </note> <p>You can provide your rule group specification in Suricata flat format through this setting when you create or update your rule group. The call response returns a <a>RuleGroup</a> object that Network Firewall has populated from your string. </p>"
798798
},
799799
"Type":{
800800
"shape":"RuleGroupType",
@@ -1388,7 +1388,7 @@
13881388
"members":{
13891389
"Protocol":{
13901390
"shape":"StatefulRuleProtocol",
1391-
"documentation":"<p>The protocol to inspect for. </p>"
1391+
"documentation":"<p>The protocol to inspect for. To specify all, you can use <code>IP</code>, because all traffic on AWS and on the internet is IP.</p>"
13921392
},
13931393
"Source":{
13941394
"shape":"Source",
@@ -2654,7 +2654,7 @@
26542654
},
26552655
"Rules":{
26562656
"shape":"RulesString",
2657-
"documentation":"<p>The name of a file containing stateful rule group rules specifications in Suricata flat format, with one rule per line. Use this to import your existing Suricata compatible rule groups. </p> <note> <p>You must provide either this rules setting or a populated <code>RuleGroup</code> setting, but not both. </p> </note> <p>You can provide your rule group specification in a file through this setting when you create or update your rule group. The call response returns a <a>RuleGroup</a> object that Network Firewall has populated from your file. Network Firewall uses the file contents to populate the rule group rules, but does not maintain a reference to the file or use the file in any way after performing the create or update. If you call <a>DescribeRuleGroup</a> to retrieve the rule group, Network Firewall returns rules settings inside a <a>RuleGroup</a> object. </p>"
2657+
"documentation":"<p>A string containing stateful rule group rules specifications in Suricata flat format, with one rule per line. Use this to import your existing Suricata compatible rule groups. </p> <note> <p>You must provide either this rules setting or a populated <code>RuleGroup</code> setting, but not both. </p> </note> <p>You can provide your rule group specification in Suricata flat format through this setting when you create or update your rule group. The call response returns a <a>RuleGroup</a> object that Network Firewall has populated from your string. </p>"
26582658
},
26592659
"Type":{
26602660
"shape":"RuleGroupType",

0 commit comments

Comments
 (0)