Aws/networkfirewall
@swamp/aws/networkfirewallv2026.10.25.1
01README
AWS NETWORKFIREWALL infrastructure models
02Behaviors
@swamp/aws/networkfirewall/container-associationv2026.10.23.1container_association.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| ContainerAssociationName | string | The descriptive name of the container association. You can't change the name of a container association after you create it. |
| Description? | string | A description of the container association. |
| Type | enum | The type of containers to monitor. You can't change the container type after creation. |
| ContainerMonitoringConfigurations | array | The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked. |
| Tags? | array | An array of key-value pairs to apply to this resource. |
fn create()
Create a NetworkFirewall ContainerAssociation
fn get(identifier: string)
Get a NetworkFirewall ContainerAssociation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall ContainerAssociation |
fn update()
Update a NetworkFirewall ContainerAssociation
fn delete(identifier: string)
Delete a NetworkFirewall ContainerAssociation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall ContainerAssociation |
fn sync()
Sync NetworkFirewall ContainerAssociation state from AWS
fn list(maxPages?: number, resourceModel?: string)
List NetworkFirewall ContainerAssociation resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— NetworkFirewall ContainerAssociation resource state
@swamp/aws/networkfirewall/firewallv2026.10.23.1firewall.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| FirewallName | string | |
| FirewallPolicyArn | string | A resource ARN. |
| VpcId? | string | |
| SubnetMappings? | array | |
| AvailabilityZoneMappings? | array | |
| DeleteProtection? | boolean | |
| SubnetChangeProtection? | boolean | |
| AvailabilityZoneChangeProtection? | boolean | |
| FirewallPolicyChangeProtection? | boolean | |
| TransitGatewayId? | string | |
| Description? | string | |
| EnabledAnalysisTypes? | array | The types of analysis to enable for the firewall. Can be TLS_SNI, HTTP_HOST, or both. |
| NoSourcePreservation? | boolean | Indicates whether the firewall operates in proxy mode, where the source IP address of traffic is not preserved. When true, specify NatGatewayMappings and VpcEndpoint instead of the top-level VpcId and SubnetMappings. You can't change this setting after you create the firewall. |
| NatGatewayMappings? | array | The NAT gateways that the firewall proxies egress traffic through when NoSourcePreservation is true. |
| ProxySettings? | object | The proxy listener configuration for a proxy-mode (no source preservation) firewall. |
| VpcEndpoint? | object | The VPC and subnets for a proxy-mode firewall's endpoint. Provide this instead of the top-level VpcId and SubnetMappings when NoSourcePreservation is true. |
| Tags? | array |
fn create()
Create a NetworkFirewall Firewall
fn get(identifier: string)
Get a NetworkFirewall Firewall
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall Firewall |
fn update()
Update a NetworkFirewall Firewall
fn delete(identifier: string)
Delete a NetworkFirewall Firewall
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall Firewall |
fn sync()
Sync NetworkFirewall Firewall state from AWS
fn list(maxPages?: number, resourceModel?: string)
List NetworkFirewall Firewall resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— NetworkFirewall Firewall resource state
@swamp/aws/networkfirewall/firewall-policyv2026.10.23.1firewall_policy.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| FirewallPolicyName | string | |
| FirewallPolicy | object | |
| Description? | string | |
| Tags? | array |
fn create()
Create a NetworkFirewall FirewallPolicy
fn get(identifier: string)
Get a NetworkFirewall FirewallPolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall FirewallPolicy |
fn update()
Update a NetworkFirewall FirewallPolicy
fn delete(identifier: string)
Delete a NetworkFirewall FirewallPolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall FirewallPolicy |
fn sync()
Sync NetworkFirewall FirewallPolicy state from AWS
fn list(maxPages?: number, resourceModel?: string)
List NetworkFirewall FirewallPolicy resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— NetworkFirewall FirewallPolicy resource state
@swamp/aws/networkfirewall/logging-configurationv2026.10.23.1logging_configuration.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| FirewallName? | string | |
| FirewallArn | string | A resource ARN. |
| LoggingConfiguration | object | |
| EnableMonitoringDashboard? | boolean |
fn create()
Create a NetworkFirewall LoggingConfiguration
fn get(identifier: string)
Get a NetworkFirewall LoggingConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall LoggingConfiguration |
fn update()
Update a NetworkFirewall LoggingConfiguration
fn delete(identifier: string)
Delete a NetworkFirewall LoggingConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall LoggingConfiguration |
fn sync()
Sync NetworkFirewall LoggingConfiguration state from AWS
Resources
state(infinite)— NetworkFirewall LoggingConfiguration resource state
@swamp/aws/networkfirewall/rule-groupv2026.10.23.1rule_group.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| RuleGroupName | string | |
| RuleGroup? | object | |
| Type | enum | |
| Capacity | number | |
| SummaryConfiguration? | object | |
| Description? | string | |
| Tags? | array |
fn create()
Create a NetworkFirewall RuleGroup
fn get(identifier: string)
Get a NetworkFirewall RuleGroup
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall RuleGroup |
fn update()
Update a NetworkFirewall RuleGroup
fn delete(identifier: string)
Delete a NetworkFirewall RuleGroup
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall RuleGroup |
fn sync()
Sync NetworkFirewall RuleGroup state from AWS
fn list(maxPages?: number, resourceModel?: string)
List NetworkFirewall RuleGroup resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— NetworkFirewall RuleGroup resource state
@swamp/aws/networkfirewall/tlsinspection-configurationv2026.10.23.1tlsinspection_configuration.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| TLSInspectionConfigurationName | string | |
| TLSInspectionConfiguration | object | |
| Description? | string | |
| Tags? | array |
fn create()
Create a NetworkFirewall TLSInspectionConfiguration
fn get(identifier: string)
Get a NetworkFirewall TLSInspectionConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall TLSInspectionConfiguration |
fn update()
Update a NetworkFirewall TLSInspectionConfiguration
fn delete(identifier: string)
Delete a NetworkFirewall TLSInspectionConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall TLSInspectionConfiguration |
fn sync()
Sync NetworkFirewall TLSInspectionConfiguration state from AWS
fn list(maxPages?: number, resourceModel?: string)
List NetworkFirewall TLSInspectionConfiguration resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— NetworkFirewall TLSInspectionConfiguration resource state
@swamp/aws/networkfirewall/vpc-endpoint-associationv2026.10.23.1vpc_endpoint_association.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Description? | string | |
| FirewallArn | string | A resource ARN. |
| VpcId | string | |
| SubnetMapping | object | |
| Tags? | array |
fn create()
Create a NetworkFirewall VpcEndpointAssociation
fn get(identifier: string)
Get a NetworkFirewall VpcEndpointAssociation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall VpcEndpointAssociation |
fn update()
Update a NetworkFirewall VpcEndpointAssociation
fn delete(identifier: string)
Delete a NetworkFirewall VpcEndpointAssociation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the NetworkFirewall VpcEndpointAssociation |
fn sync()
Sync NetworkFirewall VpcEndpointAssociation state from AWS
fn list(maxPages?: number, resourceModel?: string)
List NetworkFirewall VpcEndpointAssociation resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— NetworkFirewall VpcEndpointAssociation resource state
03Previous Versions
2026.10.24.1AGPL-3.0-or-later
2026.10.23.1AGPL-3.0-or-later
- Updated: container_association, firewall, firewall_policy, logging_configuration, rule_group, tlsinspection_configuration, vpc_endpoint_association
2026.10.17.1AGPL-3.0-or-later(was none)
- Updated: firewall
2026.10.13.1
- Updated: container_association, firewall, firewall_policy, logging_configuration, rule_group, tlsinspection_configuration, vpc_endpoint_association
2026.10.08.1
2026.10.06.1
2026.10.04.1
2026.10.03.1
2026.10.02.1
2026.10.01.1
2026.09.30.1
2026.09.29.1
2026.09.28.1
2026.09.27.1
2026.09.26.1
2026.09.25.1
2026.09.24.1
2026.09.23.1
2026.09.22.1
04Stats
A
100 / 100
Downloads
35
Archive size
1.4 MB
Verified by Swamp
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Docs keep secrets in a vault1/1earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License2/2earned
- Verified public repository2/2earned
05Platforms
06Labels