AWS::NetworkFirewall::RuleGroup CustomAction
An optional, non-standard action to use for stateless packet handling. You can define this in addition to the standard action that you must specify.
You define and name the custom actions that you want to be able to use, and then you reference them by name in your actions settings.
You can use custom actions in the following places:
-
In an AWS::NetworkFirewall::RuleGroup StatelessRulesAndCustomActions. The custom actions are available for use by name inside the
StatelessRulesAndCustomActionswhere you define them. You can use them for your stateless rule actions to specify what to do with a packet that matches the rule's match attributes. -
In an AWS::NetworkFirewall::FirewallPolicy specification, in
StatelessCustomActions. The custom actions are available for use inside the policy where you define them. You can use them for the policy's default stateless actions settings to specify what to do with packets that don't match any of the policy's stateless rules.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "ActionDefinition" :ActionDefinition, "ActionName" :String}
YAML
ActionDefinition:ActionDefinitionActionName:String
Properties
ActionDefinition-
The custom action associated with the action name.
Required: Yes
Type: ActionDefinition
Update requires: No interruption
ActionName-
The descriptive name of the custom action. You can't change the name of a custom action after you create it.
Required: Yes
Type: String
Pattern:
^[a-zA-Z0-9]+$Minimum:
1Maximum:
128Update requires: No interruption
