PolicyVariables - AWS Network Firewall

PolicyVariables

Contains variables that you can use to override default Suricata settings in your firewall policy.

Contents

RuleVariables

The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata HOME_NET variable. If your firewall uses an inspection VPC, you might want to override the HOME_NET variable with the CIDRs of your home networks. If you don't override HOME_NET with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.

Type: String to IPSet object map

Key Length Constraints: Minimum length of 1. Maximum length of 32.

Key Pattern: ^[A-Za-z][A-Za-z0-9_]*$

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: