AWS::NetworkFirewall::RuleGroup StatefulRuleOptions - AWS CloudFormation
SyntaxProperties

AWS::NetworkFirewall::RuleGroup StatefulRuleOptions

Additional options governing how Network Firewall handles the rule group. You can only use these for stateful rule groups.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "RuleOrder" : String
}

YAML

  RuleOrder: String

Properties

RuleOrder

Indicates how to manage the order of the rule evaluation for the rule group. DEFAULT_ACTION_ORDER is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the AWS Network Firewall Developer Guide.

Required: No

Type: String

Allowed values: DEFAULT_ACTION_ORDER | STRICT_ORDER

Update requires: No interruption