AWS::NetworkFirewall::FirewallPolicy PolicyVariables - AWS CloudFormation
SyntaxProperties

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::NetworkFirewall::FirewallPolicy PolicyVariables

Contains variables that you can use to override default Suricata settings in your firewall policy.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "RuleVariables" : {Key: Value, ...}
}

YAML

  RuleVariables: 
    Key: Value

Properties

RuleVariables

The IPv4 or IPv6 addresses in CIDR notation to use for the Suricata HOME_NET variable. If your firewall uses an inspection VPC, you might want to override the HOME_NET variable with the CIDRs of your home networks. If you don't override HOME_NET with your own CIDRs, Network Firewall by default uses the CIDR of your inspection VPC.

Required: No

Type: Object of IPSet

Update requires: No interruption