statefulDefaultActions  
  The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.
Valid values of the stateful default action:
- aws:drop_strict 
- aws:drop_established 
- aws:alert_strict 
- aws:alert_established