statefulDefaultActions

The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.

Valid values of the stateful default action:

• aws:drop_strict

• aws:drop_established

• aws:alert_strict

• aws:alert_established

• aws:drop_established_app_layer

• aws:alert_established_app_layer

• aws:drop_established_app_layer_to_server

• aws:alert_established_app_layer_to_server

For more information, see Strict evaluation order in the Network Firewall Developer Guide.