AWS Network Firewall 的動作、資源和條件索引鍵

AWS Network Firewall （服務字首：network-firewall) 提供下列服務特定的操作、資源、動作和條件索引鍵，可用於 IAM 許可政策。

參考資料：

了解如何設定此服務。
檢視可供此服務使用的 API 操作清單。
了解如何使用 IAM 許可政策來保護此服務及其資源。
檢視此服務的程式設計服務授權參考。

主題

AWS Network Firewall 定義的 API 操作
AWS Network Firewall 定義的動作
AWS Network Firewall 定義的資源類型
AWS Network Firewall 的條件索引鍵

AWS Network Firewall 定義的 API 操作

下表將 API 操作映射至其授權的 IAM 動作。只會列出具有指定 API 和動作靜態值的條件金鑰；如需每個動作支援的完整條件金鑰集，請參閱動作表格。

作業	IAM 動作	存取層級
AcceptNetworkFirewallTransitGatewayAttachment	network-firewall：AcceptNetworkFirewallTransitGatewayAttachment	寫入
AssociateAvailabilityZones	network-firewall：AssociateAvailabilityZones	寫入
AssociateFirewallPolicy	network-firewall：AssociateFirewallPolicy	寫入
AssociateSubnets	network-firewall：AssociateSubnets	寫入
AttachRuleGroupsToProxyConfiguration	network-firewall：AttachRuleGroupsToProxyConfiguration	寫入
CreateContainerAssociation	network-firewall：CreateContainerAssociation	寫入
CreateContainerAssociation	network-firewall：TagResource	標記、寫入
CreateFirewall	network-firewall：AssociateFirewallPolicy	寫入
	network-firewall：CreateFirewall	寫入
	network-firewall：TagResource	標記、寫入
CreateFirewallPolicy	network-firewall：CreateFirewallPolicy	寫入
	network-firewall：ListRuleGroups	清單
	network-firewall：ListTLSInspectionConfigurations	清單
	network-firewall：TagResource	標記、寫入
CreateProxy	network-firewall：CreateProxy	寫入
CreateProxy	network-firewall：TagResource	標記、寫入
CreateProxyConfiguration	network-firewall：AttachRuleGroupsToProxyConfiguration	寫入
	network-firewall：CreateProxyConfiguration	寫入
	network-firewall：TagResource	標記、寫入
CreateProxyRuleGroup	network-firewall：CreateProxyRuleGroup	寫入
CreateProxyRuleGroup	network-firewall：TagResource	標記、寫入
CreateProxyRules	network-firewall：CreateProxyRules	寫入
CreateRuleGroup	network-firewall：CreateRuleGroup	寫入
CreateRuleGroup	network-firewall：TagResource	標記、寫入
CreateTLSInspectionConfiguration	network-firewall：CreateTLSInspectionConfiguration	寫入
CreateTLSInspectionConfiguration	network-firewall：TagResource	標記、寫入
CreateVpcEndpointAssociation	network-firewall：CreateVpcEndpointAssociation	寫入
	network-firewall：ListFirewalls	清單
	network-firewall：TagResource	標記、寫入
DeleteContainerAssociation	network-firewall：DeleteContainerAssociation	寫入
DeleteFirewall	network-firewall：DeleteFirewall	寫入
DeleteFirewallPolicy	network-firewall：DeleteFirewallPolicy	寫入
DeleteNetworkFirewallTransitGatewayAttachment	network-firewall：DeleteNetworkFirewallTransitGatewayAttachment	寫入
DeleteProxy	network-firewall：DeleteProxy	寫入
DeleteProxyConfiguration	network-firewall：DeleteProxyConfiguration	寫入
DeleteProxyRuleGroup	network-firewall：DeleteProxyRuleGroup	寫入
DeleteProxyRules	network-firewall：DeleteProxyRules	寫入
DeleteResourcePolicy	network-firewall：DeleteResourcePolicy	寫入
DeleteRuleGroup	network-firewall：DeleteRuleGroup	寫入
DeleteTLSInspectionConfiguration	network-firewall：DeleteTLSInspectionConfiguration	寫入
DeleteVpcEndpointAssociation	network-firewall：DeleteVpcEndpointAssociation	寫入
DescribeContainerAssociation	network-firewall：DescribeContainerAssociation	讀取
DescribeFirewall	network-firewall：DescribeFirewall	讀取
DescribeFirewallMetadata	network-firewall：DescribeFirewallMetadata	讀取
DescribeFirewallPolicy	network-firewall：DescribeFirewallPolicy	讀取
DescribeFlowOperation	network-firewall：DescribeFlowOperation	讀取
DescribeLoggingConfiguration	network-firewall：DescribeLoggingConfiguration	讀取
DescribeProxy	network-firewall：DescribeProxy	讀取
DescribeProxyConfiguration	network-firewall：DescribeProxyConfiguration	讀取
DescribeProxyRule	network-firewall：DescribeProxyRule	讀取
DescribeProxyRuleGroup	network-firewall：DescribeProxyRuleGroup	讀取
DescribeResourcePolicy	network-firewall：DescribeResourcePolicy	讀取
DescribeRuleGroup	network-firewall：DescribeRuleGroup	讀取
DescribeRuleGroupMetadata	network-firewall：DescribeRuleGroupMetadata	讀取
DescribeRuleGroupSummary	network-firewall：DescribeRuleGroupSummary	讀取
DescribeTLSInspectionConfiguration	network-firewall：DescribeTLSInspectionConfiguration	讀取
DescribeVpcEndpointAssociation	network-firewall：DescribeVpcEndpointAssociation	讀取
DetachRuleGroupsFromProxyConfiguration	network-firewall：DetachRuleGroupsFromProxyConfiguration	寫入
DisassociateAvailabilityZones	network-firewall：DisassociateAvailabilityZones	寫入
DisassociateSubnets	network-firewall：DisassociateSubnets	寫入
GetAnalysisReportResults	network-firewall：GetAnalysisReportResults	讀取
ListAnalysisReports	network-firewall：ListAnalysisReports	清單
ListContainerAssociations	network-firewall：ListContainerAssociations	清單
ListFirewallPolicies	network-firewall：ListFirewallPolicies	清單
ListFirewalls	network-firewall：ListFirewalls	清單
ListFlowOperationResults	network-firewall：ListFlowOperationResults	讀取
ListFlowOperations	network-firewall：ListFlowOperations	清單
ListProxies	network-firewall：ListProxies	清單
ListProxyConfigurations	network-firewall：ListProxyConfigurations	清單
ListProxyRuleGroups	network-firewall：ListProxyRuleGroups	清單
ListRuleGroups	network-firewall：ListRuleGroups	清單
ListTLSInspectionConfigurations	network-firewall：ListTLSInspectionConfigurations	清單
ListTagsForResource	network-firewall：ListTagsForResource	清單
ListVpcEndpointAssociations	network-firewall：ListVpcEndpointAssociations	清單
PutResourcePolicy	network-firewall：PutResourcePolicy	寫入
RejectNetworkFirewallTransitGatewayAttachment	network-firewall：RejectNetworkFirewallTransitGatewayAttachment	寫入
StartAnalysisReport	network-firewall：StartAnalysisReport	寫入
StartFlowCapture	network-firewall：StartFlowCapture	寫入
StartFlowFlush	network-firewall：StartFlowFlush	寫入
TagResource	network-firewall：TagResource	標記、寫入
UntagResource	network-firewall：UntagResource	標記、寫入
UpdateAvailabilityZoneChangeProtection	network-firewall：UpdateAvailabilityZoneChangeProtection	寫入
UpdateContainerAssociation	network-firewall：UpdateContainerAssociation	寫入
UpdateFirewallAnalysisSettings	network-firewall：UpdateFirewallAnalysisSettings	寫入
UpdateFirewallDeleteProtection	network-firewall：UpdateFirewallDeleteProtection	寫入
UpdateFirewallDescription	network-firewall：UpdateFirewallDescription	寫入
UpdateFirewallEncryptionConfiguration	network-firewall：UpdateFirewallEncryptionConfiguration	寫入
UpdateFirewallPolicy	network-firewall：ListRuleGroups	清單
	network-firewall：ListTLSInspectionConfigurations	清單
	network-firewall：UpdateFirewallPolicy	寫入
UpdateFirewallPolicyChangeProtection	network-firewall：UpdateFirewallPolicyChangeProtection	寫入
UpdateLoggingConfiguration	network-firewall：UpdateLoggingConfiguration	寫入
UpdateProxy	network-firewall：UpdateProxy	寫入
UpdateProxyConfiguration	network-firewall：UpdateProxyConfiguration	寫入
UpdateProxyRule	network-firewall：UpdateProxyRule	寫入
UpdateProxyRuleGroupPriorities	network-firewall：UpdateProxyRuleGroupPriorities	寫入
UpdateProxyRulePriorities	network-firewall：UpdateProxyRulePriorities	寫入
UpdateRuleGroup	network-firewall：UpdateRuleGroup	寫入
UpdateSubnetChangeProtection	network-firewall：UpdateSubnetChangeProtection	寫入
UpdateTLSInspectionConfiguration	network-firewall：UpdateTLSInspectionConfiguration	寫入

AWS Network Firewall 定義的動作

您可在 IAM 政策陳述式的 Action 元素中指定以下動作。使用政策來授予在 AWS中執行操作的許可。在政策中使用動作時，通常會允許或拒絕存取相同名稱的 API 操作或 CLI 命令。不過，在某些情況下，單一動作可控制對多個操作的存取。或者，某些操作需要多種不同的動作。

動作	說明	資源類型 (*必填項目)	條件索引鍵	存取層級
AcceptNetworkFirewallTransitGatewayAttachment	准許接受傳輸閘道上待定的 Network Firewall 附件	防火牆*	aws：ResourceTag/${TagKey}	寫入
AssociateAvailabilityZones	准許將可用區域與防火牆建立關聯	防火牆*	aws：ResourceTag/${TagKey}	寫入
AssociateFirewallPolicy	准許在防火牆政策與防火牆之間建立關聯	防火牆*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
AssociateFirewallPolicy	准許在防火牆政策與防火牆之間建立關聯	FirewallPolicy*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
AssociateSubnets	准許將 VPC 子網路關聯至防火牆	防火牆*	aws：ResourceTag/${TagKey}	寫入
AttachRuleGroupsToProxyConfiguration	准許將代理規則群組連接至代理組態	ProxyConfiguration*	aws：ResourceTag/${TagKey}	寫入
AttachRuleGroupsToProxyConfiguration	准許將代理規則群組連接至代理組態	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	寫入
CreateContainerAssociation	准許建立 AWS Network Firewall 容器關聯	ContainerAssociation*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateFirewall	准許建立 AWS Network Firewall 防火牆	防火牆*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateFirewall	准許建立 AWS Network Firewall 防火牆	FirewallPolicy*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateFirewallPolicy	准許建立 AWS Network Firewall 防火牆政策	FirewallPolicy*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
		StatefulRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		StatelessRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		TLSInspectionConfiguration	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
CreateProxy	准許建立 AWS Network Firewall Proxy	Proxy*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateProxy	准許建立 AWS Network Firewall Proxy	ProxyConfiguration*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateProxyConfiguration	准許建立 AWS Network Firewall 代理組態	ProxyConfiguration*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateProxyConfiguration	准許建立 AWS Network Firewall 代理組態	ProxyRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateProxyRuleGroup	准許建立 AWS Network Firewall 代理規則群組	ProxyRuleGroup*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateProxyRules	准許將代理規則新增至代理規則群組	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	寫入
CreateRuleGroup	准許建立 AWS Network Firewall 規則群組	StatefulRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateRuleGroup	准許建立 AWS Network Firewall 規則群組	StatelessRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateTLSInspectionConfiguration	准許建立 AWS Network Firewall tls 檢查組態	TLSInspectionConfiguration*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateVpcEndpointAssociation	准許建立 AWS Network Firewall vpc 端點關聯	防火牆*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
CreateVpcEndpointAssociation	准許建立 AWS Network Firewall vpc 端點關聯	VpcEndpointAssociation*	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	寫入
DeleteContainerAssociation	准許刪除 AWS Network Firewall 容器關聯	ContainerAssociation*	aws：ResourceTag/${TagKey}	寫入
DeleteFirewall	准許刪除防火牆	防火牆*	aws：ResourceTag/${TagKey}	寫入
DeleteFirewallPolicy	准許刪除防火牆政策	FirewallPolicy*	aws：ResourceTag/${TagKey}	寫入
DeleteNetworkFirewallTransitGatewayAttachment	准許刪除傳輸閘道上的 Network Firewall 附件	防火牆*	aws：ResourceTag/${TagKey}	寫入
DeleteProxy	准許刪除代理	Proxy*	aws：ResourceTag/${TagKey}	寫入
DeleteProxyConfiguration	准許刪除代理組態	ProxyConfiguration*	aws：ResourceTag/${TagKey}	寫入
DeleteProxyRuleGroup	准許刪除代理規則群組	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	寫入
DeleteProxyRules	准許從代理規則群組移除代理規則	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	寫入
DeleteResourcePolicy	准許刪除防火牆政策或規則群組或防火牆的資源政策	防火牆	aws：ResourceTag/${TagKey}	寫入
		FirewallPolicy	aws：ResourceTag/${TagKey}
		StatefulRuleGroup	aws：ResourceTag/${TagKey}
		StatelessRuleGroup	aws：ResourceTag/${TagKey}
DeleteRuleGroup	准許刪除規則群組	StatefulRuleGroup*	aws：ResourceTag/${TagKey}	寫入
DeleteRuleGroup	准許刪除規則群組	StatelessRuleGroup*	aws：ResourceTag/${TagKey}	寫入
DeleteTLSInspectionConfiguration	准許刪除 TLS 檢查組態	TLSInspectionConfiguration*	aws：ResourceTag/${TagKey}	寫入
DeleteVpcEndpointAssociation	准許刪除 vpc 端點關聯	VpcEndpointAssociation*	aws：ResourceTag/${TagKey}	寫入
DescribeContainerAssociation	准許擷取定義容器關聯的資料物件	ContainerAssociation*	aws：ResourceTag/${TagKey}	讀取
DescribeFirewall	准許擷取定義防火牆的資料物件	防火牆*	aws：ResourceTag/${TagKey}	讀取
DescribeFirewallMetadata	准許擷取防火牆的高階資訊	防火牆*	aws：ResourceTag/${TagKey}	讀取
DescribeFirewallPolicy	准許擷取定義防火牆政策的資料物件	FirewallPolicy*	aws：ResourceTag/${TagKey}	讀取
		StatefulRuleGroup	aws：ResourceTag/${TagKey}
		StatelessRuleGroup	aws：ResourceTag/${TagKey}
		TLSInspectionConfiguration	aws：ResourceTag/${TagKey}
DescribeFlowOperation	准許描述在防火牆上執行的流程操作	防火牆*	aws：ResourceTag/${TagKey}	讀取
DescribeLoggingConfiguration	准許描述防火牆的日誌記錄組態	防火牆*	aws：ResourceTag/${TagKey}	讀取
DescribeProxy	准許擷取定義代理的資料物件	Proxy*	aws：ResourceTag/${TagKey}	讀取
DescribeProxyConfiguration	准許擷取定義代理組態的資料物件	ProxyConfiguration*	aws：ResourceTag/${TagKey}	讀取
DescribeProxyRule	准許擷取定義代理規則的資料物件	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	讀取
DescribeProxyRuleGroup	准許擷取定義代理規則群組的資料物件	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	讀取
DescribeResourcePolicy	准許描述防火牆政策或規則群組或防火牆的資源政策	防火牆	aws：ResourceTag/${TagKey}	讀取
		FirewallPolicy	aws：ResourceTag/${TagKey}
		StatefulRuleGroup	aws：ResourceTag/${TagKey}
		StatelessRuleGroup	aws：ResourceTag/${TagKey}
DescribeRuleGroup	准許擷取定義規則群組的資料物件	StatefulRuleGroup	aws：ResourceTag/${TagKey}	讀取
DescribeRuleGroup	准許擷取定義規則群組的資料物件	StatelessRuleGroup	aws：ResourceTag/${TagKey}	讀取
DescribeRuleGroupMetadata	准許擷取規則群組的高階資訊	StatefulRuleGroup	aws：ResourceTag/${TagKey}	讀取
DescribeRuleGroupMetadata	准許擷取規則群組的高階資訊	StatelessRuleGroup	aws：ResourceTag/${TagKey}	讀取
DescribeRuleGroupSummary	准許擷取規則群組的摘要資訊	StatefulRuleGroup	aws：ResourceTag/${TagKey}	讀取
DescribeRuleGroupSummary	准許擷取規則群組的摘要資訊	StatelessRuleGroup	aws：ResourceTag/${TagKey}	讀取
DescribeTLSInspectionConfiguration	准許擷取定義 TLS 檢查組態的資料物件	TLSInspectionConfiguration*	aws：ResourceTag/${TagKey}	讀取
DescribeVpcEndpointAssociation	准許擷取定義 vpc 端點關聯的資料物件	VpcEndpointAssociation*	aws：ResourceTag/${TagKey}	讀取
DetachRuleGroupsFromProxyConfiguration	准許從代理組態分離代理規則群組	ProxyConfiguration*	aws：ResourceTag/${TagKey}	寫入
DetachRuleGroupsFromProxyConfiguration	准許從代理組態分離代理規則群組	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	寫入
DisassociateAvailabilityZones	准許取消可用區域與防火牆的關聯	防火牆*	aws：ResourceTag/${TagKey}	寫入
DisassociateSubnets	准許將 VPC 子網路與防火牆取消關聯	防火牆*	aws：ResourceTag/${TagKey}	寫入
GetAnalysisReportResults	准許擷取防火牆的分析報告結果	防火牆*	aws：ResourceTag/${TagKey}	讀取
ListAnalysisReports	准許列出防火牆分析報告	防火牆*	aws：ResourceTag/${TagKey}	清單
ListContainerAssociations	准許擷取容器關聯的中繼資料			清單
ListFirewallPolicies	准許擷取防火牆政策的中繼資料	FirewallPolicy*	aws：ResourceTag/${TagKey}	清單
ListFirewalls	准許擷取防火牆的中繼資料	防火牆*	aws：ResourceTag/${TagKey}	清單
ListFlowOperationResults	准許列出在防火牆上執行之流程操作的結果	防火牆*	aws：ResourceTag/${TagKey}	讀取
ListFlowOperations	准許列出在防火牆上執行的流程操作	防火牆*	aws：ResourceTag/${TagKey}	清單
ListProxies	准許擷取代理的中繼資料	Proxy*	aws：ResourceTag/${TagKey}	清單
ListProxyConfigurations	准許擷取代理組態的中繼資料	ProxyConfiguration*	aws：ResourceTag/${TagKey}	清單
ListProxyRuleGroups	准許擷取代理規則群組的中繼資料	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	清單
ListRuleGroups	准許擷取規則群組的中繼資料			清單
ListTLSInspectionConfigurations	准許擷取 TLS 檢查組態的中繼資料	TLSInspectionConfiguration*	aws：ResourceTag/${TagKey}	清單
ListTagsForResource	准許擷取資源標籤	ContainerAssociation	aws：ResourceTag/${TagKey}	清單
		防火牆*	aws：ResourceTag/${TagKey}
		FirewallPolicy*	aws：ResourceTag/${TagKey}
		StatefulRuleGroup	aws：ResourceTag/${TagKey}
		StatelessRuleGroup	aws：ResourceTag/${TagKey}
		TLSInspectionConfiguration	aws：ResourceTag/${TagKey}
		VpcEndpointAssociation	aws：ResourceTag/${TagKey}
ListVpcEndpointAssociations	准許擷取 vpc 端點關聯的中繼資料	VpcEndpointAssociation*	aws：ResourceTag/${TagKey}	清單
PutResourcePolicy	准許放置防火牆政策或規則群組或防火牆的資源政策	防火牆	aws：ResourceTag/${TagKey}	寫入
		FirewallPolicy	aws：ResourceTag/${TagKey}
		StatefulRuleGroup	aws：ResourceTag/${TagKey}
		StatelessRuleGroup	aws：ResourceTag/${TagKey}
RejectNetworkFirewallTransitGatewayAttachment	准許拒絕傳輸閘道上待定的 Network Firewall 連接	防火牆*	aws：ResourceTag/${TagKey}	寫入
StartAnalysisReport	准許在防火牆上啟動分析報告	防火牆*	aws：ResourceTag/${TagKey}	寫入
StartFlowCapture	准許在防火牆上開始擷取操作	防火牆*	aws：ResourceTag/${TagKey}	寫入
StartFlowFlush	准許在防火牆上啟動排清操作	防火牆*	aws：ResourceTag/${TagKey}	寫入
TagResource	准許將標籤連接至資源。	ContainerAssociation	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys	標記、寫入
		防火牆	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		FirewallPolicy	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		Proxy	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		ProxyConfiguration	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		ProxyRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		StatefulRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		StatelessRuleGroup	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		TLSInspectionConfiguration	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
		VpcEndpointAssociation	aws：RequestTag/${TagKey} aws：ResourceTag/${TagKey} aws:TagKeys
UntagResource	授予許可來從資源中移除標籤	ContainerAssociation	aws：ResourceTag/${TagKey} aws:TagKeys	標記、寫入
		防火牆	aws：ResourceTag/${TagKey} aws:TagKeys
		FirewallPolicy	aws：ResourceTag/${TagKey} aws:TagKeys
		Proxy	aws：ResourceTag/${TagKey} aws:TagKeys
		ProxyConfiguration	aws：ResourceTag/${TagKey} aws:TagKeys
		ProxyRuleGroup	aws：ResourceTag/${TagKey} aws:TagKeys
		StatefulRuleGroup	aws：ResourceTag/${TagKey} aws:TagKeys
		StatelessRuleGroup	aws：ResourceTag/${TagKey} aws:TagKeys
		TLSInspectionConfiguration	aws：ResourceTag/${TagKey} aws:TagKeys
		VpcEndpointAssociation	aws：ResourceTag/${TagKey} aws:TagKeys
UpdateAvailabilityZoneChangeProtection	准許新增或移除防火牆的可用區域變更保護	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateContainerAssociation	准許更新 AWS Network Firewall 容器關聯	ContainerAssociation*	aws：ResourceTag/${TagKey}	寫入
UpdateFirewallAnalysisSettings	准許修改防火牆的防火牆分析設定	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateFirewallDeleteProtection	准許新增或移除防火牆的刪除保護	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateFirewallDescription	准許修改防火牆的描述	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateFirewallEncryptionConfiguration	准許修改防火牆的加密組態	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateFirewallPolicy	准許修改防火牆政策	FirewallPolicy*	aws：ResourceTag/${TagKey}	寫入
		StatefulRuleGroup	aws：ResourceTag/${TagKey}
		StatelessRuleGroup	aws：ResourceTag/${TagKey}
		TLSInspectionConfiguration	aws：ResourceTag/${TagKey}
UpdateFirewallPolicyChangeProtection	准許新增或移除防火牆的防火牆政策變更保護	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateLoggingConfiguration	准許修改防火牆的日誌記錄組態	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateProxy	准許修改代理	Proxy*	aws：ResourceTag/${TagKey}	寫入
UpdateProxyConfiguration	准許修改代理組態	ProxyConfiguration*	aws：ResourceTag/${TagKey}	寫入
UpdateProxyRule	准許更新代理規則群組上的現有代理規則	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	寫入
UpdateProxyRuleGroupPriorities	准許修改代理組態上的規則群組優先順序	ProxyConfiguration*	aws：ResourceTag/${TagKey}	寫入
UpdateProxyRulePriorities	准許更新代理規則群組內的代理規則優先順序	ProxyRuleGroup*	aws：ResourceTag/${TagKey}	寫入
UpdateRuleGroup	准許修改規則群組	StatefulRuleGroup	aws：ResourceTag/${TagKey}	寫入
UpdateRuleGroup	准許修改規則群組	StatelessRuleGroup	aws：ResourceTag/${TagKey}	寫入
UpdateSubnetChangeProtection	准許新增或移除防火牆的子網路變更保護	防火牆*	aws：ResourceTag/${TagKey}	寫入
UpdateTLSInspectionConfiguration	准許修改 TLS 檢查組態	TLSInspectionConfiguration*	aws：ResourceTag/${TagKey}	寫入

AWS Network Firewall 定義的資源類型

此服務會定義下列資源類型，並可用在 IAM 許可政策陳述式的 Resource 元素中。

資源類型	ARN	條件索引鍵
ContainerAssociation	arn：${Partition}：network-firewall：${Region}：${Account}：container-association/${Name}	aws：ResourceTag/${TagKey}
防火牆	arn：${Partition}：network-firewall：${Region}：${Account}：firewall/${Name}	aws：ResourceTag/${TagKey}
FirewallPolicy	arn：${Partition}：network-firewall：${Region}：${Account}：firewall-policy/${Name}	aws：ResourceTag/${TagKey}
Proxy	arn：${Partition}：network-firewall：${Region}：${Account}：proxy/${Name}	aws：ResourceTag/${TagKey}
ProxyConfiguration	arn：${Partition}：network-firewall：${Region}：${Account}：proxy-configuration/${Name}	aws：ResourceTag/${TagKey}
ProxyRuleGroup	arn：${Partition}：network-firewall：${Region}：${Account}：proxy-rule-group/${Name}	aws：ResourceTag/${TagKey}
StatefulRuleGroup	arn：${Partition}：network-firewall：${Region}：${Account}：stateful-rulegroup/${Name}	aws：ResourceTag/${TagKey}
StatelessRuleGroup	arn：${Partition}：network-firewall：${Region}：${Account}：stateless-rulegroup/${Name}	aws：ResourceTag/${TagKey}
TLSInspectionConfiguration	arn：${Partition}：network-firewall：${Region}：${Account}：tls-configuration/${Name}	aws：ResourceTag/${TagKey}
VpcEndpointAssociation	arn：${Partition}：network-firewall：${Region}：${Account}：vpc-endpoint-association/${Name}	aws：ResourceTag/${TagKey}

AWS Network Firewall 的條件索引鍵

AWS Network Firewall 定義下列條件索引鍵，可用於 IAM 政策的 Condition元素。

條件索引鍵	描述	Type
aws:RequestTag/${TagKey}	依每個標籤的允許值集來篩選存取權	String
aws:ResourceTag/${TagKey}	依與資源相關聯的標籤值篩選存取權	String
aws:TagKeys	依請求中是否存在強制性標籤來篩選存取	ArrayOfString

您的瀏覽器已停用或無法使用 Javascript。

您必須啟用 Javascript，才能使用 AWS 文件。請參閱您的瀏覽器說明頁以取得說明。

文件慣用形式

AWS MWAA Serverless (airflow-serverless)

AWS Network Manager （網路管理員）