AWS Network Firewall (network-firewall)

2026-10-22

5 new actions, 3 new resources | 13 updated actions

Additions

    Actions
  • CreateFirewallPolicyV2
    • Description:  Grants permission to create an AWS Network Firewall firewall policy v2
    • Access:  Write
    • Resources: 

      Name: FirewallPolicyV2

      Required: Yes

      Name: FirewallRuleGroup

      Required: No

      Name: IpsRuleGroup

      Required: No

      Name: TLSInspectionConfiguration

      Required: No

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • DeleteFirewallPolicyV2
    • Description:  Grants permission to delete a firewall policy v2
    • Access:  Write
    • Resources: 

      Name: FirewallPolicyV2

      Required: Yes

  • DescribeFirewallPolicyV2
    • Description:  Grants permission to retrieve the data objects that define a firewall policy v2
    • Access:  Read
    • Resources: 

      Name: FirewallPolicyV2

      Required: Yes

      Name: FirewallRuleGroup

      Required: No

      Name: IpsRuleGroup

      Required: No

      Name: TLSInspectionConfiguration

      Required: No

  • ListFirewallPoliciesV2
    • Description:  Grants permission to retrieve the metadata for firewall policies v2
    • Access:  List
    • Resources: 

      Name: FirewallPolicyV2

      Required: Yes

  • UpdateFirewallPolicyV2
    • Description:  Grants permission to modify a firewall policy v2
    • Access:  Write
    • Resources: 

      Name: FirewallPolicyV2

      Required: Yes

      Name: FirewallRuleGroup

      Required: No

      Name: IpsRuleGroup

      Required: No

      Name: TLSInspectionConfiguration

      Required: No

    Resources
  • FirewallPolicyV2
    • Arn:  arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy-v2/${Name}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • FirewallRuleGroup
    • Arn:  arn:${Partition}:network-firewall:${Region}:${Account}:firewall-rulegroup/${Name}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • IpsRuleGroup
    • Arn:  arn:${Partition}:network-firewall:${Region}:${Account}:ips-rulegroup/${Name}
    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates