feat(client-network-firewall): Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic.

Author: awstools

clients/client-network-firewall/src/commands/CreateRuleGroupCommand.ts

@@ -75,7 +75,7 @@ export interface CreateRuleGroupCommandOutput extends CreateRuleGroupResponse, _
  *         TargetTypes: [ // TargetTypes // required
  *           "TLS_SNI" || "HTTP_HOST",
  *         ],
- *         GeneratedRulesType: "ALLOWLIST" || "DENYLIST", // required
+ *         GeneratedRulesType: "ALLOWLIST" || "DENYLIST" || "REJECTLIST" || "ALERTLIST", // required
  *       },
  *       StatefulRules: [ // StatefulRules
  *         { // StatefulRule

clients/client-network-firewall/src/commands/DescribeRuleGroupCommand.ts

@@ -80,7 +80,7 @@ export interface DescribeRuleGroupCommandOutput extends DescribeRuleGroupRespons
  * //         TargetTypes: [ // TargetTypes // required
  * //           "TLS_SNI" || "HTTP_HOST",
  * //         ],
- * //         GeneratedRulesType: "ALLOWLIST" || "DENYLIST", // required
+ * //         GeneratedRulesType: "ALLOWLIST" || "DENYLIST" || "REJECTLIST" || "ALERTLIST", // required
  * //       },
  * //       StatefulRules: [ // StatefulRules
  * //         { // StatefulRule

clients/client-network-firewall/src/commands/UpdateRuleGroupCommand.ts

@@ -79,7 +79,7 @@ export interface UpdateRuleGroupCommandOutput extends UpdateRuleGroupResponse, _
  *         TargetTypes: [ // TargetTypes // required
  *           "TLS_SNI" || "HTTP_HOST",
  *         ],
- *         GeneratedRulesType: "ALLOWLIST" || "DENYLIST", // required
+ *         GeneratedRulesType: "ALLOWLIST" || "DENYLIST" || "REJECTLIST" || "ALERTLIST", // required
  *       },
  *       StatefulRules: [ // StatefulRules
  *         { // StatefulRule

clients/client-network-firewall/src/models/models_0.ts

@@ -2137,8 +2137,10 @@ export interface ReferenceSets {
  * @enum
  */
 export const GeneratedRulesType = {
+  ALERTLIST: "ALERTLIST",
   ALLOWLIST: "ALLOWLIST",
   DENYLIST: "DENYLIST",
+  REJECTLIST: "REJECTLIST",
 } as const;
 
 /**
@@ -2189,7 +2191,11 @@ export interface RulesSourceList {
   TargetTypes: TargetType[] | undefined;
 
   /**
-   * <p>Whether you want to allow or deny access to the domains in your target list.</p>
+   * <p>Whether you want to apply allow, reject, alert, or drop behavior to the domains in your target list.</p>
+   *          <note>
+   *             <p>When logging is enabled and you choose Alert, traffic that matches the domain specifications
+   *             generates an alert in the firewall's logs. Then, traffic either passes, is rejected, or drops based on other rules in the firewall policy.</p>
+   *          </note>
    * @public
    */
   GeneratedRulesType: GeneratedRulesType | undefined;

codegen/sdk-codegen/aws-models/network-firewall.json

@@ -3782,6 +3782,18 @@
           "traits": {
             "smithy.api#enumValue": "DENYLIST"
           }
+        },
+        "REJECTLIST": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "REJECTLIST"
+          }
+        },
+        "ALERTLIST": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "ALERTLIST"
+          }
         }
       }
     },
@@ -7187,7 +7199,7 @@
         "GeneratedRulesType": {
           "target": "com.amazonaws.networkfirewall#GeneratedRulesType",
           "traits": {
-            "smithy.api#documentation": "<p>Whether you want to allow or deny access to the domains in your target list.</p>",
+            "smithy.api#documentation": "<p>Whether you want to apply allow, reject, alert, or drop behavior to the domains in your target list.</p>\n         <note>\n            <p>When logging is enabled and you choose Alert, traffic that matches the domain specifications \n            generates an alert in the firewall's logs. Then, traffic either passes, is rejected, or drops based on other rules in the firewall policy.</p>\n         </note>",
             "smithy.api#required": {}
           }
         }