84 actions in the network-firewall service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to accept pending Network Firewall attachments on a transit gateway
Grants permission to associate availability zones to a firewall
Grants permission to create an association between a firewall policy and a firewall
Grants permission to associate VPC subnets to a firewall
Grants permission to attach proxy rule groups to a proxy configuration
Grants permission to create an AWS Network Firewall container association
Grants permission to create an AWS Network Firewall firewall
Grants permission to create an AWS Network Firewall firewall policy
Grants permission to create an AWS Network Firewall proxy
Grants permission to create an AWS Network Firewall proxy configuration
Grants permission to create an AWS Network Firewall proxy rule group
Grants permission to add proxy rules to a proxy rule group
Grants permission to create an AWS Network Firewall rule group
Grants permission to create an AWS Network Firewall tls inspection configuration
Grants permission to create an AWS Network Firewall vpc endpoint association
Grants permission to delete an AWS Network Firewall container association
Grants permission to delete a firewall
Grants permission to delete a firewall policy
Grants permission to delete Network Firewall attachments on a transit gateway
Grants permission to delete a proxy
Grants permission to delete a proxy configuration
Grants permission to delete a proxy rule group
Grants permission to remove proxy rules from a proxy rule group
Grants permission to delete a resource policy for a firewall policy or rule group or firewall
Grants permission to delete a rule group
Grants permission to delete a tls inspection configuration
Grants permission to delete a vpc endpoint association
Grants permission to retrieve the data objects that define a container association
Grants permission to retrieve the data objects that define a firewall
Grants permission to retrieve the high-level information about a firewall
Grants permission to retrieve the data objects that define a firewall policy
Grants permission to describe a flow operation performed on a firewall
Grants permission to describe the logging configuration of a firewall
Grants permission to retrieve the data objects that define a proxy
Grants permission to retrieve the data objects that define a proxy configuration
Grants permission to retrieve the data objects that define a proxy rule
Grants permission to retrieve the data objects that define a proxy rule group
Grants permission to describe a resource policy for a firewall policy or rule group or firewall
Grants permission to retrieve the data objects that define a rule group
Grants permission to retrieve the high-level information about a rule group
Grants permission to retrieve the summary information about a rule group
Grants permission to retrieve the data objects that define a tls inspection configuration
Grants permission to retrieve the data objects that define a vpc endpoint association
Grants permission to detach proxy rule groups from a proxy configuration
Grants permission to disassociate availability zones to a firewall
Grants permission to disassociate VPC subnets from a firewall
Grants permission to retrieve analysis report results of a firewall
Grants permission to list firewall analysis reports
Grants permission to retrieve the metadata for container associations
Grants permission to retrieve the metadata for firewall policies
Grants permission to retrieve the metadata for firewalls
Grants permission to list results from a flow operation performed on a firewall
Grants permission to list flow operations performed on a firewall
Grants permission to retrieve the metadata for proxies
Grants permission to retrieve the metadata for proxy configurations
Grants permission to retrieve the metadata for proxy rule groups
Grants permission to retrieve the metadata for rule groups
Grants permission to retrieve the tags for a resource
Grants permission to retrieve the metadata for tls inspection configurations
Grants permission to retrieve the metadata for vpc endpoint associations
Grants permission to put a resource policy for a firewall policy or rule group or firewall
Grants permission to reject pending Network Firewall attachments on a transit gateway
Grants permission to start an analysis report on a firewall
Grants permission to start capture operation on a firewall
Grants permission to start flush operation on a firewall
Grants permission to attach tags to a resource
Grants permission to remove tags from a resource
Grants permission to add or remove availability zone change protection for a firewall
Grants permission to update an AWS Network Firewall container association
Grants permission to modify firewall analysis settings of a firewall
Grants permission to add or remove delete protection for a firewall
Grants permission to modify the description for a firewall
Grants permission to modify the encryption configuration of a firewall
Grants permission to modify a firewall policy
Grants permission to add or remove firewall policy change protection for a firewall
Grants permission to modify the logging configuration of a firewall
Grants permission to modify a proxy
Grants permission to modify a proxy configuration
Grants permission to update an existing proxy rule on a proxy rule group
Grants permission to modify rule group priorities on a proxy configuration
Grants permission to update proxy rule priorities within a proxy rule group
Grants permission to modify a rule group
Grants permission to add or remove subnet change protection for a firewall
Grants permission to modify a tls inspection configuration