network-firewall

84 actions in the network-firewall service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

network-firewall:AcceptNetworkFirewallTransitGatewayAttachment

Write

Grants permission to accept pending Network Firewall attachments on a transit gateway

network-firewall:AssociateAvailabilityZones

Write

Grants permission to associate availability zones to a firewall

network-firewall:AssociateFirewallPolicy

Write

Grants permission to create an association between a firewall policy and a firewall

network-firewall:AssociateSubnets

Write

Grants permission to associate VPC subnets to a firewall

network-firewall:AttachRuleGroupsToProxyConfiguration

Write

Grants permission to attach proxy rule groups to a proxy configuration

network-firewall:CreateContainerAssociation

Write

Grants permission to create an AWS Network Firewall container association

network-firewall:CreateFirewall

Write

Grants permission to create an AWS Network Firewall firewall

network-firewall:CreateFirewallPolicy

Write

Grants permission to create an AWS Network Firewall firewall policy

network-firewall:CreateProxy

Write

Grants permission to create an AWS Network Firewall proxy

network-firewall:CreateProxyConfiguration

Write

Grants permission to create an AWS Network Firewall proxy configuration

network-firewall:CreateProxyRuleGroup

Write

Grants permission to create an AWS Network Firewall proxy rule group

network-firewall:CreateProxyRules

Write

Grants permission to add proxy rules to a proxy rule group

network-firewall:CreateRuleGroup

Write

Grants permission to create an AWS Network Firewall rule group

network-firewall:CreateTLSInspectionConfiguration

Write

Grants permission to create an AWS Network Firewall tls inspection configuration

network-firewall:CreateVpcEndpointAssociation

Write

Grants permission to create an AWS Network Firewall vpc endpoint association

network-firewall:DeleteContainerAssociation

Write

Grants permission to delete an AWS Network Firewall container association

network-firewall:DeleteFirewall

Write

Grants permission to delete a firewall

network-firewall:DeleteFirewallPolicy

Write

Grants permission to delete a firewall policy

network-firewall:DeleteNetworkFirewallTransitGatewayAttachment

Write

Grants permission to delete Network Firewall attachments on a transit gateway

network-firewall:DeleteProxy

Write

Grants permission to delete a proxy

network-firewall:DeleteProxyConfiguration

Write

Grants permission to delete a proxy configuration

network-firewall:DeleteProxyRuleGroup

Write

Grants permission to delete a proxy rule group

network-firewall:DeleteProxyRules

Write

Grants permission to remove proxy rules from a proxy rule group

network-firewall:DeleteResourcePolicy

Write

Grants permission to delete a resource policy for a firewall policy or rule group or firewall

network-firewall:DeleteRuleGroup

Write

Grants permission to delete a rule group

network-firewall:DeleteTLSInspectionConfiguration

Write

Grants permission to delete a tls inspection configuration

network-firewall:DeleteVpcEndpointAssociation

Write

Grants permission to delete a vpc endpoint association

network-firewall:DescribeContainerAssociation

Read

Grants permission to retrieve the data objects that define a container association

network-firewall:DescribeFirewall

Read

Grants permission to retrieve the data objects that define a firewall

network-firewall:DescribeFirewallMetadata

Read

Grants permission to retrieve the high-level information about a firewall

network-firewall:DescribeFirewallPolicy

Read

Grants permission to retrieve the data objects that define a firewall policy

network-firewall:DescribeFlowOperation

Read

Grants permission to describe a flow operation performed on a firewall

network-firewall:DescribeLoggingConfiguration

Read

Grants permission to describe the logging configuration of a firewall

network-firewall:DescribeProxy

Read

Grants permission to retrieve the data objects that define a proxy

network-firewall:DescribeProxyConfiguration

Read

Grants permission to retrieve the data objects that define a proxy configuration

network-firewall:DescribeProxyRule

Read

Grants permission to retrieve the data objects that define a proxy rule

network-firewall:DescribeProxyRuleGroup

Read

Grants permission to retrieve the data objects that define a proxy rule group

network-firewall:DescribeResourcePolicy

Read

Grants permission to describe a resource policy for a firewall policy or rule group or firewall

network-firewall:DescribeRuleGroup

Read

Grants permission to retrieve the data objects that define a rule group

network-firewall:DescribeRuleGroupMetadata

Read

Grants permission to retrieve the high-level information about a rule group

network-firewall:DescribeRuleGroupSummary

Read

Grants permission to retrieve the summary information about a rule group

network-firewall:DescribeTLSInspectionConfiguration

Read

Grants permission to retrieve the data objects that define a tls inspection configuration

network-firewall:DescribeVpcEndpointAssociation

Read

Grants permission to retrieve the data objects that define a vpc endpoint association

network-firewall:DetachRuleGroupsFromProxyConfiguration

Write

Grants permission to detach proxy rule groups from a proxy configuration

network-firewall:DisassociateAvailabilityZones

Write

Grants permission to disassociate availability zones to a firewall

network-firewall:DisassociateSubnets

Write

Grants permission to disassociate VPC subnets from a firewall

network-firewall:GetAnalysisReportResults

Read

Grants permission to retrieve analysis report results of a firewall

network-firewall:ListAnalysisReports

List

Grants permission to list firewall analysis reports

network-firewall:ListContainerAssociations

List

Grants permission to retrieve the metadata for container associations

network-firewall:ListFirewallPolicies

List

Grants permission to retrieve the metadata for firewall policies

network-firewall:ListFirewalls

List

Grants permission to retrieve the metadata for firewalls

network-firewall:ListFlowOperationResults

Read

Grants permission to list results from a flow operation performed on a firewall

network-firewall:ListFlowOperations

List

Grants permission to list flow operations performed on a firewall

network-firewall:ListProxies

List

Grants permission to retrieve the metadata for proxies

network-firewall:ListProxyConfigurations

List

Grants permission to retrieve the metadata for proxy configurations

network-firewall:ListProxyRuleGroups

List

Grants permission to retrieve the metadata for proxy rule groups

network-firewall:ListRuleGroups

List

Grants permission to retrieve the metadata for rule groups

network-firewall:ListTagsForResource

List

Grants permission to retrieve the tags for a resource

network-firewall:ListTLSInspectionConfigurations

List

Grants permission to retrieve the metadata for tls inspection configurations

network-firewall:ListVpcEndpointAssociations

List

Grants permission to retrieve the metadata for vpc endpoint associations

network-firewall:PutResourcePolicy

Write

Grants permission to put a resource policy for a firewall policy or rule group or firewall

network-firewall:RejectNetworkFirewallTransitGatewayAttachment

Write

Grants permission to reject pending Network Firewall attachments on a transit gateway

network-firewall:StartAnalysisReport

Write

Grants permission to start an analysis report on a firewall

network-firewall:StartFlowCapture

Write

Grants permission to start capture operation on a firewall

network-firewall:StartFlowFlush

Write

Grants permission to start flush operation on a firewall

network-firewall:TagResource

Tagging

Grants permission to attach tags to a resource

network-firewall:UntagResource

Tagging

Grants permission to remove tags from a resource

network-firewall:UpdateAvailabilityZoneChangeProtection

Write

Grants permission to add or remove availability zone change protection for a firewall

network-firewall:UpdateContainerAssociation

Write

Grants permission to update an AWS Network Firewall container association

network-firewall:UpdateFirewallAnalysisSettings

Write

Grants permission to modify firewall analysis settings of a firewall

network-firewall:UpdateFirewallDeleteProtection

Write

Grants permission to add or remove delete protection for a firewall

network-firewall:UpdateFirewallDescription

Write

Grants permission to modify the description for a firewall

network-firewall:UpdateFirewallEncryptionConfiguration

Write

Grants permission to modify the encryption configuration of a firewall

network-firewall:UpdateFirewallPolicy

Write

Grants permission to modify a firewall policy

network-firewall:UpdateFirewallPolicyChangeProtection

Write

Grants permission to add or remove firewall policy change protection for a firewall

network-firewall:UpdateLoggingConfiguration

Write

Grants permission to modify the logging configuration of a firewall

network-firewall:UpdateProxy

Write

Grants permission to modify a proxy

network-firewall:UpdateProxyConfiguration

Write

Grants permission to modify a proxy configuration

network-firewall:UpdateProxyRule

Write

Grants permission to update an existing proxy rule on a proxy rule group

network-firewall:UpdateProxyRuleGroupPriorities

Write

Grants permission to modify rule group priorities on a proxy configuration

network-firewall:UpdateProxyRulePriorities

Write

Grants permission to update proxy rule priorities within a proxy rule group

network-firewall:UpdateRuleGroup

Write

Grants permission to modify a rule group

network-firewall:UpdateSubnetChangeProtection

Write

Grants permission to add or remove subnet change protection for a firewall

network-firewall:UpdateTLSInspectionConfiguration

Write

Grants permission to modify a tls inspection configuration