question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

(aws-networkfirewall): unable to set IpSets in RuleVariables

See original GitHub issue

not able to set IpSets in RuleVariables

Reproduction Steps

The following is the snippet in python

           rule_group={
                "ruleVariables": {
                    "iPSets": {
                        "HOME_SET": {
                            "definition": [
                                "192.168.0.0/24"
                            ]
                        }
                    },
                    "portSets": {
                        "MYSQL": {
                            "definition": [
                                "3306"
                            ]
                        }
                    }
                },

What did you expect to happen?

It’s deployed successfully. When checking with describe-rule-group using cli, IpSets are not shown, only PortSets are in the output.

I expect IpSets are created as below

    "RuleVariables": {
        "IPSets": {
            "HOME_SET": {
                "Definition": [
                    "10.160.0.0/24"
                ]
            }
        }
    },

What actually happened?

IPSets not created

Environment

  • **CDK CLI Version 😗*1.110.1 (build 0028d09)
  • Framework Version:
  • **Node.js Version:**v14.15.5
  • **OS 😗*macOS 11.4
  • **Language (Version)😗*Python 3.9.5

Other

N/A


This is 🐛 Bug Report

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Reactions:2
  • Comments:6 (4 by maintainers)

github_iconTop GitHub Comments

1reaction
peterwoodworthcommented, Jan 19, 2022

You’re right, the issue can be closed. Thanks for letting us know 🙂

1reaction
jumiccommented, Jan 18, 2022

@skinny85 The problem should be fixed in #18275. You can probably close this issue.

Read more comments on GitHub >

github_iconTop Results From Across the Web

RuleVariables - AWS Network Firewall
A list of IP addresses and address ranges, in CIDR notation. Type: String to IPSet object map. Key Length Constraints: Minimum length of...
Read more >
Examples of stateful rules for Network Firewall
This section lists examples of Suricata compatible rules that could be used with AWS Network Firewall.
Read more >
IPSetReference - AWS Network Firewall
An IP set reference is a rule variable that references a resource that you create and manage in another AWS service, such as...
Read more >
NetworkFirewall::RuleGroup IPSet - AWS CloudFormation
A list of IP addresses and address ranges, in CIDR notation. This is part of a AWS::NetworkFirewall::RuleGroup RuleVariables.
Read more >
CreateRuleGroup - AWS Network Firewall
You can't change or exceed this capacity when you update the rule group, so leave room for your rule group to grow. Capacity...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found