(network-firewall): unable to deploy the `CfnFirewallPolicy` construct
See original GitHub issueI am unable to deploy the CfnFirewallPolicy construct fixed in the latest update. in typescript construct is valid, but in cloudformation its giving below error:
Properties validation failed for resource policy with message:
#/FirewallPolicy/StatelessDefaultActions: expected type: JSONArray, found: JSONObject #/FirewallPolicy/StatelessFragmentDefaultActions: expected type: JSONArray, found: JSONObject
same issue was reported (network-firewall): unable to deploy the CfnFirewallPolicy
construct #11974 and fixed in 1.83 CDK version but still am getting this error.
Using CDK 1.83
CDK Sample : Template
const firewallpolicy = new CfnFirewallPolicy(this, 'policy', {
firewallPolicyName: "cdkfirewallpolicy",
firewallPolicy: {
statelessDefaultActions: {
statelessActions: ['aws:pass'],
},
statelessFragmentDefaultActions: {
statelessActions: ['aws:drop'],
},
},
});
Issue Analytics
- State:
- Created 3 years ago
- Comments:11 (7 by maintainers)
Top Results From Across the Web
class CfnFirewallPolicy (construct) · AWS CDK
A CloudFormation AWS::NetworkFirewall::FirewallPolicy . Use the FirewallPolicy to define the stateless and stateful network traffic filtering behavior for ...
Read more >AWS re:Inforce 2022 - Deploying AWS Network Firewall at scale
When the Log4j vulnerability became known in December 2021, athenahealth made the decision to increase their cloud security posture by ...
Read more >awsnetworkfirewall - Go Packages
A CloudFormation `AWS::NetworkFirewall::FirewallPolicy`. Use the `FirewallPolicy` to define the stateless and stateful network traffic filtering behavior for ...
Read more >NetworkFirewall — Boto3 Docs 1.26.35 documentation - AWS
You can't change this setting after you create the firewall. SubnetMappings (list) --. [REQUIRED]. The public subnets to use for your Network Firewall...
Read more >CfnFirewallPolicy.CustomActionProperty (software.amazon.awscdk ...
You define and name the custom actions that you want to be able to use, ... you should change. import software.amazon.awscdk.services.networkfirewall.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@skinny85 Thanks!
I already updated and working on module creation.
Policy module done and now working on rule group.
Looking good with the new cfnspec
The example above needs to be modified but then it generates deployable CloudFormation
I’ve tested the issue I had with ‘TargetTypes’ and that’s also working now.