AWS::NetworkFirewall::Firewall AvailabilityZoneMapping - AWS CloudFormation
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::NetworkFirewall::Firewall AvailabilityZoneMapping

Defines the mapping between an Availability Zone and a firewall endpoint for a transit gateway-attached firewall. Each mapping represents where the firewall can process traffic. You use these mappings when calling CreateFirewall, AssociateAvailabilityZones, and DisassociateAvailabilityZones.

To retrieve the current Availability Zone mappings for a firewall, use DescribeFirewall.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "AvailabilityZone" : String }

YAML

AvailabilityZone: String

Properties

AvailabilityZone

The ID of the Availability Zone where the firewall endpoint is located. For example, us-east-2a. The Availability Zone must be in the same Region as the transit gateway.

Required: Yes

Type: String

Pattern: \S+

Minimum: 1

Maximum: 128

Update requires: No interruption