AWS::NetworkFirewall::Firewall VpcEndpoint - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::NetworkFirewall::Firewall VpcEndpoint

The VPC and subnets for a proxy mode firewall endpoint. This is used in CreateFirewall when NoSourcePreservation is TRUE, to specify where Network Firewall creates the firewall endpoint.

This differs from AWS::NetworkFirewall::VpcEndpointAssociation, which defines additional secondary endpoints for a firewall in other VPCs.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "SubnetMappings" : [ SubnetMapping, ... ],
  "VpcId" : String
}

Properties

SubnetMappings

The subnets in which Network Firewall creates the firewall endpoint for a proxy mode firewall. Each subnet must belong to a different Availability Zone in the VPC.

Required: No

Type: Array of SubnetMapping

Update requires: Replacement

VpcId

The unique identifier of the VPC where Network Firewall creates the proxy mode firewall endpoint.

Required: No

Type: String

Pattern: ^vpc-[0-9a-f]+$

Minimum: 1

Maximum: 128

Update requires: Replacement