aws network-firewall create-firewall

Creates an Network Firewall Firewall and accompanying FirewallStatus for a VPC. AWS CLI reference

Options

17 in the AWS CLI reference

--availability-zone-change-protection, --no-source-preservationOptional.

--availability-zone-mappingsRequired.

--delete-protectionA flag indicating whether it is possible to delete the firewall.

--descriptionA description of the firewall.

--enabled-analysis-typesAn optional setting indicating the specific traffic analysis types to enable on the firewall.

--encryption-configurationA complex type that contains settings for encryption of your firewall resources.

--firewall-nameThe descriptive name of the firewall.

--firewall-policy-arnThe Amazon Resource Name (ARN) of the FirewallPolicy that you want to use for the firewall.

--firewall-policy-change-protectionA setting indicating whether the firewall is protected against a change to the firewall policy association.

--nat-gateway-mappingsThe NAT gateways that the firewall uses to proxy traffic when NoSourcePreservation is TRUE.

--proxy-settingsThe listener configuration for a proxy mode firewall, used when NoSourcePreservation is TRUE.

--subnet-change-protectionA setting indicating whether the firewall is protected against changes to the subnet associations.

--subnet-mappingsThe public subnets to use for your Network Firewall firewalls.

--tagsThe key:value pairs to associate with the resource.

--transit-gateway-idRequired when creating a transit gateway-attached firewall.

--vpc-endpointThe VPC and subnets for the firewall endpoint, used when NoSourcePreservation is TRUE.

--vpc-idThe unique identifier of the VPC where Network Firewall should create the firewall.