CmdID / aws / aws network-firewall
aws network-firewall create-rule-group
Creates the specified stateless or stateful rule group, which includes the rules for network traffic inspection, a capacity setting, and tags. AWS CLI reference
12 options Its page in the AWS CLI reference
Options
--analyze-rule-groupIndicates whether you want Network Firewall to analyze the stateless rules in the rule group for rule behavior such as asymmetric routing.--capacityThe maximum operating resources that this rule group can use.--descriptionA description of the rule group.--dry-runIndicates whether you want Network Firewall to just check the validity of the request, rather than run the request.--encryption-configurationA complex type that contains settings for encryption of your rule group resources.--rule-group-nameThe descriptive name of the rule group.--rule-groupAn object that defines the rule group rules.--rulesA string containing stateful rule group rules specifications in Suricata flat format, with one rule per line.--source-metadataA complex type that contains metadata about the rule group that your own rule group is copied from.--summary-configurationAn object that contains a RuleOptions array of strings.--tagsThe key:value pairs to associate with the resource.--typeIndicates whether the rule group is stateless or stateful.