Network Firewall

Prefix network-firewall, 89 actions · Domain Security, Identity & Compliance

8 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.

User access (2)

Operator and limited (3)

AmazonVPCNetworkAccessAnalyzerFullAccessPolicyOperator
AmazonVPCReachabilityAnalyzerFullAccessPolicyOperator
AWSNetworkFirewallFullAccessOperator

Service-linked roles (3)

AWSReachabilityAnalyzerServiceRolePolicyOperator
FMSServiceRolePolicyOperator
NetworkSecurityManagerServiceRolePolicyOperator

Also grants Network Firewall actions (24)

acceptnetworkfirewalltransitgatewayattachment associateavailabilityzones associatefirewallpolicy associatesubnets attachrulegroupstoproxyconfiguration createcontainerassociation createfirewall createfirewallpolicy createfirewallpolicyv2 createproxy createproxyconfiguration createproxyrulegroup createproxyrules createrulegroup createtlsinspectionconfiguration createvpcendpointassociation deletecontainerassociation deletefirewall deletefirewallpolicy deletefirewallpolicyv2 deletenetworkfirewalltransitgatewayattachment deleteproxy deleteproxyconfiguration deleteproxyrulegroup deleteproxyrules deleteresourcepolicy deleterulegroup deletetlsinspectionconfiguration deletevpcendpointassociation describecontainerassociation describefirewall describefirewallmetadata describefirewallpolicy describefirewallpolicyv2 describeflowoperation describeloggingconfiguration describeproxy describeproxyconfiguration describeproxyrule describeproxyrulegroup describeresourcepolicy describerulegroup describerulegroupmetadata describerulegroupsummary describetlsinspectionconfiguration describevpcendpointassociation detachrulegroupsfromproxyconfiguration disassociateavailabilityzones disassociatesubnets getanalysisreportresults listanalysisreports listcontainerassociations listfirewallpolicies listfirewallpoliciesv2 listfirewalls listflowoperationresults listflowoperations listproxies listproxyconfigurations listproxyrulegroups listrulegroups listtlsinspectionconfigurations listtagsforresource listvpcendpointassociations putresourcepolicy rejectnetworkfirewalltransitgatewayattachment startanalysisreport startflowcapture startflowflush tagresource untagresource updateavailabilityzonechangeprotection updatecontainerassociation updatefirewallanalysissettings updatefirewalldeleteprotection updatefirewalldescription updatefirewallencryptionconfiguration updatefirewallpolicy updatefirewallpolicychangeprotection updatefirewallpolicyv2 updateloggingconfiguration updateproxy updateproxyconfiguration updateproxyrule updateproxyrulegrouppriorities updateproxyrulepriorities updaterulegroup updatesubnetchangeprotection updatetlsinspectionconfiguration

Actions (89)

Network Firewall actions that managed policies grant
Action	Access level	Policies granting without limits	Policies granting with resource or condition limits
network-firewall:AcceptNetworkFirewallTransitGatewayAttachment	Write	4	1
network-firewall:AssociateAvailabilityZones	Write	4	2
network-firewall:AssociateFirewallPolicy	Write	5	3
network-firewall:AssociateSubnets	Write	5	3
network-firewall:AttachRuleGroupsToProxyConfiguration	Write	4	1
network-firewall:CreateContainerAssociation	Write	4	1
network-firewall:CreateFirewall	Write	5	3
network-firewall:CreateFirewallPolicy	Write	5	3
network-firewall:CreateFirewallPolicyV2	Write	4	2
network-firewall:CreateProxy	Write	4	1
network-firewall:CreateProxyConfiguration	Write	4	1
network-firewall:CreateProxyRuleGroup	Write	4	1
network-firewall:CreateProxyRules	Write	4	1
network-firewall:CreateRuleGroup	Write	4	2
network-firewall:CreateTLSInspectionConfiguration	Write	4	2
network-firewall:CreateVpcEndpointAssociation	Write	4	1
network-firewall:DeleteContainerAssociation	Write	4	1
network-firewall:DeleteFirewall	Write	4	4
network-firewall:DeleteFirewallPolicy	Write	4	4
network-firewall:DeleteFirewallPolicyV2	Write	4	2
network-firewall:DeleteNetworkFirewallTransitGatewayAttachment	Write	4	1
network-firewall:DeleteProxy	Write	4	1
network-firewall:DeleteProxyConfiguration	Write	4	1
network-firewall:DeleteProxyRuleGroup	Write	4	1
network-firewall:DeleteProxyRules	Write	4	1
network-firewall:DeleteResourcePolicy	Write	5	3
network-firewall:DeleteRuleGroup	Write	4	2
network-firewall:DeleteTLSInspectionConfiguration	Write	4	2
network-firewall:DeleteVpcEndpointAssociation	Write	4	1
network-firewall:DescribeContainerAssociation	Read	10	1
network-firewall:DescribeFirewall	Read	20	7
network-firewall:DescribeFirewallMetadata	Read	13	2
network-firewall:DescribeFirewallPolicy	Read	19	7
network-firewall:DescribeFirewallPolicyV2	Read	10	1
network-firewall:DescribeFlowOperation	Read	10	3
network-firewall:DescribeLoggingConfiguration	Read	17	3
network-firewall:DescribeProxy	Read	10	2
network-firewall:DescribeProxyConfiguration	Read	10	2
network-firewall:DescribeProxyRule	Read	10	2
network-firewall:DescribeProxyRuleGroup	Read	10	2
network-firewall:DescribeResourcePolicy	Read	18	4
network-firewall:DescribeRuleGroup	Read	21	7
network-firewall:DescribeRuleGroupMetadata	Read	13	3
network-firewall:DescribeRuleGroupSummary	Read	9	1
network-firewall:DescribeTLSInspectionConfiguration	Read	14	5
network-firewall:DescribeVpcEndpointAssociation	Read	11	3
network-firewall:DetachRuleGroupsFromProxyConfiguration	Write	4	1
network-firewall:DisassociateAvailabilityZones	Write	4	2
network-firewall:DisassociateSubnets	Write	5	3
network-firewall:GetAnalysisReportResults	Read	4	3
network-firewall:ListAnalysisReports	List	10	3
network-firewall:ListContainerAssociations	List	10	1
network-firewall:ListFirewallPolicies	List	19	7
network-firewall:ListFirewallPoliciesV2	List	10	1
network-firewall:ListFirewalls	List	22	7
network-firewall:ListFlowOperationResults	Read	10	3
network-firewall:ListFlowOperations	List	10	3
network-firewall:ListProxies	List	10	2
network-firewall:ListProxyConfigurations	List	10	2
network-firewall:ListProxyRuleGroups	List	10	2
network-firewall:ListRuleGroups	List	21	7
network-firewall:ListTLSInspectionConfigurations	List	14	5
network-firewall:ListTagsForResource	List	11	5
network-firewall:ListVpcEndpointAssociations	List	11	3
network-firewall:PutResourcePolicy	Write	4	4
network-firewall:RejectNetworkFirewallTransitGatewayAttachment	Write	4	1
network-firewall:StartAnalysisReport	Write	4	2
network-firewall:StartFlowCapture	Write	4	2
network-firewall:StartFlowFlush	Write	4	2
network-firewall:TagResource	Tagging	5	4
network-firewall:UntagResource	Tagging	5	3
network-firewall:UpdateAvailabilityZoneChangeProtection	Write	4	1
network-firewall:UpdateContainerAssociation	Write	4	1
network-firewall:UpdateFirewallAnalysisSettings	Write	4	2
network-firewall:UpdateFirewallDeleteProtection	Write	5	3
network-firewall:UpdateFirewallDescription	Write	4	2
network-firewall:UpdateFirewallEncryptionConfiguration	Write	4	2
network-firewall:UpdateFirewallPolicy	Write	5	3
network-firewall:UpdateFirewallPolicyChangeProtection	Write	5	3
network-firewall:UpdateFirewallPolicyV2	Write	4	2
network-firewall:UpdateLoggingConfiguration	Write	5	3
network-firewall:UpdateProxy	Write	4	1
network-firewall:UpdateProxyConfiguration	Write	4	1
network-firewall:UpdateProxyRule	Write	4	1
network-firewall:UpdateProxyRuleGroupPriorities	Write	4	1
network-firewall:UpdateProxyRulePriorities	Write	4	1
network-firewall:UpdateRuleGroup	Write	4	2
network-firewall:UpdateSubnetChangeProtection	Write	5	3
network-firewall:UpdateTLSInspectionConfiguration	Write	4	2