Query: Network Firewall firewalls should have subnet change protection enabled

Description

This control checks whether subnet change protection is enabled for an AWS Network Firewall firewall. The control fails if subnet change protection isn't enabled for the firewall.

Query

Tables used in this query:

• aws_networkfirewall_firewall

Controls using this query:

• 10 Network Firewall firewalls should have subnet change protection enabled
• Network Firewall firewalls should have subnet change protection enabled

SQL