steampipe plugin install awssteampipe plugin install aws

Table: aws_networkfirewall_firewall_policy

An AWS Network Firewall firewall policy defines the monitoring and protection behavior for a firewall. The details of the behavior are defined in the rule groups that you add to your policy, and in some policy default settings. To use a firewall policy, you associate it with one or more firewalls.

Examples

Basic info

select
  arn,
  name,
  description,
  firewall_policy_status,
  region,
  tags
from
  aws_networkfirewall_firewall_policy;

List policies using default encryption

select
  arn,
  name,
  description,
  firewall_policy_status,
  encryption_configuration
from
  aws_networkfirewall_firewall_policy
where
  encryption_configuration ->> 'Type' = 'AWS_OWNED_KMS_KEY';

List inactive policies

select
  arn,
  name,
  description,
  firewall_policy_status,
  region,
  tags
from
  aws_networkfirewall_firewall_policy
where
  firewall_policy_status != 'ACTIVE';

Get policy's default stateful actions and rule group details

select
  arn,
  name as firewall_policy_name,
  firewall_policy_status,
  firewall_policy -> 'StatefulDefaultActions' as stateful_default_actions,
  firewall_policy -> 'StatefulRuleGroupReferences' as stateful_rule_group_references
from
  aws_networkfirewall_firewall_policy;

Get policy's default stateless actions and rule group details for full packets

select
  arn,
  name as firewall_policy_name,
  firewall_policy_status,
  firewall_policy -> 'StatelessDefaultActions' as stateless_default_actions,
  firewall_policy -> 'StatelessRuleGroupReferences' as stateless_rule_group_references
from
  aws_networkfirewall_firewall_policy;

Get policy's default stateless actions and rule group details for fragmented packets

select
  arn,
  name as firewall_policy_name,
  firewall_policy_status,
  firewall_policy -> 'StatelessFragmentDefaultActions' as stateless_default_actions,
  firewall_policy -> 'StatelessRuleGroupReferences' as stateless_rule_group_references
from
  aws_networkfirewall_firewall_policy;

Get policy's custom stateless actions

select
  arn,
  name as firewall_policy_name,
  firewall_policy_status,
  firewall_policy -> 'StatelessRuleGroupReferences' ->> 'ActionName' as custom_action_name,
  firewall_policy -> 'StatelessRuleGroupReferences' ->> 'ActionDefinition' as custom_action_definition
from
  aws_networkfirewall_firewall_policy;

.inspect aws_networkfirewall_firewall_policy

AWS Network Firewall Policy

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Amazon Resource Name (ARN) of the rule group.
consumed_stateful_rule_capacity	bigint	The number of capacity units currently consumed by the policy's stateful rules.
consumed_stateless_rule_capacity	bigint	The number of capacity units currently consumed by the policy's stateless rules.
description	text	A description of the firewall policy.
encryption_configuration	jsonb	A complex type that contains the Amazon Web Services KMS encryption configuration settings for your firewall policy.
firewall_policy	jsonb	The policy for the specified firewall policy.
firewall_policy_id	text	The unique identifier for the firewall policy.
firewall_policy_status	text	The current status of the firewall policy.
last_modified_time	timestamp with time zone	The last time that the firewall policy was changed.
name	text	The descriptive name of the rule group.
number_of_associations	bigint	The number of firewall policies that use this rule group.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags assigned to the resource.
title	text	Title of the resource.

turbot/aws