diff --git a/plugins/modules/networkfirewall_policy.py b/plugins/modules/networkfirewall_policy.py index 7053e82e367..5672a83501c 100644 --- a/plugins/modules/networkfirewall_policy.py +++ b/plugins/modules/networkfirewall_policy.py @@ -163,6 +163,34 @@ ''' EXAMPLES = ''' +# Create an AWS Network Firewall Policy with default rule order +- community.aws.networkfirewall_policy: + stateful_rule_order: 'default' + state: present + name: 'ExamplePolicy' + +# Create an AWS Network Firewall Policy with strict rule order +- community.aws.networkfirewall_policy: + stateful_rule_order: 'strict' + state: present + name: 'ExampleStrictPolicy' + + +# Create an AWS Network Firewall Policy that defaults to dropping all packets +- community.aws.networkfirewall_policy: + stateful_rule_order: 'strict' + state: present + name: 'ExampleDropPolicy' + stateful_default_actions: + - 'aws:drop_strict' + stateful_rule_groups: + - 'ExampleStrictRuleGroup' + - 'arn:aws:network-firewall:us-east-1:aws-managed:stateful-rulegroup/BotNetCommandAndControlDomainsStrictOrder' + +# Delete an AWS Network Firewall Policy +- community.aws.networkfirewall_policy: + state: absent + name: 'ExampleDropPolicy' ''' RETURN = ''' diff --git a/plugins/modules/networkfirewall_policy_info.py b/plugins/modules/networkfirewall_policy_info.py index 6131cc61eb5..a91536b6e0c 100644 --- a/plugins/modules/networkfirewall_policy_info.py +++ b/plugins/modules/networkfirewall_policy_info.py @@ -16,11 +16,13 @@ arn: description: - The ARN of the Network Firewall policy. + - Mutually exclusive with I(name). required: false type: str name: description: - The name of the Network Firewall policy. + - Mutually exclusive with I(arn). required: false type: str @@ -36,14 +38,12 @@ - community.aws.networkfirewall_policy_info: {} # Describe a Firewall policy by ARN -- community.aws.networkfirewall_rule_group_info: +- community.aws.networkfirewall_policy_info: arn: arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/ExamplePolicy # Describe a Firewall policy by name -- community.aws.networkfirewall_rule_group_info: +- community.aws.networkfirewall_policy_info: name: ExamplePolicy - type: stateful - ''' RETURN = '''