libZSservicesZSamazonka-network-firewallZSamazonka-network-firewall
Copyright(c) 2013-2021 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay+amazonka@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone

Amazonka.NetworkFirewall.AssociateSubnets

Description

Associates the specified subnets in the Amazon VPC to the firewall. You can specify one subnet for each of the Availability Zones that the VPC spans.

This request creates an AWS Network Firewall firewall endpoint in each of the subnets. To enable the firewall's protections, you must also modify the VPC's route tables for each subnet's Availability Zone, to redirect the traffic that's coming into and going out of the zone through the firewall endpoint.

Synopsis

Creating a Request

data AssociateSubnets Source #

See: newAssociateSubnets smart constructor.

Constructors

AssociateSubnets' 

Fields

  • updateToken :: Maybe Text

    An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request.

    To make an unconditional change to the firewall, omit the token in your update request. Without the token, Network Firewall performs your updates regardless of whether the firewall has changed since you last retrieved it.

    To make a conditional change to the firewall, provide the token in your update request. Network Firewall uses the token to ensure that the firewall hasn't changed since you last retrieved it. If it has changed, the operation fails with an InvalidTokenException. If this happens, retrieve the firewall again to get a current copy of it with a new token. Reapply your changes as needed, then try the operation again using the new token.

  • firewallArn :: Maybe Text

    The Amazon Resource Name (ARN) of the firewall.

    You must specify the ARN or the name, and you can specify both.

  • firewallName :: Maybe Text

    The descriptive name of the firewall. You can't change the name of a firewall after you create it.

    You must specify the ARN or the name, and you can specify both.

  • subnetMappings :: [SubnetMapping]

    The IDs of the subnets that you want to associate with the firewall.

Instances

Instances details
Eq AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Read AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Show AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Generic AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Associated Types

type Rep AssociateSubnets :: Type -> Type #

NFData AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Methods

rnf :: AssociateSubnets -> () #

Hashable AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

ToJSON AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

AWSRequest AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Associated Types

type AWSResponse AssociateSubnets #

ToHeaders AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

ToPath AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

ToQuery AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

type Rep AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

type Rep AssociateSubnets = D1 ('MetaData "AssociateSubnets" "Amazonka.NetworkFirewall.AssociateSubnets" "libZSservicesZSamazonka-network-firewallZSamazonka-network-firewall" 'False) (C1 ('MetaCons "AssociateSubnets'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "updateToken") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "firewallArn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "firewallName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "subnetMappings") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 [SubnetMapping]))))
type AWSResponse AssociateSubnets Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

newAssociateSubnets :: AssociateSubnets Source #

Create a value of AssociateSubnets with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:updateToken:AssociateSubnets', associateSubnets_updateToken - An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request.

To make an unconditional change to the firewall, omit the token in your update request. Without the token, Network Firewall performs your updates regardless of whether the firewall has changed since you last retrieved it.

To make a conditional change to the firewall, provide the token in your update request. Network Firewall uses the token to ensure that the firewall hasn't changed since you last retrieved it. If it has changed, the operation fails with an InvalidTokenException. If this happens, retrieve the firewall again to get a current copy of it with a new token. Reapply your changes as needed, then try the operation again using the new token.

$sel:firewallArn:AssociateSubnets', associateSubnets_firewallArn - The Amazon Resource Name (ARN) of the firewall.

You must specify the ARN or the name, and you can specify both.

$sel:firewallName:AssociateSubnets', associateSubnets_firewallName - The descriptive name of the firewall. You can't change the name of a firewall after you create it.

You must specify the ARN or the name, and you can specify both.

$sel:subnetMappings:AssociateSubnets', associateSubnets_subnetMappings - The IDs of the subnets that you want to associate with the firewall.

Request Lenses

associateSubnets_updateToken :: Lens' AssociateSubnets (Maybe Text) Source #

An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request.

To make an unconditional change to the firewall, omit the token in your update request. Without the token, Network Firewall performs your updates regardless of whether the firewall has changed since you last retrieved it.

To make a conditional change to the firewall, provide the token in your update request. Network Firewall uses the token to ensure that the firewall hasn't changed since you last retrieved it. If it has changed, the operation fails with an InvalidTokenException. If this happens, retrieve the firewall again to get a current copy of it with a new token. Reapply your changes as needed, then try the operation again using the new token.

associateSubnets_firewallArn :: Lens' AssociateSubnets (Maybe Text) Source #

The Amazon Resource Name (ARN) of the firewall.

You must specify the ARN or the name, and you can specify both.

associateSubnets_firewallName :: Lens' AssociateSubnets (Maybe Text) Source #

The descriptive name of the firewall. You can't change the name of a firewall after you create it.

You must specify the ARN or the name, and you can specify both.

associateSubnets_subnetMappings :: Lens' AssociateSubnets [SubnetMapping] Source #

The IDs of the subnets that you want to associate with the firewall.

Destructuring the Response

data AssociateSubnetsResponse Source #

See: newAssociateSubnetsResponse smart constructor.

Constructors

AssociateSubnetsResponse' 

Fields

  • subnetMappings :: Maybe [SubnetMapping]

    The IDs of the subnets that are associated with the firewall.

  • updateToken :: Maybe Text

    An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request.

    To make an unconditional change to the firewall, omit the token in your update request. Without the token, Network Firewall performs your updates regardless of whether the firewall has changed since you last retrieved it.

    To make a conditional change to the firewall, provide the token in your update request. Network Firewall uses the token to ensure that the firewall hasn't changed since you last retrieved it. If it has changed, the operation fails with an InvalidTokenException. If this happens, retrieve the firewall again to get a current copy of it with a new token. Reapply your changes as needed, then try the operation again using the new token.

  • firewallArn :: Maybe Text

    The Amazon Resource Name (ARN) of the firewall.

  • firewallName :: Maybe Text

    The descriptive name of the firewall. You can't change the name of a firewall after you create it.

  • httpStatus :: Int

    The response's http status code.

Instances

Instances details
Eq AssociateSubnetsResponse Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Read AssociateSubnetsResponse Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Show AssociateSubnetsResponse Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Generic AssociateSubnetsResponse Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

Associated Types

type Rep AssociateSubnetsResponse :: Type -> Type #

NFData AssociateSubnetsResponse Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

type Rep AssociateSubnetsResponse Source # 
Instance details

Defined in Amazonka.NetworkFirewall.AssociateSubnets

type Rep AssociateSubnetsResponse = D1 ('MetaData "AssociateSubnetsResponse" "Amazonka.NetworkFirewall.AssociateSubnets" "libZSservicesZSamazonka-network-firewallZSamazonka-network-firewall" 'False) (C1 ('MetaCons "AssociateSubnetsResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "subnetMappings") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [SubnetMapping])) :*: S1 ('MetaSel ('Just "updateToken") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "firewallArn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: (S1 ('MetaSel ('Just "firewallName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))))

newAssociateSubnetsResponse Source #

Create a value of AssociateSubnetsResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:subnetMappings:AssociateSubnets', associateSubnetsResponse_subnetMappings - The IDs of the subnets that are associated with the firewall.

$sel:updateToken:AssociateSubnets', associateSubnetsResponse_updateToken - An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request.

To make an unconditional change to the firewall, omit the token in your update request. Without the token, Network Firewall performs your updates regardless of whether the firewall has changed since you last retrieved it.

To make a conditional change to the firewall, provide the token in your update request. Network Firewall uses the token to ensure that the firewall hasn't changed since you last retrieved it. If it has changed, the operation fails with an InvalidTokenException. If this happens, retrieve the firewall again to get a current copy of it with a new token. Reapply your changes as needed, then try the operation again using the new token.

$sel:firewallArn:AssociateSubnets', associateSubnetsResponse_firewallArn - The Amazon Resource Name (ARN) of the firewall.

$sel:firewallName:AssociateSubnets', associateSubnetsResponse_firewallName - The descriptive name of the firewall. You can't change the name of a firewall after you create it.

$sel:httpStatus:AssociateSubnetsResponse', associateSubnetsResponse_httpStatus - The response's http status code.

Response Lenses

associateSubnetsResponse_subnetMappings :: Lens' AssociateSubnetsResponse (Maybe [SubnetMapping]) Source #

The IDs of the subnets that are associated with the firewall.

associateSubnetsResponse_updateToken :: Lens' AssociateSubnetsResponse (Maybe Text) Source #

An optional token that you can use for optimistic locking. Network Firewall returns a token to your requests that access the firewall. The token marks the state of the firewall resource at the time of the request.

To make an unconditional change to the firewall, omit the token in your update request. Without the token, Network Firewall performs your updates regardless of whether the firewall has changed since you last retrieved it.

To make a conditional change to the firewall, provide the token in your update request. Network Firewall uses the token to ensure that the firewall hasn't changed since you last retrieved it. If it has changed, the operation fails with an InvalidTokenException. If this happens, retrieve the firewall again to get a current copy of it with a new token. Reapply your changes as needed, then try the operation again using the new token.

associateSubnetsResponse_firewallArn :: Lens' AssociateSubnetsResponse (Maybe Text) Source #

The Amazon Resource Name (ARN) of the firewall.

associateSubnetsResponse_firewallName :: Lens' AssociateSubnetsResponse (Maybe Text) Source #

The descriptive name of the firewall. You can't change the name of a firewall after you create it.