availability_zones

Creates, updates, deletes, gets or lists an availability_zones resource.

Overview

Name	availability_zones
Type	Resource
Id	aws.network_firewall.availability_zones

Fields

The following fields are returned by SELECT queries:

SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
associate_availability_zones	update	region, AvailabilityZoneMappings		Associates the specified Availability Zones with a transit gateway-attached firewall. For each Availability Zone, Network Firewall creates a firewall endpoint to process traffic. You can specify one or more Availability Zones where you want to deploy the firewall. After adding Availability Zones, you must update your transit gateway route tables to direct traffic through the new firewall endpoints. Use DescribeFirewall to monitor the status of the new endpoints.
disassociate_availability_zones	exec	region, AvailabilityZoneMappings		Removes the specified Availability Zone associations from a transit gateway-attached firewall. This removes the firewall endpoints from these Availability Zones and stops traffic filtering in those zones. Before removing an Availability Zone, ensure you've updated your transit gateway route tables to redirect traffic appropriately. If AvailabilityZoneChangeProtection is enabled, you must first disable it using UpdateAvailabilityZoneChangeProtection. To verify the status of your Availability Zone changes, use DescribeFirewall.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

UPDATE examples

associate_availability_zones

Associates the specified Availability Zones with a transit gateway-attached firewall. For each Availability Zone, Network Firewall creates a firewall endpoint to process traffic. You can specify one or more Availability Zones where you want to deploy the firewall. After adding Availability Zones, you must update your transit gateway route tables to direct traffic through the new firewall endpoints. Use DescribeFirewall to monitor the status of the new endpoints.

UPDATE aws.network_firewall.availability_zones
SET 
UpdateToken = '{{ UpdateToken }}',
FirewallArn = '{{ FirewallArn }}',
FirewallName = '{{ FirewallName }}',
AvailabilityZoneMappings = '{{ AvailabilityZoneMappings }}'
WHERE 
region = '{{ region }}' --required
AND AvailabilityZoneMappings = '{{ AvailabilityZoneMappings }}' --required
RETURNING
availability_zone_mappings,
firewall_arn,
firewall_name,
update_token;

Lifecycle Methods

disassociate_availability_zones

Removes the specified Availability Zone associations from a transit gateway-attached firewall. This removes the firewall endpoints from these Availability Zones and stops traffic filtering in those zones. Before removing an Availability Zone, ensure you've updated your transit gateway route tables to redirect traffic appropriately. If AvailabilityZoneChangeProtection is enabled, you must first disable it using UpdateAvailabilityZoneChangeProtection. To verify the status of your Availability Zone changes, use DescribeFirewall.

EXEC aws.network_firewall.availability_zones.disassociate_availability_zones 
@region='{{ region }}' --required 
@@json=
'{
"UpdateToken": "{{ UpdateToken }}", 
"FirewallArn": "{{ FirewallArn }}", 
"FirewallName": "{{ FirewallName }}", 
"AvailabilityZoneMappings": "{{ AvailabilityZoneMappings }}"
}'
;