aws.fms.get_violation_details

Example SQL Queries

SELECT * FROM
aws.fms.get_violation_details
WHERE
"policy_id" = 'VALUE'
AND "member_account" = 'VALUE'
AND "resource_id" = 'VALUE'
AND "resource_type" = 'VALUE';

Description

Retrieves violations for a resource based on the specified Firewall Manager policy and Amazon Web Services account.

Table Definition

Column Name	Column Data Type
`member_account` Required Input Column The Amazon Web Services account ID that you want the details for.	VARCHAR
`policy_id` Required Input Column The ID of the Firewall Manager policy that you want the details for. You can get violation details for the following policy types: DNS Firewall Imported Network Firewall Network Firewall Security group content audit Network ACL Third-party firewall	VARCHAR
`resource_id` Required Input Column The ID of the resource that has violations.	VARCHAR
`resource_type` Required Input Column The resource type. This is in the format shown in the Amazon Web Services Resource Types Reference. Supported resource types are: `AWS::EC2::Instance`, `AWS::EC2::NetworkInterface`, `AWS::EC2::SecurityGroup`, `AWS::NetworkFirewall::FirewallPolicy`, and `AWS::EC2::Subnet`.	VARCHAR
`_aws_profile` Input Column The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.	STRUCT( "type" VARCHAR, "name" VARCHAR, "account_id" VARCHAR, "via_profile_name" VARCHAR, "assumed_role_arn" VARCHAR, "organization" STRUCT( "account_name" VARCHAR, "id" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[], "master_account" STRUCT( "id" VARCHAR, "email" VARCHAR ), "parents" STRUCT( "type" VARCHAR, "id" VARCHAR, "name" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[] )[] ) )
Show child fields `_aws_profile.account_id` The AWS account id `_aws_profile.assumed_role_arn` The ARN of the assumed role `_aws_profile.name` The unique name of the profile. `_aws_profile.organization` Information about this profile's membership in the AWS organization. Show child fields `_aws_profile.organization.account_name` The name of account speciifed by the organization `_aws_profile.organization.id` The organization id `_aws_profile.organization.master_account` Show child fields `_aws_profile.organization.master_account.email` The organization master account email address `_aws_profile.organization.master_account.id` The organization master account id `_aws_profile.organization.parents[]` Show child fields `_aws_profile.organization.parents[].id` The id of the parent `_aws_profile.organization.parents[].name` The name of the parent `_aws_profile.organization.parents[].tags[]` Show child fields `_aws_profile.organization.parents[].tags[].key` `_aws_profile.organization.parents[].tags[].value` `_aws_profile.organization.parents[].type` The type of parent can be an organization unit or a root `_aws_profile.organization.tags[]` Show child fields `_aws_profile.organization.tags[].key` `_aws_profile.organization.tags[].value` `_aws_profile.type` The type of profile, either 'credentials' or 'assumed_role' `_aws_profile.via_profile_name` This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
`_aws_region` Input Column The AWS region to use.	VARCHAR
`violation_detail` Violation detail for a resource.	STRUCT( "policy_id" VARCHAR, "member_account" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR, "resource_violations" STRUCT( "aws_vpc_security_group_violation" STRUCT( "violation_target" VARCHAR, "violation_target_description" VARCHAR, "partial_matches" STRUCT( "reference" VARCHAR, "target_violation_reasons" VARCHAR[] )[], "possible_security_group_remediation_actions" STRUCT( "remediation_action_type" VARCHAR, "description" VARCHAR, "remediation_result" STRUCT( "ipv4_range" VARCHAR, "ipv6_range" VARCHAR, "prefix_list_id" VARCHAR, "protocol" VARCHAR, "from_port" BIGINT, "to_port" BIGINT ), "is_default_action" BOOLEAN )[] ), "aws_ec2_network_interface_violation" STRUCT( "violation_target" VARCHAR, "violating_security_groups" VARCHAR[] ), "aws_ec2_instance_violation" STRUCT( "violation_target" VARCHAR, "aws_ec2_network_interface_violations" STRUCT( "violation_target" VARCHAR, "violating_security_groups" VARCHAR[] )[] ), "network_firewall_missing_firewall_violation" STRUCT( "violation_target" VARCHAR, "vpc" VARCHAR, "availability_zone" VARCHAR, "target_violation_reason" VARCHAR ), "network_firewall_missing_subnet_violation" STRUCT( "violation_target" VARCHAR, "vpc" VARCHAR, "availability_zone" VARCHAR, "target_violation_reason" VARCHAR ), "network_firewall_missing_expected_rt_violation" STRUCT( "violation_target" VARCHAR, "vpc" VARCHAR, "availability_zone" VARCHAR, "current_route_table" VARCHAR, "expected_route_table" VARCHAR ), "network_firewall_policy_modified_violation" STRUCT( "violation_target" VARCHAR, "current_policy_description" STRUCT( "stateless_rule_groups" STRUCT( "rule_group_name" VARCHAR, "resource_id" VARCHAR, "priority" BIGINT )[], "stateless_default_actions" VARCHAR[], "stateless_fragment_default_actions" VARCHAR[], "stateless_custom_actions" VARCHAR[], "stateful_rule_groups" STRUCT( "rule_group_name" VARCHAR, "resource_id" VARCHAR, "priority" BIGINT, "override" STRUCT( "action" VARCHAR ) )[], "stateful_default_actions" VARCHAR[], "stateful_engine_options" STRUCT( "rule_order" VARCHAR, "stream_exception_policy" VARCHAR ) ), "expected_policy_description" STRUCT( "stateless_rule_groups" STRUCT( "rule_group_name" VARCHAR, "resource_id" VARCHAR, "priority" BIGINT )[], "stateless_default_actions" VARCHAR[], "stateless_fragment_default_actions" VARCHAR[], "stateless_custom_actions" VARCHAR[], "stateful_rule_groups" STRUCT( "rule_group_name" VARCHAR, "resource_id" VARCHAR, "priority" BIGINT, "override" STRUCT( "action" VARCHAR ) )[], "stateful_default_actions" VARCHAR[], "stateful_engine_options" STRUCT( "rule_order" VARCHAR, "stream_exception_policy" VARCHAR ) ) ), "network_firewall_internet_traffic_not_inspected_violation" STRUCT( "subnet_id" VARCHAR, "subnet_availability_zone" VARCHAR, "route_table_id" VARCHAR, "violating_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "is_route_table_used_in_different_az" BOOLEAN, "current_firewall_subnet_route_table" VARCHAR, "expected_firewall_endpoint" VARCHAR, "firewall_subnet_id" VARCHAR, "expected_firewall_subnet_routes" STRUCT( "ip_v4_cidr" VARCHAR, "prefix_list_id" VARCHAR, "ip_v6_cidr" VARCHAR, "contributing_subnets" VARCHAR[], "allowed_targets" VARCHAR[], "route_table_id" VARCHAR )[], "actual_firewall_subnet_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "internet_gateway_id" VARCHAR, "current_internet_gateway_route_table" VARCHAR, "expected_internet_gateway_routes" STRUCT( "ip_v4_cidr" VARCHAR, "prefix_list_id" VARCHAR, "ip_v6_cidr" VARCHAR, "contributing_subnets" VARCHAR[], "allowed_targets" VARCHAR[], "route_table_id" VARCHAR )[], "actual_internet_gateway_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "vpc_id" VARCHAR ), "network_firewall_invalid_route_configuration_violation" STRUCT( "affected_subnets" VARCHAR[], "route_table_id" VARCHAR, "is_route_table_used_in_different_az" BOOLEAN, "violating_route" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR ), "current_firewall_subnet_route_table" VARCHAR, "expected_firewall_endpoint" VARCHAR, "actual_firewall_endpoint" VARCHAR, "expected_firewall_subnet_id" VARCHAR, "actual_firewall_subnet_id" VARCHAR, "expected_firewall_subnet_routes" STRUCT( "ip_v4_cidr" VARCHAR, "prefix_list_id" VARCHAR, "ip_v6_cidr" VARCHAR, "contributing_subnets" VARCHAR[], "allowed_targets" VARCHAR[], "route_table_id" VARCHAR )[], "actual_firewall_subnet_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "internet_gateway_id" VARCHAR, "current_internet_gateway_route_table" VARCHAR, "expected_internet_gateway_routes" STRUCT( "ip_v4_cidr" VARCHAR, "prefix_list_id" VARCHAR, "ip_v6_cidr" VARCHAR, "contributing_subnets" VARCHAR[], "allowed_targets" VARCHAR[], "route_table_id" VARCHAR )[], "actual_internet_gateway_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "vpc_id" VARCHAR ), "network_firewall_black_hole_route_detected_violation" STRUCT( "violation_target" VARCHAR, "route_table_id" VARCHAR, "vpc_id" VARCHAR, "violating_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[] ), "network_firewall_unexpected_firewall_routes_violation" STRUCT( "firewall_subnet_id" VARCHAR, "violating_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "route_table_id" VARCHAR, "firewall_endpoint" VARCHAR, "vpc_id" VARCHAR ), "network_firewall_unexpected_gateway_routes_violation" STRUCT( "gateway_id" VARCHAR, "violating_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "route_table_id" VARCHAR, "vpc_id" VARCHAR ), "network_firewall_missing_expected_routes_violation" STRUCT( "violation_target" VARCHAR, "expected_routes" STRUCT( "ip_v4_cidr" VARCHAR, "prefix_list_id" VARCHAR, "ip_v6_cidr" VARCHAR, "contributing_subnets" VARCHAR[], "allowed_targets" VARCHAR[], "route_table_id" VARCHAR )[], "vpc_id" VARCHAR ), "dns_rule_group_priority_conflict_violation" STRUCT( "violation_target" VARCHAR, "violation_target_description" VARCHAR, "conflicting_priority" BIGINT, "conflicting_policy_id" VARCHAR, "unavailable_priorities" BIGINT[] ), "dns_duplicate_rule_group_violation" STRUCT( "violation_target" VARCHAR, "violation_target_description" VARCHAR ), "dns_rule_group_limit_exceeded_violation" STRUCT( "violation_target" VARCHAR, "violation_target_description" VARCHAR, "number_of_rule_groups_already_associated" BIGINT ), "firewall_subnet_is_out_of_scope_violation" STRUCT( "firewall_subnet_id" VARCHAR, "vpc_id" VARCHAR, "subnet_availability_zone" VARCHAR, "subnet_availability_zone_id" VARCHAR, "vpc_endpoint_id" VARCHAR ), "route_has_out_of_scope_endpoint_violation" STRUCT( "subnet_id" VARCHAR, "vpc_id" VARCHAR, "route_table_id" VARCHAR, "violating_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "subnet_availability_zone" VARCHAR, "subnet_availability_zone_id" VARCHAR, "current_firewall_subnet_route_table" VARCHAR, "firewall_subnet_id" VARCHAR, "firewall_subnet_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[], "internet_gateway_id" VARCHAR, "current_internet_gateway_route_table" VARCHAR, "internet_gateway_routes" STRUCT( "destination_type" VARCHAR, "target_type" VARCHAR, "destination" VARCHAR, "target" VARCHAR )[] ), "third_party_firewall_missing_firewall_violation" STRUCT( "violation_target" VARCHAR, "vpc" VARCHAR, "availability_zone" VARCHAR, "target_violation_reason" VARCHAR ), "third_party_firewall_missing_subnet_violation" STRUCT( "violation_target" VARCHAR, "vpc" VARCHAR, "availability_zone" VARCHAR, "target_violation_reason" VARCHAR ), "third_party_firewall_missing_expected_route_table_violation" STRUCT( "violation_target" VARCHAR, "vpc" VARCHAR, "availability_zone" VARCHAR, "current_route_table" VARCHAR, "expected_route_table" VARCHAR ), "firewall_subnet_missing_vpc_endpoint_violation" STRUCT( "firewall_subnet_id" VARCHAR, "vpc_id" VARCHAR, "subnet_availability_zone" VARCHAR, "subnet_availability_zone_id" VARCHAR ), "invalid_network_acl_entries_violation" STRUCT( "vpc" VARCHAR, "subnet" VARCHAR, "subnet_availability_zone" VARCHAR, "current_associated_network_acl" VARCHAR, "entry_violations" STRUCT( "expected_entry" STRUCT( "entry_detail" STRUCT( "icmp_type_code" STRUCT( "code" BIGINT, "type" BIGINT ), "protocol" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "cidr_block" VARCHAR, "ipv6_cidr_block" VARCHAR, "rule_action" VARCHAR, "egress" BOOLEAN ), "entry_rule_number" BIGINT, "entry_type" VARCHAR ), "expected_evaluation_order" VARCHAR, "actual_evaluation_order" VARCHAR, "entry_at_expected_evaluation_order" STRUCT( "entry_detail" STRUCT( "icmp_type_code" STRUCT( "code" BIGINT, "type" BIGINT ), "protocol" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "cidr_block" VARCHAR, "ipv6_cidr_block" VARCHAR, "rule_action" VARCHAR, "egress" BOOLEAN ), "entry_rule_number" BIGINT, "entry_type" VARCHAR ), "entries_with_conflicts" STRUCT( "entry_detail" STRUCT( "icmp_type_code" STRUCT( "code" BIGINT, "type" BIGINT ), "protocol" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "cidr_block" VARCHAR, "ipv6_cidr_block" VARCHAR, "rule_action" VARCHAR, "egress" BOOLEAN ), "entry_rule_number" BIGINT, "entry_type" VARCHAR )[], "entry_violation_reasons" VARCHAR[] )[] ), "possible_remediation_actions" STRUCT( "description" VARCHAR, "actions" STRUCT( "description" VARCHAR, "ordered_remediation_actions" STRUCT( "remediation_action" STRUCT( "description" VARCHAR, "ec2_create_route_action" STRUCT( "description" VARCHAR, "destination_cidr_block" VARCHAR, "destination_prefix_list_id" VARCHAR, "destination_ipv6_cidr_block" VARCHAR, "vpc_endpoint_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "gateway_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "route_table_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ) ), "ec2_replace_route_action" STRUCT( "description" VARCHAR, "destination_cidr_block" VARCHAR, "destination_prefix_list_id" VARCHAR, "destination_ipv6_cidr_block" VARCHAR, "gateway_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "route_table_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ) ), "ec2_delete_route_action" STRUCT( "description" VARCHAR, "destination_cidr_block" VARCHAR, "destination_prefix_list_id" VARCHAR, "destination_ipv6_cidr_block" VARCHAR, "route_table_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ) ), "ec2_copy_route_table_action" STRUCT( "description" VARCHAR, "vpc_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "route_table_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ) ), "ec2_replace_route_table_association_action" STRUCT( "description" VARCHAR, "association_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "route_table_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ) ), "ec2_associate_route_table_action" STRUCT( "description" VARCHAR, "route_table_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "subnet_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "gateway_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ) ), "ec2_create_route_table_action" STRUCT( "description" VARCHAR, "vpc_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ) ), "fms_policy_update_firewall_creation_config_action" STRUCT( "description" VARCHAR, "firewall_creation_config" VARCHAR ), "create_network_acl_action" STRUCT( "description" VARCHAR, "vpc" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "fms_can_remediate" BOOLEAN ), "replace_network_acl_association_action" STRUCT( "description" VARCHAR, "association_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "network_acl_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "fms_can_remediate" BOOLEAN ), "create_network_acl_entries_action" STRUCT( "description" VARCHAR, "network_acl_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "network_acl_entries_to_be_created" STRUCT( "entry_detail" STRUCT( "icmp_type_code" STRUCT( "code" BIGINT, "type" BIGINT ), "protocol" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "cidr_block" VARCHAR, "ipv6_cidr_block" VARCHAR, "rule_action" VARCHAR, "egress" BOOLEAN ), "entry_rule_number" BIGINT, "entry_type" VARCHAR )[], "fms_can_remediate" BOOLEAN ), "delete_network_acl_entries_action" STRUCT( "description" VARCHAR, "network_acl_id" STRUCT( "resource_id" VARCHAR, "description" VARCHAR ), "network_acl_entries_to_be_deleted" STRUCT( "entry_detail" STRUCT( "icmp_type_code" STRUCT( "code" BIGINT, "type" BIGINT ), "protocol" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "cidr_block" VARCHAR, "ipv6_cidr_block" VARCHAR, "rule_action" VARCHAR, "egress" BOOLEAN ), "entry_rule_number" BIGINT, "entry_type" VARCHAR )[], "fms_can_remediate" BOOLEAN ) ), "order" BIGINT )[], "is_default_action" BOOLEAN )[] ) )[], "resource_tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[], "resource_description" VARCHAR )
Show child fields `violation_detail.member_account` The Amazon Web Services account that the violation details were requested for. `violation_detail.policy_id` The ID of the Firewall Manager policy that the violation details were requested for. `violation_detail.resource_description` Brief description for the requested resource. `violation_detail.resource_id` The resource ID that the violation details were requested for. `violation_detail.resource_tags[]` Show child fields `violation_detail.resource_tags[].key` Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as "customer." Tag keys are case-sensitive. `violation_detail.resource_tags[].value` Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as "companyA" or "companyB." Tag values are case-sensitive. `violation_detail.resource_type` The resource type that the violation details were requested for. `violation_detail.resource_violations[]` Show child fields `violation_detail.resource_violations[].aws_ec2_instance_violation` Violation detail for an EC2 instance. Show child fields `violation_detail.resource_violations[].aws_ec2_instance_violation.aws_ec2_network_interface_violations[]` Show child fields `violation_detail.resource_violations[].aws_ec2_instance_violation.aws_ec2_network_interface_violations[].violating_security_groups[]` `violation_detail.resource_violations[].aws_ec2_instance_violation.aws_ec2_network_interface_violations[].violation_target` The resource ID of the network interface. `violation_detail.resource_violations[].aws_ec2_instance_violation.violation_target` The resource ID of the EC2 instance. `violation_detail.resource_violations[].aws_ec2_network_interface_violation` Violation detail for a network interface. Show child fields `violation_detail.resource_violations[].aws_ec2_network_interface_violation.violating_security_groups[]` `violation_detail.resource_violations[].aws_ec2_network_interface_violation.violation_target` The resource ID of the network interface. `violation_detail.resource_violations[].aws_vpc_security_group_violation` Violation detail for security groups. Show child fields `violation_detail.resource_violations[].aws_vpc_security_group_violation.partial_matches[]` Show child fields `violation_detail.resource_violations[].aws_vpc_security_group_violation.partial_matches[].reference` The reference rule from the primary security group of the Firewall Manager policy. `violation_detail.resource_violations[].aws_vpc_security_group_violation.partial_matches[].target_violation_reasons[]` `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[]` Show child fields `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].description` Brief description of the action that will be performed. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].is_default_action` Indicates if the current action is the default action. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_action_type` The remediation action that will be performed. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_result` The final state of the rule specified in the `ViolationTarget` after it is remediated. Show child fields `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_result.from_port` The start of the port range for the TCP and UDP protocols, or an ICMP/ICMPv6 type number. A value of `-1` indicates all ICMP/ICMPv6 types. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_result.ipv4_range` The IPv4 ranges for the security group rule. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_result.ipv6_range` The IPv6 ranges for the security group rule. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_result.prefix_list_id` The ID of the prefix list for the security group rule. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_result.protocol` The IP protocol name (`tcp`, `udp`, `icmp`, `icmpv6`) or number. `violation_detail.resource_violations[].aws_vpc_security_group_violation.possible_security_group_remediation_actions[].remediation_result.to_port` The end of the port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code. A value of `-1` indicates all ICMP/ICMPv6 codes. `violation_detail.resource_violations[].aws_vpc_security_group_violation.violation_target` The security group rule that is being evaluated. `violation_detail.resource_violations[].aws_vpc_security_group_violation.violation_target_description` A description of the security group that violates the policy. `violation_detail.resource_violations[].dns_duplicate_rule_group_violation` Violation detail for a DNS Firewall policy that indicates that a rule group that Firewall Manager tried to associate with a VPC is already associated with the VPC and can't be associated again. Show child fields `violation_detail.resource_violations[].dns_duplicate_rule_group_violation.violation_target` Information about the VPC ID. `violation_detail.resource_violations[].dns_duplicate_rule_group_violation.violation_target_description` A description of the violation that specifies the rule group and VPC. `violation_detail.resource_violations[].dns_rule_group_limit_exceeded_violation` Violation detail for a DNS Firewall policy that indicates that the VPC reached the limit for associated DNS Firewall rule groups. Firewall Manager tried to associate another rule group with the VPC and failed. Show child fields `violation_detail.resource_violations[].dns_rule_group_limit_exceeded_violation.number_of_rule_groups_already_associated` The number of rule groups currently associated with the VPC. `violation_detail.resource_violations[].dns_rule_group_limit_exceeded_violation.violation_target` Information about the VPC ID. `violation_detail.resource_violations[].dns_rule_group_limit_exceeded_violation.violation_target_description` A description of the violation that specifies the rule group and VPC. `violation_detail.resource_violations[].dns_rule_group_priority_conflict_violation` Violation detail for a DNS Firewall policy that indicates that a rule group that Firewall Manager tried to associate with a VPC has the same priority as a rule group that's already associated. Show child fields `violation_detail.resource_violations[].dns_rule_group_priority_conflict_violation.conflicting_policy_id` The ID of the Firewall Manager DNS Firewall policy that was already applied to the VPC. This policy contains the rule group that's already associated with the VPC. `violation_detail.resource_violations[].dns_rule_group_priority_conflict_violation.conflicting_priority` The priority setting of the two conflicting rule groups. `violation_detail.resource_violations[].dns_rule_group_priority_conflict_violation.unavailable_priorities[]` `violation_detail.resource_violations[].dns_rule_group_priority_conflict_violation.violation_target` Information about the VPC ID. `violation_detail.resource_violations[].dns_rule_group_priority_conflict_violation.violation_target_description` A description of the violation that specifies the VPC and the rule group that's already associated with it. `violation_detail.resource_violations[].firewall_subnet_is_out_of_scope_violation` Contains details about the firewall subnet that violates the policy scope. Show child fields `violation_detail.resource_violations[].firewall_subnet_is_out_of_scope_violation.firewall_subnet_id` The ID of the firewall subnet that violates the policy scope. `violation_detail.resource_violations[].firewall_subnet_is_out_of_scope_violation.subnet_availability_zone` The Availability Zone of the firewall subnet that violates the policy scope. `violation_detail.resource_violations[].firewall_subnet_is_out_of_scope_violation.subnet_availability_zone_id` The Availability Zone ID of the firewall subnet that violates the policy scope. `violation_detail.resource_violations[].firewall_subnet_is_out_of_scope_violation.vpc_endpoint_id` The VPC endpoint ID of the firewall subnet that violates the policy scope. `violation_detail.resource_violations[].firewall_subnet_is_out_of_scope_violation.vpc_id` The VPC ID of the firewall subnet that violates the policy scope. `violation_detail.resource_violations[].firewall_subnet_missing_vpc_endpoint_violation` The violation details for a third-party firewall's VPC endpoint subnet that was deleted. Show child fields `violation_detail.resource_violations[].firewall_subnet_missing_vpc_endpoint_violation.firewall_subnet_id` The ID of the firewall that this VPC endpoint is associated with. `violation_detail.resource_violations[].firewall_subnet_missing_vpc_endpoint_violation.subnet_availability_zone` The name of the Availability Zone of the deleted VPC subnet. `violation_detail.resource_violations[].firewall_subnet_missing_vpc_endpoint_violation.subnet_availability_zone_id` The ID of the Availability Zone of the deleted VPC subnet. `violation_detail.resource_violations[].firewall_subnet_missing_vpc_endpoint_violation.vpc_id` The resource ID of the VPC associated with the deleted VPC subnet. `violation_detail.resource_violations[].invalid_network_acl_entries_violation` Violation detail for the entries in a network ACL resource. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.current_associated_network_acl` The network ACL containing the entry violations. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[]` Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].actual_evaluation_order` The evaluation location within the ordered list of entries where the `ExpectedEntry` is currently located. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[]` Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail` Describes a rule in a network ACL. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, Amazon Web Services processes the entries in the network ACL according to the rule numbers, in ascending order. When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.cidr_block` The IPv4 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.egress` Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet). If it's not an egress rule, then it's an ingress, or inbound, rule. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.icmp_type_code` ICMP protocol: The ICMP type and code. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.icmp_type_code.code` ICMP code. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.icmp_type_code.type` ICMP type. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.ipv6_cidr_block` The IPv6 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.port_range` TCP or UDP protocols: The range of ports the rule applies to. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.port_range.from` The beginning port number of the range. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.port_range.to` The ending port number of the range. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.protocol` The protocol number. A value of "-1" means all protocols. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_detail.rule_action` Indicates whether to allow or deny the traffic that matches the rule. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_rule_number` The rule number for the entry. ACL entries are processed in ascending order by rule number. In a Firewall Manager network ACL policy, Firewall Manager assigns rule numbers. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entries_with_conflicts[].entry_type` Specifies whether the entry is managed by Firewall Manager or by a user, and, for Firewall Manager-managed entries, specifies whether the entry is among those that run first in the network ACL or those that run last. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order` The entry that's currently in the `ExpectedEvaluationOrder` location, in place of the expected entry. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail` Describes a rule in a network ACL. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, Amazon Web Services processes the entries in the network ACL according to the rule numbers, in ascending order. When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.cidr_block` The IPv4 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.egress` Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet). If it's not an egress rule, then it's an ingress, or inbound, rule. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.icmp_type_code` ICMP protocol: The ICMP type and code. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.icmp_type_code.code` ICMP code. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.icmp_type_code.type` ICMP type. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.ipv6_cidr_block` The IPv6 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.port_range` TCP or UDP protocols: The range of ports the rule applies to. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.port_range.from` The beginning port number of the range. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.port_range.to` The ending port number of the range. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.protocol` The protocol number. A value of "-1" means all protocols. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_detail.rule_action` Indicates whether to allow or deny the traffic that matches the rule. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_rule_number` The rule number for the entry. ACL entries are processed in ascending order by rule number. In a Firewall Manager network ACL policy, Firewall Manager assigns rule numbers. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_at_expected_evaluation_order.entry_type` Specifies whether the entry is managed by Firewall Manager or by a user, and, for Firewall Manager-managed entries, specifies whether the entry is among those that run first in the network ACL or those that run last. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].entry_violation_reasons[]` `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry` The Firewall Manager-managed network ACL entry that is involved in the entry violation. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail` Describes a rule in a network ACL. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, Amazon Web Services processes the entries in the network ACL according to the rule numbers, in ascending order. When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.cidr_block` The IPv4 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.egress` Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet). If it's not an egress rule, then it's an ingress, or inbound, rule. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.icmp_type_code` ICMP protocol: The ICMP type and code. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.icmp_type_code.code` ICMP code. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.icmp_type_code.type` ICMP type. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.ipv6_cidr_block` The IPv6 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.port_range` TCP or UDP protocols: The range of ports the rule applies to. Show child fields `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.port_range.from` The beginning port number of the range. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.port_range.to` The ending port number of the range. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.protocol` The protocol number. A value of "-1" means all protocols. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_detail.rule_action` Indicates whether to allow or deny the traffic that matches the rule. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_rule_number` The rule number for the entry. ACL entries are processed in ascending order by rule number. In a Firewall Manager network ACL policy, Firewall Manager assigns rule numbers. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_entry.entry_type` Specifies whether the entry is managed by Firewall Manager or by a user, and, for Firewall Manager-managed entries, specifies whether the entry is among those that run first in the network ACL or those that run last. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.entry_violations[].expected_evaluation_order` The evaluation location within the ordered list of entries where the `ExpectedEntry` should be, according to the network ACL policy specifications. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.subnet` The subnet that's associated with the network ACL. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.subnet_availability_zone` The Availability Zone where the network ACL is in use. `violation_detail.resource_violations[].invalid_network_acl_entries_violation.vpc` The VPC where the violation was found. `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation` Violation detail for an internet gateway route with an inactive state in the customer subnet route table or Network Firewall subnet route table. Show child fields `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.route_table_id` Information about the route table ID. `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.violating_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.violating_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.violating_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.violating_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.violating_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.violation_target` The subnet that has an inactive state. `violation_detail.resource_violations[].network_firewall_black_hole_route_detected_violation.vpc_id` Information about the VPC ID. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation` Violation detail for the subnet for which internet traffic hasn't been inspected. Show child fields `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_firewall_subnet_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_firewall_subnet_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_firewall_subnet_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_firewall_subnet_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_firewall_subnet_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_internet_gateway_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_internet_gateway_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_internet_gateway_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_internet_gateway_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.actual_internet_gateway_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.current_firewall_subnet_route_table` Information about the subnet route table for the current firewall. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.current_internet_gateway_route_table` The current route table for the internet gateway. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_endpoint` The expected endpoint for the current firewall. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_subnet_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_subnet_routes[].allowed_targets[]` `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_subnet_routes[].contributing_subnets[]` `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_subnet_routes[].ip_v4_cidr` Information about the IPv4 CIDR block. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_subnet_routes[].ip_v6_cidr` Information about the IPv6 CIDR block. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_subnet_routes[].prefix_list_id` Information about the ID of the prefix list for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_firewall_subnet_routes[].route_table_id` Information about the route table ID. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_internet_gateway_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_internet_gateway_routes[].allowed_targets[]` `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_internet_gateway_routes[].contributing_subnets[]` `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_internet_gateway_routes[].ip_v4_cidr` Information about the IPv4 CIDR block. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_internet_gateway_routes[].ip_v6_cidr` Information about the IPv6 CIDR block. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_internet_gateway_routes[].prefix_list_id` Information about the ID of the prefix list for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.expected_internet_gateway_routes[].route_table_id` Information about the route table ID. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.firewall_subnet_id` The firewall subnet ID. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.internet_gateway_id` The internet gateway ID. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.is_route_table_used_in_different_az` Information about whether the route table is used in another Availability Zone. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.route_table_id` Information about the route table ID. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.subnet_availability_zone` The subnet Availability Zone. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.subnet_id` The subnet ID. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.violating_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.violating_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.violating_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.violating_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.violating_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_internet_traffic_not_inspected_violation.vpc_id` Information about the VPC ID. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation` The route configuration is invalid. Show child fields `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_firewall_endpoint` The actual firewall endpoint. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_firewall_subnet_id` The actual subnet ID for the firewall. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_firewall_subnet_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_firewall_subnet_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_firewall_subnet_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_firewall_subnet_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_firewall_subnet_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_internet_gateway_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_internet_gateway_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_internet_gateway_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_internet_gateway_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.actual_internet_gateway_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.affected_subnets[]` `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.current_firewall_subnet_route_table` The subnet route table for the current firewall. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.current_internet_gateway_route_table` The route table for the current internet gateway. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_endpoint` The firewall endpoint that's expected. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_id` The expected subnet ID for the firewall. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_routes[].allowed_targets[]` `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_routes[].contributing_subnets[]` `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_routes[].ip_v4_cidr` Information about the IPv4 CIDR block. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_routes[].ip_v6_cidr` Information about the IPv6 CIDR block. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_routes[].prefix_list_id` Information about the ID of the prefix list for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_firewall_subnet_routes[].route_table_id` Information about the route table ID. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_internet_gateway_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_internet_gateway_routes[].allowed_targets[]` `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_internet_gateway_routes[].contributing_subnets[]` `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_internet_gateway_routes[].ip_v4_cidr` Information about the IPv4 CIDR block. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_internet_gateway_routes[].ip_v6_cidr` Information about the IPv6 CIDR block. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_internet_gateway_routes[].prefix_list_id` Information about the ID of the prefix list for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.expected_internet_gateway_routes[].route_table_id` Information about the route table ID. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.internet_gateway_id` The internet gateway ID. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.is_route_table_used_in_different_az` Information about whether the route table is used in another Availability Zone. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.route_table_id` The route table ID. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.violating_route` The route that's in violation. Show child fields `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.violating_route.destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.violating_route.destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.violating_route.target` The route's target. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.violating_route.target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_invalid_route_configuration_violation.vpc_id` Information about the VPC ID. `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation` Expected routes are missing from Network Firewall. Show child fields `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.expected_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.expected_routes[].allowed_targets[]` `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.expected_routes[].contributing_subnets[]` `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.expected_routes[].ip_v4_cidr` Information about the IPv4 CIDR block. `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.expected_routes[].ip_v6_cidr` Information about the IPv6 CIDR block. `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.expected_routes[].prefix_list_id` Information about the ID of the prefix list for the route. `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.expected_routes[].route_table_id` Information about the route table ID. `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.violation_target` The target of the violation. `violation_detail.resource_violations[].network_firewall_missing_expected_routes_violation.vpc_id` Information about the VPC ID. `violation_detail.resource_violations[].network_firewall_missing_expected_rt_violation` Violation detail for an Network Firewall policy that indicates that a subnet is not associated with the expected Firewall Manager managed route table. Show child fields `violation_detail.resource_violations[].network_firewall_missing_expected_rt_violation.availability_zone` The Availability Zone of a violating subnet. `violation_detail.resource_violations[].network_firewall_missing_expected_rt_violation.current_route_table` The resource ID of the current route table that's associated with the subnet, if one is available. `violation_detail.resource_violations[].network_firewall_missing_expected_rt_violation.expected_route_table` The resource ID of the route table that should be associated with the subnet. `violation_detail.resource_violations[].network_firewall_missing_expected_rt_violation.violation_target` The ID of the Network Firewall or VPC resource that's in violation. `violation_detail.resource_violations[].network_firewall_missing_expected_rt_violation.vpc` The resource ID of the VPC associated with a violating subnet. `violation_detail.resource_violations[].network_firewall_missing_firewall_violation` Violation detail for an Network Firewall policy that indicates that a subnet has no Firewall Manager managed firewall in its VPC. Show child fields `violation_detail.resource_violations[].network_firewall_missing_firewall_violation.availability_zone` The Availability Zone of a violating subnet. `violation_detail.resource_violations[].network_firewall_missing_firewall_violation.target_violation_reason` The reason the resource has this violation, if one is available. `violation_detail.resource_violations[].network_firewall_missing_firewall_violation.violation_target` The ID of the Network Firewall or VPC resource that's in violation. `violation_detail.resource_violations[].network_firewall_missing_firewall_violation.vpc` The resource ID of the VPC associated with a violating subnet. `violation_detail.resource_violations[].network_firewall_missing_subnet_violation` Violation detail for an Network Firewall policy that indicates that an Availability Zone is missing the expected Firewall Manager managed subnet. Show child fields `violation_detail.resource_violations[].network_firewall_missing_subnet_violation.availability_zone` The Availability Zone of a violating subnet. `violation_detail.resource_violations[].network_firewall_missing_subnet_violation.target_violation_reason` The reason the resource has this violation, if one is available. `violation_detail.resource_violations[].network_firewall_missing_subnet_violation.violation_target` The ID of the Network Firewall or VPC resource that's in violation. `violation_detail.resource_violations[].network_firewall_missing_subnet_violation.vpc` The resource ID of the VPC associated with a violating subnet. `violation_detail.resource_violations[].network_firewall_policy_modified_violation` Violation detail for an Network Firewall policy that indicates that a firewall policy in an individual account has been modified in a way that makes it noncompliant. For example, the individual account owner might have deleted a rule group, changed the priority of a stateless rule group, or changed a policy default action. Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description` The policy that's currently in use in the individual account. Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_default_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_engine_options` Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings. Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_engine_options.rule_order` Indicates how to manage the order of stateful rule evaluation for the policy. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the Network Firewall Developer Guide. Default: `DEFAULT_ACTION_ORDER` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_engine_options.stream_exception_policy` Indicates how Network Firewall should handle traffic when a network connection breaks midstream. `DROP` - Fail closed and drop all subsequent traffic going to the firewall. `CONTINUE` - Continue to apply rules to subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on context. For example, with a stateful rule that drops HTTP traffic, Network Firewall won't match subsequent traffic because the it won't have the context from session initialization, which defines the application layer protocol as HTTP. However, a TCP-layer rule using a `flow:stateless` rule would still match, and so would the `aws:drop_strict` default action. `REJECT` - Fail closed and drop all subsequent traffic going to the firewall. With this option, Network Firewall also sends a TCP reject packet back to the client so the client can immediately establish a new session. With the new session, Network Firewall will have context and will apply rules appropriately. For applications that are reliant on long-lived TCP connections that trigger Gateway Load Balancer idle timeouts, this is the recommended setting. `FMS_IGNORE` - Firewall Manager doesn't monitor or modify the Network Firewall stream exception policy settings. For more information, see Stream exception policy in your firewall policy in the Network Firewall Developer Guide. Default: `FMS_IGNORE` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_rule_groups[]` Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_rule_groups[].override` The action that allows the policy owner to override the behavior of the rule group within a policy. Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_rule_groups[].override.action` The action that changes the rule group from `DROP` to `ALERT`. This only applies to managed rule groups. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_rule_groups[].priority` An integer setting that indicates the order in which to run the stateful rule groups in a single Network Firewall firewall policy. This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings. Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy. For information about You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_rule_groups[].resource_id` The resource ID of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateful_rule_groups[].rule_group_name` The name of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateless_custom_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateless_default_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateless_fragment_default_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateless_rule_groups[]` Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateless_rule_groups[].priority` The priority of the rule group. Network Firewall evaluates the stateless rule groups in a firewall policy starting from the lowest priority setting. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateless_rule_groups[].resource_id` The resource ID of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.current_policy_description.stateless_rule_groups[].rule_group_name` The name of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description` The policy that should be in use in the individual account in order to be compliant. Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_default_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_engine_options` Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings. Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_engine_options.rule_order` Indicates how to manage the order of stateful rule evaluation for the policy. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the Network Firewall Developer Guide. Default: `DEFAULT_ACTION_ORDER` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_engine_options.stream_exception_policy` Indicates how Network Firewall should handle traffic when a network connection breaks midstream. `DROP` - Fail closed and drop all subsequent traffic going to the firewall. `CONTINUE` - Continue to apply rules to subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on context. For example, with a stateful rule that drops HTTP traffic, Network Firewall won't match subsequent traffic because the it won't have the context from session initialization, which defines the application layer protocol as HTTP. However, a TCP-layer rule using a `flow:stateless` rule would still match, and so would the `aws:drop_strict` default action. `REJECT` - Fail closed and drop all subsequent traffic going to the firewall. With this option, Network Firewall also sends a TCP reject packet back to the client so the client can immediately establish a new session. With the new session, Network Firewall will have context and will apply rules appropriately. For applications that are reliant on long-lived TCP connections that trigger Gateway Load Balancer idle timeouts, this is the recommended setting. `FMS_IGNORE` - Firewall Manager doesn't monitor or modify the Network Firewall stream exception policy settings. For more information, see Stream exception policy in your firewall policy in the Network Firewall Developer Guide. Default: `FMS_IGNORE` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_rule_groups[]` Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_rule_groups[].override` The action that allows the policy owner to override the behavior of the rule group within a policy. Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_rule_groups[].override.action` The action that changes the rule group from `DROP` to `ALERT`. This only applies to managed rule groups. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_rule_groups[].priority` An integer setting that indicates the order in which to run the stateful rule groups in a single Network Firewall firewall policy. This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings. Network Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy. For information about You can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_rule_groups[].resource_id` The resource ID of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateful_rule_groups[].rule_group_name` The name of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateless_custom_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateless_default_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateless_fragment_default_actions[]` `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateless_rule_groups[]` Show child fields `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateless_rule_groups[].priority` The priority of the rule group. Network Firewall evaluates the stateless rule groups in a firewall policy starting from the lowest priority setting. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateless_rule_groups[].resource_id` The resource ID of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.expected_policy_description.stateless_rule_groups[].rule_group_name` The name of the rule group. `violation_detail.resource_violations[].network_firewall_policy_modified_violation.violation_target` The ID of the Network Firewall or VPC resource that's in violation. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation` There's an unexpected firewall route. Show child fields `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.firewall_endpoint` The endpoint of the firewall. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.firewall_subnet_id` The subnet ID for the firewall. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.route_table_id` The ID of the route table. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.violating_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.violating_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.violating_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.violating_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.violating_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_unexpected_firewall_routes_violation.vpc_id` Information about the VPC ID. `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation` There's an unexpected gateway route. Show child fields `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.gateway_id` Information about the gateway ID. `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.route_table_id` Information about the route table. `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.violating_routes[]` Show child fields `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.violating_routes[].destination` The destination of the route. `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.violating_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.violating_routes[].target` The route's target. `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.violating_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].network_firewall_unexpected_gateway_routes_violation.vpc_id` Information about the VPC ID. `violation_detail.resource_violations[].possible_remediation_actions` A list of possible remediation action lists. Each individual possible remediation action is a list of individual remediation actions. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[]` Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].description` A description of the list of remediation actions. `violation_detail.resource_violations[].possible_remediation_actions.actions[].is_default_action` Information about whether an action is taken by default. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[]` Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].order` The order of the remediation actions in the list. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action` Information about an action you can take to remediate a violation. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_action` Information about the `CreateNetworkAcl` action in Amazon EC2. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_action.description` Brief description of this remediation action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_action.fms_can_remediate` Indicates whether it is possible for Firewall Manager to perform this remediation action. A false value indicates that auto remediation is disabled or Firewall Manager is unable to perform the action due to a conflict of some kind. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_action.vpc` The VPC that's associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_action.vpc.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_action.vpc.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action` Information about the `CreateNetworkAclEntries` action in Amazon EC2. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.description` Brief description of this remediation action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.fms_can_remediate` Indicates whether it is possible for Firewall Manager to perform this remediation action. A false value indicates that auto remediation is disabled or Firewall Manager is unable to perform the action due to a conflict of some kind. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[]` Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail` Describes a rule in a network ACL. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, Amazon Web Services processes the entries in the network ACL according to the rule numbers, in ascending order. When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.cidr_block` The IPv4 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.egress` Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet). If it's not an egress rule, then it's an ingress, or inbound, rule. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.icmp_type_code` ICMP protocol: The ICMP type and code. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.icmp_type_code.code` ICMP code. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.icmp_type_code.type` ICMP type. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.ipv6_cidr_block` The IPv6 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.port_range` TCP or UDP protocols: The range of ports the rule applies to. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.port_range.from` The beginning port number of the range. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.port_range.to` The ending port number of the range. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.protocol` The protocol number. A value of "-1" means all protocols. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_detail.rule_action` Indicates whether to allow or deny the traffic that matches the rule. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_rule_number` The rule number for the entry. ACL entries are processed in ascending order by rule number. In a Firewall Manager network ACL policy, Firewall Manager assigns rule numbers. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_entries_to_be_created[].entry_type` Specifies whether the entry is managed by Firewall Manager or by a user, and, for Firewall Manager-managed entries, specifies whether the entry is among those that run first in the network ACL or those that run last. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_id` The network ACL that's associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.create_network_acl_entries_action.network_acl_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action` Information about the `DeleteNetworkAclEntries` action in Amazon EC2. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.description` Brief description of this remediation action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.fms_can_remediate` Indicates whether it is possible for Firewall Manager to perform this remediation action. A false value indicates that auto remediation is disabled or Firewall Manager is unable to perform the action due to a conflict of some kind. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[]` Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail` Describes a rule in a network ACL. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, Amazon Web Services processes the entries in the network ACL according to the rule numbers, in ascending order. When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.cidr_block` The IPv4 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.egress` Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet). If it's not an egress rule, then it's an ingress, or inbound, rule. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.icmp_type_code` ICMP protocol: The ICMP type and code. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.icmp_type_code.code` ICMP code. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.icmp_type_code.type` ICMP type. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.ipv6_cidr_block` The IPv6 network range to allow or deny, in CIDR notation. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.port_range` TCP or UDP protocols: The range of ports the rule applies to. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.port_range.from` The beginning port number of the range. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.port_range.to` The ending port number of the range. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.protocol` The protocol number. A value of "-1" means all protocols. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_detail.rule_action` Indicates whether to allow or deny the traffic that matches the rule. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_rule_number` The rule number for the entry. ACL entries are processed in ascending order by rule number. In a Firewall Manager network ACL policy, Firewall Manager assigns rule numbers. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_entries_to_be_deleted[].entry_type` Specifies whether the entry is managed by Firewall Manager or by a user, and, for Firewall Manager-managed entries, specifies whether the entry is among those that run first in the network ACL or those that run last. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_id` The network ACL that's associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.delete_network_acl_entries_action.network_acl_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.description` A description of a remediation action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action` Information about the AssociateRouteTable action in the Amazon EC2 API. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.description` A description of the EC2 route table that is associated with the remediation action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.gateway_id` The ID of the gateway to be used with the EC2 route table that is associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.gateway_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.gateway_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.route_table_id` The ID of the EC2 route table that is associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.route_table_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.route_table_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.subnet_id` The ID of the subnet for the EC2 route table that is associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.subnet_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_associate_route_table_action.subnet_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action` Information about the CopyRouteTable action in the Amazon EC2 API. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action.description` A description of the copied EC2 route table that is associated with the remediation action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action.route_table_id` The ID of the copied EC2 route table that is associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action.route_table_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action.route_table_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action.vpc_id` The VPC ID of the copied EC2 route table that is associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action.vpc_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_copy_route_table_action.vpc_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action` Information about the CreateRoute action in the Amazon EC2 API. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.description` A description of CreateRoute action in Amazon EC2. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.destination_cidr_block` Information about the IPv4 CIDR address block used for the destination match. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.destination_ipv6_cidr_block` Information about the IPv6 CIDR block destination. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.destination_prefix_list_id` Information about the ID of a prefix list used for the destination match. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.gateway_id` Information about the ID of an internet gateway or virtual private gateway attached to your VPC. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.gateway_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.gateway_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.route_table_id` Information about the ID of the route table for the route. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.route_table_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.route_table_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.vpc_endpoint_id` Information about the ID of a VPC endpoint. Supported for Gateway Load Balancer endpoints only. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.vpc_endpoint_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_action.vpc_endpoint_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_table_action` Information about the CreateRouteTable action in the Amazon EC2 API. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_table_action.description` A description of the CreateRouteTable action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_table_action.vpc_id` Information about the ID of a VPC. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_table_action.vpc_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_create_route_table_action.vpc_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action` Information about the DeleteRoute action in the Amazon EC2 API. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action.description` A description of the DeleteRoute action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action.destination_cidr_block` Information about the IPv4 CIDR range for the route. The value you specify must match the CIDR for the route exactly. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action.destination_ipv6_cidr_block` Information about the IPv6 CIDR range for the route. The value you specify must match the CIDR for the route exactly. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action.destination_prefix_list_id` Information about the ID of the prefix list for the route. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action.route_table_id` Information about the ID of the route table. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action.route_table_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_delete_route_action.route_table_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action` Information about the ReplaceRoute action in the Amazon EC2 API. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.description` A description of the ReplaceRoute action in Amazon EC2. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.destination_cidr_block` Information about the IPv4 CIDR address block used for the destination match. The value that you provide must match the CIDR of an existing route in the table. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.destination_ipv6_cidr_block` Information about the IPv6 CIDR address block used for the destination match. The value that you provide must match the CIDR of an existing route in the table. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.destination_prefix_list_id` Information about the ID of the prefix list for the route. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.gateway_id` Information about the ID of an internet gateway or virtual private gateway. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.gateway_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.gateway_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.route_table_id` Information about the ID of the route table. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.route_table_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_action.route_table_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action` Information about the ReplaceRouteTableAssociation action in the Amazon EC2 API. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action.association_id` Information about the association ID. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action.association_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action.association_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action.description` A description of the ReplaceRouteTableAssociation action in Amazon EC2. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action.route_table_id` Information about the ID of the new route table to associate with the subnet. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action.route_table_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.ec2_replace_route_table_association_action.route_table_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.fms_policy_update_firewall_creation_config_action` The remedial action to take when updating a firewall configuration. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.fms_policy_update_firewall_creation_config_action.description` Describes the remedial action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.fms_policy_update_firewall_creation_config_action.firewall_creation_config` A `FirewallCreationConfig` that you can copy into your current policy's SecurityServiceData in order to remedy scope violations. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action` Information about the `ReplaceNetworkAclAssociation` action in Amazon EC2. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.association_id` Describes a remediation action target. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.association_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.association_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.description` Brief description of this remediation action. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.fms_can_remediate` Indicates whether it is possible for Firewall Manager to perform this remediation action. A false value indicates that auto remediation is disabled or Firewall Manager is unable to perform the action due to a conflict of some kind. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.network_acl_id` The network ACL that's associated with the remediation action. Show child fields `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.network_acl_id.description` A description of the remediation action target. `violation_detail.resource_violations[].possible_remediation_actions.actions[].ordered_remediation_actions[].remediation_action.replace_network_acl_association_action.network_acl_id.resource_id` The ID of the remediation target. `violation_detail.resource_violations[].possible_remediation_actions.description` A description of the possible remediation actions list. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation` Contains details about the route endpoint that violates the policy scope. Show child fields `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.current_firewall_subnet_route_table` The route table associated with the current firewall subnet. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.current_internet_gateway_route_table` The current route table associated with the Internet Gateway. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.firewall_subnet_id` The ID of the firewall subnet. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.firewall_subnet_routes[]` Show child fields `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.firewall_subnet_routes[].destination` The destination of the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.firewall_subnet_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.firewall_subnet_routes[].target` The route's target. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.firewall_subnet_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.internet_gateway_id` The ID of the Internet Gateway. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.internet_gateway_routes[]` Show child fields `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.internet_gateway_routes[].destination` The destination of the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.internet_gateway_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.internet_gateway_routes[].target` The route's target. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.internet_gateway_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.route_table_id` The ID of the route table. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.subnet_availability_zone` The subnet's Availability Zone. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.subnet_availability_zone_id` The ID of the subnet's Availability Zone. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.subnet_id` The ID of the subnet associated with the route that violates the policy scope. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.violating_routes[]` Show child fields `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.violating_routes[].destination` The destination of the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.violating_routes[].destination_type` The type of destination for the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.violating_routes[].target` The route's target. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.violating_routes[].target_type` The type of target for the route. `violation_detail.resource_violations[].route_has_out_of_scope_endpoint_violation.vpc_id` The VPC ID of the route that violates the policy scope. `violation_detail.resource_violations[].third_party_firewall_missing_expected_route_table_violation` The violation details for a third-party firewall that has the Firewall Manager managed route table that was associated with the third-party firewall has been deleted. Show child fields `violation_detail.resource_violations[].third_party_firewall_missing_expected_route_table_violation.availability_zone` The Availability Zone of the firewall subnet that's causing the violation. `violation_detail.resource_violations[].third_party_firewall_missing_expected_route_table_violation.current_route_table` The resource ID of the current route table that's associated with the subnet, if one is available. `violation_detail.resource_violations[].third_party_firewall_missing_expected_route_table_violation.expected_route_table` The resource ID of the route table that should be associated with the subnet. `violation_detail.resource_violations[].third_party_firewall_missing_expected_route_table_violation.violation_target` The ID of the third-party firewall or VPC resource that's causing the violation. `violation_detail.resource_violations[].third_party_firewall_missing_expected_route_table_violation.vpc` The resource ID of the VPC associated with a fireawll subnet that's causing the violation. `violation_detail.resource_violations[].third_party_firewall_missing_firewall_violation` The violation details for a third-party firewall that's been deleted. Show child fields `violation_detail.resource_violations[].third_party_firewall_missing_firewall_violation.availability_zone` The Availability Zone of the third-party firewall that's causing the violation. `violation_detail.resource_violations[].third_party_firewall_missing_firewall_violation.target_violation_reason` The reason the resource is causing this violation, if a reason is available. `violation_detail.resource_violations[].third_party_firewall_missing_firewall_violation.violation_target` The ID of the third-party firewall that's causing the violation. `violation_detail.resource_violations[].third_party_firewall_missing_firewall_violation.vpc` The resource ID of the VPC associated with a third-party firewall. `violation_detail.resource_violations[].third_party_firewall_missing_subnet_violation` The violation details for a third-party firewall's subnet that's been deleted. Show child fields `violation_detail.resource_violations[].third_party_firewall_missing_subnet_violation.availability_zone` The Availability Zone of a subnet that's causing the violation. `violation_detail.resource_violations[].third_party_firewall_missing_subnet_violation.target_violation_reason` The reason the resource is causing the violation, if a reason is available. `violation_detail.resource_violations[].third_party_firewall_missing_subnet_violation.violation_target` The ID of the third-party firewall or VPC resource that's causing the violation. `violation_detail.resource_violations[].third_party_firewall_missing_subnet_violation.vpc` The resource ID of the VPC associated with a subnet that's causing the violation.