Skip to content

aws.networkmanager.get_core_network_change_set

Example SQL Queries

SELECT * FROM
aws.networkmanager.get_core_network_change_set
WHERE
"core_network_id" = 'VALUE'
AND "policy_version_id" = 'VALUE';

Description

Returns a change set between the LIVE core network policy and a submitted policy.

Table Definition

Column NameColumn Data Type
core_network_id Required Input Column

The ID of a core network.

VARCHAR
policy_version_id Required Input Column

The ID of the policy version.

BIGINT
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

action

The action to take for a core network.

VARCHAR
identifier

The resource identifier.

VARCHAR
identifier_path

Uniquely identifies the path for a change within the changeset. For example, the IdentifierPath for a core network segment change might be "CORE_NETWORK_SEGMENT/us-east-1/devsegment".

VARCHAR
new_values

The new value for a core network

STRUCT(
"segment_name" VARCHAR,
"network_function_group_name" VARCHAR,
"edge_locations" VARCHAR[],
"asn" BIGINT,
"cidr" VARCHAR,
"destination_identifier" VARCHAR,
"inside_cidr_blocks" VARCHAR[],
"shared_segments" VARCHAR[],
"service_insertion_actions" STRUCT(
"action" VARCHAR,
"mode" VARCHAR,
"when_sent_to" STRUCT(
"when_sent_to_segments_list" VARCHAR[]
),
"via" STRUCT(
"network_function_groups" STRUCT(
"name" VARCHAR
)[],
"with_edge_overrides" STRUCT(
"edge_sets" VARCHAR[][],
"use_edge" VARCHAR
)[]
)
)[]
)
Show child fields
new_values.asn

The ASN of a core network.

new_values.cidr

The IP addresses used for a core network.

new_values.destination_identifier

The ID of the destination.

new_values.edge_locations[]
new_values.inside_cidr_blocks[]
new_values.network_function_group_name

The network function group name if the change event is associated with a network function group.

new_values.segment_name

The names of the segments in a core network.

new_values.service_insertion_actions[]
Show child fields
new_values.service_insertion_actions[].action

The action the service insertion takes for traffic. send-via sends east-west traffic between attachments. send-to sends north-south traffic to the security appliance, and then from that to either the Internet or to an on-premesis location.

new_values.service_insertion_actions[].mode

Describes the mode packets take for the send-via action. This is not used when the action is send-to. dual-hop packets traverse attachments in both the source to the destination core network edges. This mode requires that an inspection attachment must be present in all Regions of the service insertion-enabled segments. For single-hop, packets traverse a single intermediate inserted attachment. You can use EdgeOverride to specify a specific edge to use.

new_values.service_insertion_actions[].via

The list of network function groups and any edge overrides for the chosen service insertion action. Used for both send-to or send-via.

Show child fields
new_values.service_insertion_actions[].via.network_function_groups[]
Show child fields
new_values.service_insertion_actions[].via.network_function_groups[].name

The name of the network function group.

new_values.service_insertion_actions[].via.with_edge_overrides[]
Show child fields
new_values.service_insertion_actions[].via.with_edge_overrides[].edge_sets[][]
new_values.service_insertion_actions[].via.with_edge_overrides[].use_edge

The edge that should be used when overriding the current edge order.

new_values.service_insertion_actions[].when_sent_to

The list of destination segments if the service insertion action is send-via.

Show child fields
new_values.service_insertion_actions[].when_sent_to.when_sent_to_segments_list[]
new_values.shared_segments[]
previous_values

The previous values for a core network.

STRUCT(
"segment_name" VARCHAR,
"network_function_group_name" VARCHAR,
"edge_locations" VARCHAR[],
"asn" BIGINT,
"cidr" VARCHAR,
"destination_identifier" VARCHAR,
"inside_cidr_blocks" VARCHAR[],
"shared_segments" VARCHAR[],
"service_insertion_actions" STRUCT(
"action" VARCHAR,
"mode" VARCHAR,
"when_sent_to" STRUCT(
"when_sent_to_segments_list" VARCHAR[]
),
"via" STRUCT(
"network_function_groups" STRUCT(
"name" VARCHAR
)[],
"with_edge_overrides" STRUCT(
"edge_sets" VARCHAR[][],
"use_edge" VARCHAR
)[]
)
)[]
)
Show child fields
previous_values.asn

The ASN of a core network.

previous_values.cidr

The IP addresses used for a core network.

previous_values.destination_identifier

The ID of the destination.

previous_values.edge_locations[]
previous_values.inside_cidr_blocks[]
previous_values.network_function_group_name

The network function group name if the change event is associated with a network function group.

previous_values.segment_name

The names of the segments in a core network.

previous_values.service_insertion_actions[]
Show child fields
previous_values.service_insertion_actions[].action

The action the service insertion takes for traffic. send-via sends east-west traffic between attachments. send-to sends north-south traffic to the security appliance, and then from that to either the Internet or to an on-premesis location.

previous_values.service_insertion_actions[].mode

Describes the mode packets take for the send-via action. This is not used when the action is send-to. dual-hop packets traverse attachments in both the source to the destination core network edges. This mode requires that an inspection attachment must be present in all Regions of the service insertion-enabled segments. For single-hop, packets traverse a single intermediate inserted attachment. You can use EdgeOverride to specify a specific edge to use.

previous_values.service_insertion_actions[].via

The list of network function groups and any edge overrides for the chosen service insertion action. Used for both send-to or send-via.

Show child fields
previous_values.service_insertion_actions[].via.network_function_groups[]
Show child fields
previous_values.service_insertion_actions[].via.network_function_groups[].name

The name of the network function group.

previous_values.service_insertion_actions[].via.with_edge_overrides[]
Show child fields
previous_values.service_insertion_actions[].via.with_edge_overrides[].edge_sets[][]
previous_values.service_insertion_actions[].via.with_edge_overrides[].use_edge

The edge that should be used when overriding the current edge order.

previous_values.service_insertion_actions[].when_sent_to

The list of destination segments if the service insertion action is send-via.

Show child fields
previous_values.service_insertion_actions[].when_sent_to.when_sent_to_segments_list[]
previous_values.shared_segments[]
type

The type of change.

VARCHAR