The following resources are available for configuration:

• Firewall – defines the configuration settings for an AWS Network Firewall firewall, which include the firewall policy and the subnets in your VPC to use for the firewall endpoints.
• Firewall Policy: defines a collection of stateless and stateful network traffic filtering rule groups which can then be associated with a firewall
• Rule Groups – Reusable set of criteria for inspecting and handling network traffic. There are two types of rule groups:
• Stateless – Defines standard, 5-tuple criteria for examining a packet on its own, with no additional context.
• Stateful – Defines criteria for examining a packet in the context of traffic flow and of other traffic that's related to the packet. Stateful rule groups are available in the following categories:
• 5-tuple – Defines standard criteria for examining a packet within the context of a traffic workflow.
• Domain list – Defines a list of domain names and specifies the protocol type to inspect.
• Suricata compatible IPS rules – Defines intrusion prevention system (IPS) rules in the rule group, in Suricata compatible format. (Currently not supported)