Checks if AWS Network Firewall firewalls have logging enabled. The rule is NON_COMPLIANT if a logging type is not configured. You can specify which logging type you want the rule to check.

This config rule supports the following parameters:

  • logType
    • Required: No
    • Type: String
    • Description:Log type for the rule to check for firewalls: 'alert', 'flow', or 'both'.

CloudFormation Template