---
type: resource-type
title: Firewall
description: aws resource type AWS::NetworkFirewall::Firewall
name: Firewall
lexicon: aws
resource_type: AWS::NetworkFirewall::Firewall
---
`AWS::NetworkFirewall::Firewall`, a resource type of the aws lexicon.

## Properties

- `FirewallName` (`string`, required)
- `FirewallPolicyArn` (`string`, required)
- `AvailabilityZoneChangeProtection` (`boolean`, optional)
- `AvailabilityZoneMappings` (`Firewall_AvailabilityZoneMapping[]`, optional)
- `DeleteProtection` (`boolean`, optional)
- `Description` (`string`, optional)
- `EnabledAnalysisTypes` (`Firewall_EnabledAnalysisType[]`, optional): The types of analysis to enable for the firewall. Can be TLS_SNI, HTTP_HOST, or both.
- `EndpointIds` (`string[]`, optional)
- `FirewallArn` (`string`, optional)
- `FirewallId` (`string`, optional)
- `FirewallPolicyChangeProtection` (`boolean`, optional)
- `SubnetChangeProtection` (`boolean`, optional)
- `SubnetMappings` (`Firewall_SubnetMapping[]`, optional)
- `Tags` (`Firewall_Tag[]`, optional)
- `TransitGatewayAttachmentId` (`string`, optional)
- `TransitGatewayId` (`string`, optional)
- `VpcId` (`string`, optional)

## Attributes

- `EndpointIds`
- `FirewallArn`
- `FirewallId`
- `TransitGatewayAttachmentId`