AWS network-manager documentation change

Service: network-manager · 2025-06-19 · Documentation medium

File: network-manager/latest/tgwnm/monitoring-events.md

Summary

Added monitoring events for Network Firewall attachment creation/deletion with example payloads

Security assessment

Documents monitoring capabilities for Network Firewall attachments, which are security components. While security-related, this is operational documentation rather than addressing a specific vulnerability.

Diff

diff --git a/network-manager/latest/tgwnm/monitoring-events.md b/network-manager/latest/tgwnm/monitoring-events.md
index 70e44adb2..4a2a703d2 100644
--- a//network-manager/latest/tgwnm/monitoring-events.md
+++ b//network-manager/latest/tgwnm/monitoring-events.md
@@ -138,0 +139,4 @@ Topology change events occur when there have been changes to the resources in yo
+  * A Network Firewall attachment was created (NETWORK-FIREWALL-ATTACHMENT-CREATED)
+
+  * A Network Firewall attachment was deleted (NETWORK-FIREWALL-ATTACHMENT-DELETED)
+
@@ -519,0 +524,54 @@ Topology change events occur when there have been changes to the resources in yo
+### A Network Firewall attachment was created (NETWORK-FIREWALL-ATTACHMENT-CREATED)
+    
+    
+    {
+        "version": "0",
+        "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
+        "detail-type": "Network Manager Topology Change",
+        "source": "aws.networkmanager",
+        "account": "123456789012",
+        "time": "2023-01-19T18:57:29Z",
+        "region": "us-west-2",
+        "resources": [
+            "arn:aws:networkmanager::123456789012:global-network/global-network-1234567890abcdef0",
+            "arn:aws:ec2:us-east-1:123456789012:transit-gateway/tgw-1234567890abcdef0"
+        ],
+        "detail": {
+            "changeType": "  ",
+            "changeDescription": "A Network Firewall attachment has been created.",
+            "region": "us-east-1",
+            "transitGatewayAttachmentArn": "arn:aws:ec2:us-east-1:123456789012:transit-gateway-attachment/tgw-attach-1234567890abcdef0",
+            "resourceArns":[
+                "arn:aws:network-firewall:us-east-1:123456789012:firewall/arn:aws:network-firewall:us-east-1:123456789012:firewall/firewall-network-manager-event-example"
+                ],
+            "transitGatewayArn": "arn:aws:ec2:us-east-1:123456789012:transit-gateway/tgw-1234567890abcdef0"
+        }
+    }
+
+### A Network Firewall attachment was deleted (NETWORK-FIREWALL-ATTACHMENT-DELETED)
+    
+    
+    {
+        "version": "0",
+        "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
+        "detail-type": "Network Manager Topology Change",
+        "source": "aws.networkmanager",
+        "account": "123456789012",
+        "time": "2023-01-19T19:16:23Z",
+        "region": "us-west-2",
+        "resources": [
+            "arn:aws:networkmanager::123456789012:global-network/global-network-1234567890abcdef0",
+            "arn:aws:ec2:us-east-1:123456789012:transit-gateway/tgw-1234567890abcdef0"
+        ],
+        "detail": {
+            "changeType": "NETWORK-FIREWALL-ATTACHMENT-DELETED",
+            "changeDescription": "A Network Firewall attachment has been deleted.",
+            "region": "us-east-1",
+            "transitGatewayAttachmentArn": "arn:aws:ec2:us-east-1:123456789012:transit-gateway-attachment/tgw-attach-1234567890abcdef0",
+                    "resourceArns":[
+                "arn:aws:network-firewall:us-east-1:123456789012:firewall/arn:aws:network-firewall:us-east-1:123456789012:firewall/firewall-network-manager-event-example"
+                ],
+            "transitGatewayArn": "arn:aws:ec2:us-east-1:123456789012:transit-gateway/tgw-1234567890abcdef0"
+        }
+    }
+