AWS AWSCloudFormation documentation change
Summary
Updated documentation for Network Firewall flow timeouts to clarify that existing connections are treated according to stream exception policy configuration when timeout values are updated
Security assessment
This change clarifies existing behavior of Network Firewall flow timeout configuration but does not indicate any security vulnerability or incident. It's a documentation clarification about how existing connections are handled when timeout values change.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.md index 0753e6f62..80115c459 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.md @@ -0,0 +1,2 @@ +[View a markdown version of this page](aws-properties-networkfirewall-firewallpolicy-flowtimeouts.md) + @@ -9 +11 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -Describes the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle and Network Firewall removes the flow entry from its flow table. Existing connections and flows are not impacted when you update this value. Only new connections after you update this value are impacted. +Describes the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle and Network Firewall removes the flow entry from its flow table. When you update this value, existing connections will be treated according to your stream exception policy configuration.