Attachment
The definition and status of the firewall endpoint for a single subnet. In each configured subnet, Network Firewall instantiates a firewall endpoint to handle network traffic.
This data type is used for any firewall endpoint type:
For
Firewall.SubnetMappings, thisAttachmentis part of theFirewallStatussync states information. You define firewall subnets usingCreateFirewallandAssociateSubnets.For
VpcEndpointAssociation, thisAttachmentis part of theVpcEndpointAssociationStatussync states information. You define these subnets usingCreateVpcEndpointAssociation.
Types
Properties
The identifier of the firewall endpoint that Network Firewall has instantiated in the subnet. You use this to identify the firewall endpoint in the VPC route tables, when you redirect the VPC traffic through the endpoint.
The current status of the firewall endpoint instantiation in the subnet.
If Network Firewall fails to create or delete the firewall endpoint in the subnet, it populates this with the reason for the error or failure and how to resolve it. A FAILED status indicates a non-recoverable state, and a ERROR status indicates an issue that you can fix. Depending on the error, it can take as many as 15 minutes to populate this field. For more information about the causes for failiure or errors and solutions available for this field, see Troubleshooting firewall endpoint failures in the Network Firewall Developer Guide.