ResourceViolation ¶

class ResourceViolation(TypedDict, closed=True):
    aws_vpc_security_group_violation: NotRequired[
        "capo_fms.types.aws_vpc_security_group_violation.AwsVPCSecurityGroupViolation"
    ]
    """<p>Violation detail for security groups.</p>"""
    aws_ec2_network_interface_violation: NotRequired[
        "capo_fms.types.aws_ec2_network_interface_violation.AwsEc2NetworkInterfaceViolation"
    ]
    """<p>Violation detail for a network interface.</p>"""
    aws_ec2_instance_violation: NotRequired[
        "capo_fms.types.aws_ec2_instance_violation.AwsEc2InstanceViolation"
    ]
    """<p>Violation detail for an EC2 instance.</p>"""
    network_firewall_missing_firewall_violation: NotRequired[
        "capo_fms.types.network_firewall_missing_firewall_violation.NetworkFirewallMissingFirewallViolation"
    ]
    """<p>Violation detail for an Network Firewall policy that indicates that a subnet has no Firewall Manager managed firewall in its VPC. </p>"""
    network_firewall_missing_subnet_violation: NotRequired[
        "capo_fms.types.network_firewall_missing_subnet_violation.NetworkFirewallMissingSubnetViolation"
    ]
    """<p>Violation detail for an Network Firewall policy that indicates that an Availability Zone is missing the expected Firewall Manager managed subnet.</p>"""
    network_firewall_missing_expected_rt_violation: NotRequired[
        "capo_fms.types.network_firewall_missing_expected_rt_violation.NetworkFirewallMissingExpectedRTViolation"
    ]
    """<p>Violation detail for an Network Firewall policy that indicates that a subnet is not associated with the expected Firewall Manager managed route table. </p>"""
    network_firewall_policy_modified_violation: NotRequired[
        "capo_fms.types.network_firewall_policy_modified_violation.NetworkFirewallPolicyModifiedViolation"
    ]
    """<p>Violation detail for an Network Firewall policy that indicates that a firewall policy in an individual account has been modified in a way that makes it noncompliant. For example, the individual account owner might have deleted a rule group, changed the priority of a stateless rule group, or changed a policy default action.</p>"""
    network_firewall_internet_traffic_not_inspected_violation: NotRequired[
        "capo_fms.types.network_firewall_internet_traffic_not_inspected_violation.NetworkFirewallInternetTrafficNotInspectedViolation"
    ]
    """<p>Violation detail for the subnet for which internet traffic hasn't been inspected.</p>"""
    network_firewall_invalid_route_configuration_violation: NotRequired[
        "capo_fms.types.network_firewall_invalid_route_configuration_violation.NetworkFirewallInvalidRouteConfigurationViolation"
    ]
    """<p>The route configuration is invalid.</p>"""
    network_firewall_black_hole_route_detected_violation: NotRequired[
        "capo_fms.types.network_firewall_black_hole_route_detected_violation.NetworkFirewallBlackHoleRouteDetectedViolation"
    ]
    network_firewall_unexpected_firewall_routes_violation: NotRequired[
        "capo_fms.types.network_firewall_unexpected_firewall_routes_violation.NetworkFirewallUnexpectedFirewallRoutesViolation"
    ]
    """<p>There's an unexpected firewall route.</p>"""
    network_firewall_unexpected_gateway_routes_violation: NotRequired[
        "capo_fms.types.network_firewall_unexpected_gateway_routes_violation.NetworkFirewallUnexpectedGatewayRoutesViolation"
    ]
    """<p>There's an unexpected gateway route.</p>"""
    network_firewall_missing_expected_routes_violation: NotRequired[
        "capo_fms.types.network_firewall_missing_expected_routes_violation.NetworkFirewallMissingExpectedRoutesViolation"
    ]
    """<p>Expected routes are missing from Network Firewall.</p>"""
    dns_rule_group_priority_conflict_violation: NotRequired[
        "capo_fms.types.dns_rule_group_priority_conflict_violation.DnsRuleGroupPriorityConflictViolation"
    ]
    """<p>Violation detail for a DNS Firewall policy that indicates that a rule group that Firewall Manager tried to associate with a VPC has the same priority as a rule group that's already associated. </p>"""
    dns_duplicate_rule_group_violation: NotRequired[
        "capo_fms.types.dns_duplicate_rule_group_violation.DnsDuplicateRuleGroupViolation"
    ]
    """<p>Violation detail for a DNS Firewall policy that indicates that a rule group that Firewall Manager tried to associate with a VPC is already associated with the VPC and can't be associated again. </p>"""
    dns_rule_group_limit_exceeded_violation: NotRequired[
        "capo_fms.types.dns_rule_group_limit_exceeded_violation.DnsRuleGroupLimitExceededViolation"
    ]
    """<p>Violation detail for a DNS Firewall policy that indicates that the VPC reached the limit for associated DNS Firewall rule groups. Firewall Manager tried to associate another rule group with the VPC and failed. </p>"""
    firewall_subnet_is_out_of_scope_violation: NotRequired[
        "capo_fms.types.firewall_subnet_is_out_of_scope_violation.FirewallSubnetIsOutOfScopeViolation"
    ]
    """<p>Contains details about the firewall subnet that violates the policy scope.</p>"""
    route_has_out_of_scope_endpoint_violation: NotRequired[
        "capo_fms.types.route_has_out_of_scope_endpoint_violation.RouteHasOutOfScopeEndpointViolation"
    ]
    """<p>Contains details about the route endpoint that violates the policy scope.</p>"""
    third_party_firewall_missing_firewall_violation: NotRequired[
        "capo_fms.types.third_party_firewall_missing_firewall_violation.ThirdPartyFirewallMissingFirewallViolation"
    ]
    """<p>The violation details for a third-party firewall that's been deleted.</p>"""
    third_party_firewall_missing_subnet_violation: NotRequired[
        "capo_fms.types.third_party_firewall_missing_subnet_violation.ThirdPartyFirewallMissingSubnetViolation"
    ]
    """<p>The violation details for a third-party firewall's subnet that's been deleted.</p>"""
    third_party_firewall_missing_expected_route_table_violation: NotRequired[
        "capo_fms.types.third_party_firewall_missing_expected_route_table_violation.ThirdPartyFirewallMissingExpectedRouteTableViolation"
    ]
    """<p>The violation details for a third-party firewall that has the Firewall Manager managed route table that was associated with the third-party firewall has been deleted.</p>"""
    firewall_subnet_missing_vpc_endpoint_violation: NotRequired[
        "capo_fms.types.firewall_subnet_missing_vpc_endpoint_violation.FirewallSubnetMissingVPCEndpointViolation"
    ]
    """<p>The violation details for a third-party firewall's VPC endpoint subnet that was deleted.</p>"""
    invalid_network_acl_entries_violation: NotRequired[
        "capo_fms.types.invalid_network_acl_entries_violation.InvalidNetworkAclEntriesViolation"
    ]
    """<p>Violation detail for the entries in a network ACL resource.</p>"""
    possible_remediation_actions: NotRequired[
        "capo_fms.types.possible_remediation_actions.PossibleRemediationActions"
    ]
    """<p>A list of possible remediation action lists. Each individual possible remediation action is a list of individual remediation actions.</p>"""
    web_acl_has_incompatible_configuration_violation: NotRequired[
        "capo_fms.types.web_acl_has_incompatible_configuration_violation.WebACLHasIncompatibleConfigurationViolation"
    ]
    """<p>The violation details for a web ACL whose configuration is incompatible with the Firewall Manager policy. </p>"""
    web_acl_has_out_of_scope_resources_violation: NotRequired[
        "capo_fms.types.web_acl_has_out_of_scope_resources_violation.WebACLHasOutOfScopeResourcesViolation"
    ]
    """<p>The violation details for a web ACL that's associated with at least one resource that's out of scope of the Firewall Manager policy. </p>"""