# AWS Network Firewall API

> AWS Network Firewall API on Apizie: 36 endpoints (Associates a FirewallPolicy to a Firewall . A firewall policy defines how to monitor and manage your VPC…, Associates the specified subnets in the Amazon VPC to the firewall. You can specify one subnet for each of…, Creates an Network Firewall Firewall and accompanying FirewallStatus for a VPC. The firewall defines the…, Creates the firewall policy for the firewall according to the specifications. An Network Firewall firewall…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-network-firewall`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://zieapi.vercel.app/api/cloud/amazonaws-network-firewall
- OpenAPI: https://zieapi.vercel.app/api/cloud/amazonaws-network-firewall/openapi.json

This is the API Reference for Network Firewall. This guide is for developers who need detailed information about the Network Firewall API actions, data types, and errors. The REST API requires you to handle connection…

## Endpoints

### Associates a FirewallPolicy to a Firewall . A firewall policy defines how to monitor and manage your VPC…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/associate-firewall-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Associates the specified subnets in the Amazon VPC to the firewall. You can specify one subnet for each of…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/associate-subnets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates an Network Firewall Firewall and accompanying FirewallStatus for a VPC. The firewall defines the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/create-firewall` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates the firewall policy for the firewall according to the specifications. An Network Firewall firewall…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/create-firewall-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates the specified stateless or stateful rule group, which includes the rules for network traffic…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/create-rule-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates an Network Firewall TLS inspection configuration. A TLS inspection configuration contains the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/create-tlsinspection-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified Firewall and its FirewallStatus . This operation requires the firewall's…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/delete-firewall` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified FirewallPolicy .
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/delete-firewall-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes a resource policy that you created in a PutResourcePolicy request.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/delete-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified RuleGroup .
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/delete-rule-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified TLSInspectionConfiguration .
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/delete-tlsinspection-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the data objects for the specified firewall.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/describe-firewall` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the data objects for the specified firewall policy.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/describe-firewall-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the logging configuration for the specified firewall.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/describe-logging-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves a resource policy that you created in a PutResourcePolicy request.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/describe-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the data objects for the specified rule group.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/describe-rule-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### High-level information about a rule group, returned by operations like create and describe. You can use the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/describe-rule-group-metadata` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the data objects for the specified TLS inspection configuration.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/describe-tlsinspection-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes the specified subnet associations from the firewall. This removes the firewall endpoints from the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/disassociate-subnets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the metadata for the firewall policies that you have defined. Depending on your setting for max…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/list-firewall-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves the metadata for the firewalls that you have defined. If you provide VPC identifiers in your…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/list-firewalls` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves the metadata for the rule groups that you have defined. Depending on your setting for max results…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/list-rule-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves the metadata for the TLS inspection configurations that you have defined. Depending on your…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/list-tlsinspection-configurations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves the tags associated with the specified resource. Tags are key:value pairs that you can use to…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Creates or updates an IAM policy for your rule group or firewall policy. Use this to share rule groups and…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/put-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Adds the specified tags to the specified resource. Tags are key:value pairs that you can use to categorize…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes the tags with the specified keys from the specified resource. Tags are key:value pairs that you can…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Modifies the flag, DeleteProtection , which indicates whether it is possible to delete the firewall. If the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-firewall-delete-protection` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Modifies the description for the specified firewall. Use the description to help you identify the firewall…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-firewall-description` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### A complex type that contains settings for encryption of your firewall resources.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-firewall-encryption-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates the properties of the specified firewall policy.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-firewall-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Modifies the flag, ChangeProtection , which indicates whether it is possible to change the firewall. If the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-firewall-policy-change-protection` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Sets the logging configuration for the specified firewall. To change the logging configuration, retrieve the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-logging-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates the rule settings for the specified rule group. You use a rule group by reference in one or more…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-rule-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### 
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-subnet-change-protection` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates the TLS inspection configuration settings for the specified TLS inspection configuration. You use a…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/update-tlsinspection-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/associate-firewall-policy" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS Network Firewall API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:amazonaws-network-firewall/associate-firewall-policy with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS Network Firewall API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS Network Firewall itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS Network Firewall API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-network-firewall.

### What is the status of the AWS Network Firewall API?
Needs your own provider key (bring your own key)