Checks/Aws/Test-NetworkfirewallPolicyDefaultActionFragmentedPackets.ps1
|
function Test-NetworkfirewallPolicyDefaultActionFragmentedPackets { <# .SYNOPSIS Network Firewall policy drops or forwards fragmented packets by default .DESCRIPTION **Network Firewall policies** are assessed for the `StatelessFragmentDefaultActions` setting to confirm **fragmented UDP packets** use `aws:drop` or `aws:forward_to_sfe`. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: networkfirewall_policy_default_action_fragmented_packets [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check networkfirewall_policy_default_action_fragmented_packets for reference.', 'N/A', 'networkfirewall Resources') } |