Checks/Aws/Test-NetworkfirewallPolicyDefaultActionFullPackets.ps1
|
function Test-NetworkfirewallPolicyDefaultActionFullPackets { <# .SYNOPSIS Network Firewall firewall policy default stateless action for full packets is drop or forward .DESCRIPTION **AWS Network Firewall policies** define a **stateless default action** for full packets. This evaluates whether unmatched packets are handled by `aws:drop` or `aws:forward_to_sfe`, meaning they are either discarded or sent to the stateful engine rather than allowed to pass. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: networkfirewall_policy_default_action_full_packets [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check networkfirewall_policy_default_action_full_packets for reference.', 'N/A', 'networkfirewall Resources') } |