Begins capturing the flows in a firewall, according to the filters you define — networkfirewall_start_flow

Begins capturing the flows in a firewall, according to the filters you define. Captures are similar, but not identical to snapshots. Capture operations provide visibility into flows that are not closed and are tracked by a firewall's flow table. Unlike snapshots, captures are a time-boxed view.

See https://www.paws-r-sdk.com/docs/networkfirewall_start_flow_capture/ for full documentation.

Usage

networkfirewall_start_flow_capture(
  FirewallArn,
  AvailabilityZone = NULL,
  VpcEndpointAssociationArn = NULL,
  VpcEndpointId = NULL,
  MinimumFlowAgeInSeconds = NULL,
  FlowFilters
)

Arguments

FirewallArn

[required] The Amazon Resource Name (ARN) of the firewall.

AvailabilityZone

The ID of the Availability Zone where the firewall is located. For example, us-east-2a.

Defines the scope a flow operation. You can use up to 20 filters to configure a single flow operation.

VpcEndpointAssociationArn

The Amazon Resource Name (ARN) of a VPC endpoint association.

VpcEndpointId

A unique identifier for the primary endpoint associated with a firewall.

MinimumFlowAgeInSeconds

The reqested FlowOperation ignores flows with an age (in seconds) lower than MinimumFlowAgeInSeconds. You provide this for start commands.

We recommend setting this value to at least 1 minute (60 seconds) to reduce chance of capturing flows that are not yet established.

FlowFilters

[required] Defines the scope a flow operation. You can use up to 20 filters to configure a single flow operation.