stateless Fragment Default Actions
Parameters
The actions to take on a fragmented packet if it doesn't match any of the stateless rules in the policy. If you want non-matching fragmented packets to be forwarded for stateful inspection, specify aws:forward_to_sfe
. You must specify one of the standard actions: aws:pass
, aws:drop
, or aws:forward_to_sfe
. In addition, you can specify custom actions that are compatible with your standard section choice. For example, you could specify ["aws:pass"]
or you could specify ["aws:pass", "customActionName"]
. For information about compatibility, see the custom action descriptions.
Parameters
The actions to take on a fragmented packet if it doesn't match any of the stateless rules in the policy. If you want non-matching fragmented packets to be forwarded for stateful inspection, specify aws:forward_to_sfe
. You must specify one of the standard actions: aws:pass
, aws:drop
, or aws:forward_to_sfe
. In addition, you can specify custom actions that are compatible with your standard section choice. For example, you could specify ["aws:pass"]
or you could specify ["aws:pass", "customActionName"]
. For information about compatibility, see the custom action descriptions.