v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1436240246.3 KB

Creates an Network Firewall TLS inspection configuration. A TLS inspection configuration contains the Certificate Manager certificate references that Network Firewall uses to decrypt and re-encrypt inbound traffic.

After you create a TLS inspection configuration, you associate it with a firewall policy.

To update the settings for a TLS inspection configuration, use UpdateTLSInspectionConfiguration.

To manage a TLS inspection configuration's tags, use the standard Amazon Web Services resource tagging operations, ListTagsForResource, TagResource, and UntagResource.

To retrieve information about TLS inspection configurations, use ListTLSInspectionConfigurations and DescribeTLSInspectionConfiguration.

For more information about TLS inspection configurations, see Decrypting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide.

post/#X-Amz-Target=NetworkFirewall_20201112.CreateTLSInspectionConfiguration

Headers

X-Amz-Target'NetworkFirewall_20201112.CreateTLSInspectionConfiguration' required

Request body

TLSInspectionConfigurationNamestring required

The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it.

Descriptionstring

A description of the TLS inspection configuration.

Response

Success

UpdateTokenstring required
<p>A token used for optimistic locking. Network Firewall returns a token to your requests that access the TLS inspection configuration. The token marks the state of the TLS inspection configuration resource at the time of the request. </p> <p>To make changes to the TLS inspection configuration, you provide the token in your request. Network Firewall uses the token to ensure that the TLS inspection configuration hasn't changed since you last retrieved it. If it has changed, the operation fails with an <code>InvalidTokenException</code>. If this happens, retrieve the TLS inspection configuration again to get a current copy of it with a current token. Reapply your changes as needed, then try the operation again using the new token. </p>