{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-network-firewall/refs/heads/main/json-schema/openapi-create-tls-inspection-configuration-request-schema.json", "title": "CreateTLSInspectionConfigurationRequest", "description": "CreateTLSInspectionConfigurationRequest schema from Amazon Network Firewall", "type": "object", "properties": { "TLSInspectionConfigurationName": { "allOf": [ { "$ref": "#/components/schemas/ResourceName" }, { "description": "The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it." } ] }, "TLSInspectionConfiguration": { "allOf": [ { "$ref": "#/components/schemas/TLSInspectionConfiguration" }, { "description": "

The object that defines a TLS inspection configuration. This, along with TLSInspectionConfigurationResponse, define the TLS inspection configuration. You can retrieve all objects for a TLS inspection configuration by calling DescribeTLSInspectionConfiguration.

Network Firewall uses a TLS inspection configuration to decrypt traffic. Network Firewall re-encrypts the traffic before sending it to its destination.

To use a TLS inspection configuration, you add it to a Network Firewall firewall policy, then you apply the firewall policy to a firewall. Network Firewall acts as a proxy service to decrypt and inspect inbound traffic. You can reference a TLS inspection configuration from more than one firewall policy, and you can use a firewall policy in more than one firewall. For more information about using TLS inspection configurations, see Decrypting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide.

" } ] }, "Description": { "allOf": [ { "$ref": "#/components/schemas/Description" }, { "description": "A description of the TLS inspection configuration. " } ] }, "Tags": { "allOf": [ { "$ref": "#/components/schemas/TagList" }, { "description": "The key:value pairs to associate with the resource." } ] }, "EncryptionConfiguration": { "$ref": "#/components/schemas/EncryptionConfiguration" } }, "required": [ "TLSInspectionConfigurationName", "TLSInspectionConfiguration" ] }