(module name): (short issue description)

[itaymelamed]

Describe the bug

When trying to create a rule in AWS network firewall using ip set reference, once running cdk deploy , the value in the template for "reference_sets" is empty and i'm getting an internal error

Expected Behavior

value for reference_sets should be created

Current Behavior

Value is empty

Reproduction Steps

Create a aws network firewall rule with

                    reference_sets=networkfirewall.CfnRuleGroup.ReferenceSetsProperty(
                        ip_set_references={
                            "ip_set_references_key": {
                                "reference_arn": "referenceArn"
                            }
                        }
                    )

Possible Solution

No response

Additional Information/Context

No response

CDK CLI Version

2.88

Framework Version

No response

Node.js Version

18.16.0

OS

Mac

Language

Python

Language Version

No response

Other information

No response

[peterwoodworth]

ipSetReferences wants an IPSetReferenceProperty type for the value. The following works for me:

        networkfirewall.CfnRuleGroup(self, "ruleGroup", 
            capacity=123,
            rule_group_name="ruleGroupName",
            type="type",
            description="description",
            rule_group=networkfirewall.CfnRuleGroup.RuleGroupProperty(
              rules_source=networkfirewall.CfnRuleGroup.RulesSourceProperty(
                rules_string="rulesString",
              ),
              reference_sets=networkfirewall.CfnRuleGroup.ReferenceSetsProperty(
                ip_set_references= {
                    "key" : networkfirewall.CfnRuleGroup.IPSetReferenceProperty(
                        reference_arn='arn'
                    )
                }
              )
            )
        )

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.