Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. networkfirewall
  6. ContainerAssociation

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.80.0
published on Monday, Sep 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.networkfirewall.ContainerAssociation

aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.80.0
published on Monday, Sep 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource type definition for AWS::NetworkFirewall::ContainerAssociation. A container association monitors container lifecycle events in your Amazon ECS or Amazon EKS clusters and resolves running container addresses for use in Network Firewall rules.

    Create ContainerAssociation Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ContainerAssociation(name: string, args: ContainerAssociationArgs, opts?: CustomResourceOptions);
    @overload
def ContainerAssociation(resource_name: str,
                         args: ContainerAssociationArgs,
                         opts: Optional[ResourceOptions] = None)

@overload
def ContainerAssociation(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         container_monitoring_configurations: Optional[Sequence[ContainerAssociationContainerMonitoringConfigurationArgs]] = None,
                         type: Optional[ContainerAssociationType] = None,
                         container_association_name: Optional[str] = None,
                         description: Optional[str] = None,
                         tags: Optional[Sequence[_root_inputs.TagArgs]] = None)
    func NewContainerAssociation(ctx *Context, name string, args ContainerAssociationArgs, opts ...ResourceOption) (*ContainerAssociation, error)
    public ContainerAssociation(string name, ContainerAssociationArgs args, CustomResourceOptions? opts = null)
    public ContainerAssociation(String name, ContainerAssociationArgs args)
public ContainerAssociation(String name, ContainerAssociationArgs args, CustomResourceOptions options)

    type: aws-native:networkfirewall:ContainerAssociation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "aws-native_networkfirewall_container_association" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ContainerAssociationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ContainerAssociationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ContainerAssociationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ContainerAssociationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ContainerAssociationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    ContainerAssociation Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ContainerAssociation resource accepts the following input properties:

    ContainerMonitoringConfigurations List<Pulumi.AwsNative.NetworkFirewall.Inputs.ContainerAssociationContainerMonitoringConfiguration>
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    Type Pulumi.AwsNative.NetworkFirewall.ContainerAssociationType
    The type of containers to monitor. You can't change the container type after creation.
    ContainerAssociationName string
    The descriptive name of the container association. You can't change the name of a container association after you create it.
    Description string
    A description of the container association.
    Tags List<Pulumi.AwsNative.Inputs.Tag>
    An array of key-value pairs to apply to this resource.
    ContainerMonitoringConfigurations []ContainerAssociationContainerMonitoringConfigurationArgs
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    Type ContainerAssociationType
    The type of containers to monitor. You can't change the container type after creation.
    ContainerAssociationName string
    The descriptive name of the container association. You can't change the name of a container association after you create it.
    Description string
    A description of the container association.
    Tags TagArgs
    An array of key-value pairs to apply to this resource.
    container_monitoring_configurations list(object)
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    type "ECS" | "EKS"
    The type of containers to monitor. You can't change the container type after creation.
    container_association_name string
    The descriptive name of the container association. You can't change the name of a container association after you create it.
    description string
    A description of the container association.
    tags list(object)
    An array of key-value pairs to apply to this resource.
    containerMonitoringConfigurations List<ContainerAssociationContainerMonitoringConfiguration>
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    type ContainerAssociationType
    The type of containers to monitor. You can't change the container type after creation.
    containerAssociationName String
    The descriptive name of the container association. You can't change the name of a container association after you create it.
    description String
    A description of the container association.
    tags List<Tag>
    An array of key-value pairs to apply to this resource.
    containerMonitoringConfigurations ContainerAssociationContainerMonitoringConfiguration[]
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    type ContainerAssociationType
    The type of containers to monitor. You can't change the container type after creation.
    containerAssociationName string
    The descriptive name of the container association. You can't change the name of a container association after you create it.
    description string
    A description of the container association.
    tags Tag[]
    An array of key-value pairs to apply to this resource.
    container_monitoring_configurations Sequence[ContainerAssociationContainerMonitoringConfigurationArgs]
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    type ContainerAssociationType
    The type of containers to monitor. You can't change the container type after creation.
    container_association_name str
    The descriptive name of the container association. You can't change the name of a container association after you create it.
    description str
    A description of the container association.
    tags Sequence[TagArgs]
    An array of key-value pairs to apply to this resource.
    containerMonitoringConfigurations List<Property Map>
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    type "ECS" | "EKS"
    The type of containers to monitor. You can't change the container type after creation.
    containerAssociationName String
    The descriptive name of the container association. You can't change the name of a container association after you create it.
    description String
    A description of the container association.
    tags List<Property Map>
    An array of key-value pairs to apply to this resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ContainerAssociation resource produces the following output properties:

    ContainerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResolvedCidrCount int
    The number of CIDR blocks resolved from the monitored containers.
    Status Pulumi.AwsNative.NetworkFirewall.ContainerAssociationStatus
    The current status of the container association.
    ContainerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResolvedCidrCount int
    The number of CIDR blocks resolved from the monitored containers.
    Status ContainerAssociationStatus
    The current status of the container association.
    container_association_arn string
    The Amazon Resource Name (ARN) of the container association.
    id string
    The provider-assigned unique ID for this managed resource.
    resolved_cidr_count number
    The number of CIDR blocks resolved from the monitored containers.
    status "ACTIVE" | "CREATING" | "DELETING" | "UPDATING"
    The current status of the container association.
    containerAssociationArn String
    The Amazon Resource Name (ARN) of the container association.
    id String
    The provider-assigned unique ID for this managed resource.
    resolvedCidrCount Integer
    The number of CIDR blocks resolved from the monitored containers.
    status ContainerAssociationStatus
    The current status of the container association.
    containerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    id string
    The provider-assigned unique ID for this managed resource.
    resolvedCidrCount number
    The number of CIDR blocks resolved from the monitored containers.
    status ContainerAssociationStatus
    The current status of the container association.
    container_association_arn str
    The Amazon Resource Name (ARN) of the container association.
    id str
    The provider-assigned unique ID for this managed resource.
    resolved_cidr_count int
    The number of CIDR blocks resolved from the monitored containers.
    status ContainerAssociationStatus
    The current status of the container association.
    containerAssociationArn String
    The Amazon Resource Name (ARN) of the container association.
    id String
    The provider-assigned unique ID for this managed resource.
    resolvedCidrCount Number
    The number of CIDR blocks resolved from the monitored containers.
    status "ACTIVE" | "CREATING" | "DELETING" | "UPDATING"
    The current status of the container association.

    Supporting Types

    ContainerAssociationContainerAttribute, ContainerAssociationContainerAttributeArgs

    A key-value filter pair used in container association monitoring configurations to narrow which containers are tracked.
    Key string
    The attribute key to filter on.
    Value string
    The attribute value to match.
    Key string
    The attribute key to filter on.
    Value string
    The attribute value to match.
    key string
    The attribute key to filter on.
    value string
    The attribute value to match.
    key String
    The attribute key to filter on.
    value String
    The attribute value to match.
    key string
    The attribute key to filter on.
    value string
    The attribute value to match.
    key str
    The attribute key to filter on.
    value str
    The attribute value to match.
    key String
    The attribute key to filter on.
    value String
    The attribute value to match.

    ContainerAssociationContainerMonitoringConfiguration, ContainerAssociationContainerMonitoringConfigurationArgs

    Contains the monitoring configuration for a single cluster in a container association. Specifies the cluster ARN and optional attribute filters to narrow which containers are tracked.
    ClusterArn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    AttributeFilters List<Pulumi.AwsNative.NetworkFirewall.Inputs.ContainerAssociationContainerAttribute>
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    ClusterArn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    AttributeFilters []ContainerAssociationContainerAttribute
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    cluster_arn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attribute_filters list(object)
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    clusterArn String
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attributeFilters List<ContainerAssociationContainerAttribute>
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    clusterArn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attributeFilters ContainerAssociationContainerAttribute[]
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    cluster_arn str
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attribute_filters Sequence[ContainerAssociationContainerAttribute]
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    clusterArn String
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attributeFilters List<Property Map>
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).

    ContainerAssociationStatus, ContainerAssociationStatusArgs

    Active
    ACTIVE
    Creating
    CREATING
    Deleting
    DELETING
    Updating
    UPDATING
    ContainerAssociationStatusActive
    ACTIVE
    ContainerAssociationStatusCreating
    CREATING
    ContainerAssociationStatusDeleting
    DELETING
    ContainerAssociationStatusUpdating
    UPDATING
    "ACTIVE"
    ACTIVE
    "CREATING"
    CREATING
    "DELETING"
    DELETING
    "UPDATING"
    UPDATING
    Active
    ACTIVE
    Creating
    CREATING
    Deleting
    DELETING
    Updating
    UPDATING
    Active
    ACTIVE
    Creating
    CREATING
    Deleting
    DELETING
    Updating
    UPDATING
    ACTIVE
    ACTIVE
    CREATING
    CREATING
    DELETING
    DELETING
    UPDATING
    UPDATING
    "ACTIVE"
    ACTIVE
    "CREATING"
    CREATING
    "DELETING"
    DELETING
    "UPDATING"
    UPDATING

    ContainerAssociationType, ContainerAssociationTypeArgs

    Ecs
    ECS
    Eks
    EKS
    ContainerAssociationTypeEcs
    ECS
    ContainerAssociationTypeEks
    EKS
    "ECS"
    ECS
    "EKS"
    EKS
    Ecs
    ECS
    Eks
    EKS
    Ecs
    ECS
    Eks
    EKS
    ECS
    ECS
    EKS
    EKS
    "ECS"
    ECS
    "EKS"
    EKS

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.80.0
    published on Monday, Sep 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial