1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. networkfirewall
  6. getContainerAssociation

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.80.0
published on Monday, Sep 21, 2026 by Pulumi
aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.80.0
published on Monday, Sep 21, 2026 by Pulumi

    Resource type definition for AWS::NetworkFirewall::ContainerAssociation. A container association monitors container lifecycle events in your Amazon ECS or Amazon EKS clusters and resolves running container addresses for use in Network Firewall rules.

    Using getContainerAssociation

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getContainerAssociation(args: GetContainerAssociationArgs, opts?: InvokeOptions): Promise<GetContainerAssociationResult>
    function getContainerAssociationOutput(args: GetContainerAssociationOutputArgs, opts?: InvokeOutputOptions): Output<GetContainerAssociationResult>
    def get_container_association(container_association_arn: Optional[str] = None,
                                  opts: Optional[InvokeOptions] = None) -> GetContainerAssociationResult
    def get_container_association_output(container_association_arn: pulumi.Input[Optional[str]] = None,
                                  opts: Optional[InvokeOutputOptions] = None) -> Output[GetContainerAssociationResult]
    func LookupContainerAssociation(ctx *Context, args *LookupContainerAssociationArgs, opts ...InvokeOption) (*LookupContainerAssociationResult, error)
    func LookupContainerAssociationOutput(ctx *Context, args *LookupContainerAssociationOutputArgs, opts ...InvokeOption) LookupContainerAssociationResultOutput

    > Note: This function is named LookupContainerAssociation in the Go SDK.

    public static class GetContainerAssociation 
    {
        public static Task<GetContainerAssociationResult> InvokeAsync(GetContainerAssociationArgs args, InvokeOptions? opts = null)
        public static Output<GetContainerAssociationResult> Invoke(GetContainerAssociationInvokeArgs args, InvokeOptions? opts = null)
        public static Output<GetContainerAssociationResult> Invoke(GetContainerAssociationInvokeArgs args, InvokeOutputOptions opts)
    }
    public static CompletableFuture<GetContainerAssociationResult> getContainerAssociation(GetContainerAssociationArgs args, InvokeOptions options)
    public static Output<GetContainerAssociationResult> getContainerAssociation(GetContainerAssociationArgs args, InvokeOptions options)
    public static Output<GetContainerAssociationResult> getContainerAssociation(GetContainerAssociationArgs args, InvokeOutputOptions options)
    
    fn::invoke:
      function: aws-native:networkfirewall:getContainerAssociation
      arguments:
        # arguments dictionary
    data "aws-native_networkfirewall_get_container_association" "name" {
        # arguments
    }

    The following arguments are supported:

    ContainerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    ContainerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    container_association_arn string
    The Amazon Resource Name (ARN) of the container association.
    containerAssociationArn String
    The Amazon Resource Name (ARN) of the container association.
    containerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    container_association_arn str
    The Amazon Resource Name (ARN) of the container association.
    containerAssociationArn String
    The Amazon Resource Name (ARN) of the container association.

    getContainerAssociation Result

    The following output properties are available:

    ContainerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    ContainerMonitoringConfigurations List<Pulumi.AwsNative.NetworkFirewall.Outputs.ContainerAssociationContainerMonitoringConfiguration>
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    Description string
    A description of the container association.
    ResolvedCidrCount int
    The number of CIDR blocks resolved from the monitored containers.
    Status Pulumi.AwsNative.NetworkFirewall.ContainerAssociationStatus
    The current status of the container association.
    Tags List<Pulumi.AwsNative.Outputs.Tag>
    An array of key-value pairs to apply to this resource.
    ContainerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    ContainerMonitoringConfigurations []ContainerAssociationContainerMonitoringConfiguration
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    Description string
    A description of the container association.
    ResolvedCidrCount int
    The number of CIDR blocks resolved from the monitored containers.
    Status ContainerAssociationStatus
    The current status of the container association.
    Tags Tag
    An array of key-value pairs to apply to this resource.
    container_association_arn string
    The Amazon Resource Name (ARN) of the container association.
    container_monitoring_configurations list(object)
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    description string
    A description of the container association.
    resolved_cidr_count number
    The number of CIDR blocks resolved from the monitored containers.
    status "ACTIVE" | "CREATING" | "DELETING" | "UPDATING"
    The current status of the container association.
    tags list(object)
    An array of key-value pairs to apply to this resource.
    containerAssociationArn String
    The Amazon Resource Name (ARN) of the container association.
    containerMonitoringConfigurations List<ContainerAssociationContainerMonitoringConfiguration>
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    description String
    A description of the container association.
    resolvedCidrCount Integer
    The number of CIDR blocks resolved from the monitored containers.
    status ContainerAssociationStatus
    The current status of the container association.
    tags List<Tag>
    An array of key-value pairs to apply to this resource.
    containerAssociationArn string
    The Amazon Resource Name (ARN) of the container association.
    containerMonitoringConfigurations ContainerAssociationContainerMonitoringConfiguration[]
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    description string
    A description of the container association.
    resolvedCidrCount number
    The number of CIDR blocks resolved from the monitored containers.
    status ContainerAssociationStatus
    The current status of the container association.
    tags Tag[]
    An array of key-value pairs to apply to this resource.
    container_association_arn str
    The Amazon Resource Name (ARN) of the container association.
    container_monitoring_configurations Sequence[ContainerAssociationContainerMonitoringConfiguration]
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    description str
    A description of the container association.
    resolved_cidr_count int
    The number of CIDR blocks resolved from the monitored containers.
    status ContainerAssociationStatus
    The current status of the container association.
    tags Sequence[root_Tag]
    An array of key-value pairs to apply to this resource.
    containerAssociationArn String
    The Amazon Resource Name (ARN) of the container association.
    containerMonitoringConfigurations List<Property Map>
    The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
    description String
    A description of the container association.
    resolvedCidrCount Number
    The number of CIDR blocks resolved from the monitored containers.
    status "ACTIVE" | "CREATING" | "DELETING" | "UPDATING"
    The current status of the container association.
    tags List<Property Map>
    An array of key-value pairs to apply to this resource.

    Supporting Types

    ContainerAssociationContainerAttribute

    Key string
    The attribute key to filter on.
    Value string
    The attribute value to match.
    Key string
    The attribute key to filter on.
    Value string
    The attribute value to match.
    key string
    The attribute key to filter on.
    value string
    The attribute value to match.
    key String
    The attribute key to filter on.
    value String
    The attribute value to match.
    key string
    The attribute key to filter on.
    value string
    The attribute value to match.
    key str
    The attribute key to filter on.
    value str
    The attribute value to match.
    key String
    The attribute key to filter on.
    value String
    The attribute value to match.

    ContainerAssociationContainerMonitoringConfiguration

    ClusterArn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    AttributeFilters List<Pulumi.AwsNative.NetworkFirewall.Inputs.ContainerAssociationContainerAttribute>
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    ClusterArn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    AttributeFilters []ContainerAssociationContainerAttribute
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    cluster_arn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attribute_filters list(object)
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    clusterArn String
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attributeFilters List<ContainerAssociationContainerAttribute>
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    clusterArn string
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attributeFilters ContainerAssociationContainerAttribute[]
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    cluster_arn str
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attribute_filters Sequence[ContainerAssociationContainerAttribute]
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).
    clusterArn String
    The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The cluster must be in the same Region and account as the container association.
    attributeFilters List<Property Map>
    Key-value pairs that filter which containers are tracked. For Amazon EKS, you can filter by namespace and Kubernetes labels. For Amazon ECS, you can filter by container instance attributes (EC2 launch type only).

    ContainerAssociationStatus

    Tag

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.80.0
    published on Monday, Sep 21, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial