Support Policy Variable for networkfirewall_policy

[linusguan]

Summary

AWS NFW policy now support an additional attribute called policy variable. This allows us to overwrite variable such as $HOME_NET on a policy level, which makes managed rule group useful for NFW that is deployed centrally.

• https://aws.amazon.com/about-aws/whats-new/2023/05/aws-network-firewall-suricata-home-net-variable-override/
• https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-policyvariables.html

Thanks!

Issue Type

Feature Idea

Component Name

networkfirewall_policy

Additional Information

Code of Conduct

• [X] I agree to follow the Ansible Code of Conduct