Parity grade: B · SDK aws-sdk-go-v2/service/networkfirewall@v1.76.1 · last audited 2026-10-17 (8e8351102)
| Metric | Value |
|---|---|
| PARITY entries audited | 85 (85 ok) |
| Feature families | 7 (7 ok) |
| Known gaps | 4 |
| Structural gaps (can't be emulated) | 3 |
| Deferred items | 0 |
| Resource leaks | clean |
- CreateFirewall NatGatewayMappings and VpcEndpoint: UnsupportedOperationException (bd: gopherstack-cefu7.79)
- Transit gateway attachments start PENDING_ACCEPTANCE only when a TransitGatewayResolver reports another owner account; internal/app does not wire one to EC2, so standalone attachments auto-accept (bd: gopherstack-cefu7.79)
- FirewallStatus.CapacityUsageSummary and NatGatewayAttachments never populated (bd: gopherstack-cefu7.79)
- Firewall, VPC endpoint association and proxy endpoints are generated IDs; no EC2 VPC endpoint is created or removed (bd: gopherstack-cefu7.79)
These do not block an A grade — no implementation could produce real data here because the underlying data source cannot exist in an emulator.
- Rule evaluation: no packets flow, so stateless/stateful rules, TLS inspection and logging never act on traffic.
- AnalysisResults on DescribeRuleGroup need a rule-analysis engine; none exists.
- Managed rule groups (AWS_MANAGED_*, partner) have no catalog to list.