Class: Aws::Route53GlobalResolver::Client

Inherits:
Seahorse::Client::Base show all
Includes:
ClientStubs
Defined in:
gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb

Overview

An API client for Route53GlobalResolver. To construct a client, you need to configure a :region and :credentials.

client = Aws::Route53GlobalResolver::Client.new(
  region: region_name,
  credentials: credentials,
  # ...
)

For details on configuring region and credentials see the developer guide.

See #initialize for a full list of supported configuration options.

Instance Attribute Summary

Attributes inherited from Seahorse::Client::Base

#config, #handlers

API Operations collapse

Instance Method Summary collapse

Methods included from ClientStubs

#api_requests, #stub_data, #stub_responses

Methods inherited from Seahorse::Client::Base

add_plugin, api, clear_plugins, define, new, #operation_names, plugins, remove_plugin, set_api, set_plugins

Methods included from Seahorse::Client::HandlerBuilder

#handle, #handle_request, #handle_response

Constructor Details

#initialize(options) ⇒ Client

Returns a new instance of Client.

Parameters:

  • options (Hash)

Options Hash (options):

  • :plugins (Array<Seahorse::Client::Plugin>) — default: []] —

    A list of plugins to apply to the client. Each plugin is either a class name or an instance of a plugin class.

  • :credentials (required, Aws::CredentialProvider) —

    Your AWS credentials used for authentication. This can be any class that includes and implements Aws::CredentialProvider, or instance of any one of the following classes:

    • Aws::Credentials - Used for configuring static, non-refreshing credentials.

    • Aws::SharedCredentials - Used for loading static credentials from a shared file, such as ~/.aws/config.

    • Aws::AssumeRoleCredentials - Used when you need to assume a role.

    • Aws::AssumeRoleWebIdentityCredentials - Used when you need to assume a role after providing credentials via the web.

    • Aws::SSOCredentials - Used for loading credentials from AWS SSO using an access token generated from aws login.

    • Aws::ProcessCredentials - Used for loading credentials from a process that outputs to stdout.

    • Aws::InstanceProfileCredentials - Used for loading credentials from an EC2 IMDS on an EC2 instance.

    • Aws::ECSCredentials - Used for loading credentials from instances running in ECS.

    • Aws::CognitoIdentityCredentials - Used for loading credentials from the Cognito Identity service.

    When :credentials are not configured directly, the following locations will be searched for credentials:

    • Aws.config[:credentials]

    • The :access_key_id, :secret_access_key, :session_token, and :account_id options.

    • ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'], ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID'].

    • ~/.aws/credentials

    • ~/.aws/config

    • EC2/ECS IMDS instance profile - When used by default, the timeouts are very aggressive. Construct and pass an instance of Aws::InstanceProfileCredentials or Aws::ECSCredentials to enable retries and extended timeouts. Instance profile credential fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED'] to true.

  • :region (required, String) —

    The AWS region to connect to. The configured :region is used to determine the service :endpoint. When not passed, a default :region is searched for in the following locations:

    • Aws.config[:region]
    • ENV['AWS_REGION']
    • ENV['AMAZON_REGION']
    • ENV['AWS_DEFAULT_REGION']
    • ~/.aws/credentials
    • ~/.aws/config
  • :access_key_id (String)
  • :account_id (String)
  • :active_endpoint_cache (Boolean) — default: false —

    When set to true, a thread polling for endpoints will be running in the background every 60 secs (default). Defaults to false.

  • :adaptive_retry_wait_to_fill (Boolean) — default: true —

    Used only in adaptive retry mode. When true, the request will sleep until there is sufficent client side capacity to retry the request. When false, the request will raise a RetryCapacityNotAvailableError and will not retry instead of sleeping.

  • :auth_scheme_preference (Array<String>) —

    A list of preferred authentication schemes to use when making a request. Supported values are: sigv4, sigv4a, httpBearerAuth, and noAuth. When set using ENV['AWS_AUTH_SCHEME_PREFERENCE'] or in shared config as auth_scheme_preference, the value should be a comma-separated list.

  • :client_side_monitoring (Boolean) — default: false —

    When true, client-side metrics will be collected for all API requests from this client.

  • :client_side_monitoring_client_id (String) — default: "" —

    Allows you to provide an identifier for this client which will be attached to all generated client side metrics. Defaults to an empty string.

  • :client_side_monitoring_host (String) — default: "127.0.0.1" —

    Allows you to specify the DNS hostname or IPv4 or IPv6 address that the client side monitoring agent is running on, where client metrics will be published via UDP.

  • :client_side_monitoring_port (Integer) — default: 31000 —

    Required for publishing client metrics. The port that the client side monitoring agent is running on, where client metrics will be published via UDP.

  • :client_side_monitoring_publisher (Aws::ClientSideMonitoring::Publisher) — default: Aws::ClientSideMonitoring::Publisher —

    Allows you to provide a custom client-side monitoring publisher class. By default, will use the Client Side Monitoring Agent Publisher.

  • :convert_params (Boolean) — default: true —

    When true, an attempt is made to coerce request parameters into the required types.

  • :correct_clock_skew (Boolean) — default: true —

    Used only in standard and adaptive retry modes. Specifies whether to apply a clock skew correction and retry requests with skewed client clocks.

  • :defaults_mode (String) — default: "legacy" —

    See DefaultsModeConfiguration for a list of the accepted modes and the configuration defaults that are included.

  • :disable_host_prefix_injection (Boolean) — default: false —

    When true, the SDK will not prepend the modeled host prefix to the endpoint.

  • :disable_request_compression (Boolean) — default: false —

    When set to 'true' the request body will not be compressed for supported operations.

  • :endpoint (String, URI::HTTPS, URI::HTTP) —

    Normally you should not configure the :endpoint option directly. This is normally constructed from the :region option. Configuring :endpoint is normally reserved for connecting to test or custom endpoints. The endpoint should be a URI formatted like:

    'http://example.com'
'https://example.com'
'http://example.com:123'
  • :endpoint_cache_max_entries (Integer) — default: 1000 —

    Used for the maximum size limit of the LRU cache storing endpoints data for endpoint discovery enabled operations. Defaults to 1000.

  • :endpoint_cache_max_threads (Integer) — default: 10 —

    Used for the maximum threads in use for polling endpoints to be cached, defaults to 10.

  • :endpoint_cache_poll_interval (Integer) — default: 60 —

    When :endpoint_discovery and :active_endpoint_cache is enabled, Use this option to config the time interval in seconds for making requests fetching endpoints information. Defaults to 60 sec.

  • :endpoint_discovery (Boolean) — default: false —

    When set to true, endpoint discovery will be enabled for operations when available.

  • :ignore_configured_endpoint_urls (Boolean) —

    Setting to true disables use of endpoint URLs provided via environment variables and the shared configuration file.

  • :log_formatter (Aws::Log::Formatter) — default: Aws::Log::Formatter.default —

    The log formatter.

  • :log_level (Symbol) — default: :info —

    The log level to send messages to the :logger at.

  • :logger (Logger) —

    The Logger instance to send log messages to. If this option is not set, logging will be disabled.

  • :max_attempts (Integer) — default: 3 —

    An integer representing the maximum number attempts that will be made for a single request, including the initial attempt. For example, setting this value to 5 will result in a request being retried up to 4 times. Used in standard and adaptive retry modes.

  • :profile (String) — default: "default" —

    Used when loading credentials from the shared credentials file at HOME/.aws/credentials. When not specified, 'default' is used.

  • :request_checksum_calculation (String) — default: "when_supported" —

    Determines when a checksum will be calculated for request payloads. Values are:

    • when_supported - (default) When set, a checksum will be calculated for all request payloads of operations modeled with the httpChecksum trait where requestChecksumRequired is true and/or a requestAlgorithmMember is modeled.
    • when_required - When set, a checksum will only be calculated for request payloads of operations modeled with the httpChecksum trait where requestChecksumRequired is true or where a requestAlgorithmMember is modeled and supplied.
  • :request_min_compression_size_bytes (Integer) — default: 10240 —

    The minimum size in bytes that triggers compression for request bodies. The value must be non-negative integer value between 0 and 10485780 bytes inclusive.

  • :response_checksum_validation (String) — default: "when_supported" —

    Determines when checksum validation will be performed on response payloads. Values are:

    • when_supported - (default) When set, checksum validation is performed on all response payloads of operations modeled with the httpChecksum trait where responseAlgorithms is modeled, except when no modeled checksum algorithms are supported.
    • when_required - When set, checksum validation is not performed on response payloads of operations unless the checksum algorithm is supported and the requestValidationModeMember member is set to ENABLED.
  • :retry_backoff (Proc) —

    A proc or lambda used for backoff. Defaults to 2**retries * retry_base_delay. This option is only used in the legacy retry mode.

  • :retry_base_delay (Float) — default: 0.3 —

    The base delay in seconds used by the default backoff function. This option is only used in the legacy retry mode.

  • :retry_jitter (Symbol) — default: :none —

    A delay randomiser function used by the default backoff function. Some predefined functions can be referenced by name - :none, :equal, :full, otherwise a Proc that takes and returns a number. This option is only used in the legacy retry mode.

    @see https://www.awsarchitectureblog.com/2015/03/backoff.html

  • :retry_limit (Integer) — default: 3 —

    The maximum number of times to retry failed requests. Only ~ 500 level server errors and certain ~ 400 level client errors are retried. Generally, these are throttling errors, data checksum errors, networking errors, timeout errors, auth errors, endpoint discovery, and errors from expired credentials. This option is only used in the legacy retry mode.

  • :retry_max_delay (Integer) — default: 0 —

    The maximum number of seconds to delay between retries (0 for no limit) used by the default backoff function. This option is only used in the legacy retry mode.

  • :retry_mode (String) — default: "legacy" —

    Specifies which retry algorithm to use. Values are:

    • legacy - The pre-existing retry behavior. This is default value if no retry mode is provided.

    • standard - A standardized set of retry rules across the AWS SDKs. This includes support for retry quotas, which limit the number of unsuccessful retries a client can make.

    • adaptive - An experimental retry mode that includes all the functionality of standard mode along with automatic client side throttling. This is a provisional mode that may change behavior in the future.

  • :sdk_ua_app_id (String) —

    A unique and opaque application ID that is appended to the User-Agent header as app/sdk_ua_app_id. It should have a maximum length of 50. This variable is sourced from environment variable AWS_SDK_UA_APP_ID or the shared config profile attribute sdk_ua_app_id.

  • :secret_access_key (String)
  • :session_token (String)
  • :sigv4a_signing_region_set (Array) —

    A list of regions that should be signed with SigV4a signing. When not passed, a default :sigv4a_signing_region_set is searched for in the following locations:

    • Aws.config[:sigv4a_signing_region_set]
    • ENV['AWS_SIGV4A_SIGNING_REGION_SET']
    • ~/.aws/config
  • :stub_responses (Boolean) — default: false —

    Causes the client to return stubbed responses. By default fake responses are generated and returned. You can specify the response data to return or errors to raise by calling ClientStubs#stub_responses. See ClientStubs for more information.

    Please note When response stubbing is enabled, no HTTP requests are made, and retries are disabled.

  • :telemetry_provider (Aws::Telemetry::TelemetryProviderBase) — default: Aws::Telemetry::NoOpTelemetryProvider —

    Allows you to provide a telemetry provider, which is used to emit telemetry data. By default, uses NoOpTelemetryProvider which will not record or emit any telemetry data. The SDK supports the following telemetry providers:

    • OpenTelemetry (OTel) - To use the OTel provider, install and require the opentelemetry-sdk gem and then, pass in an instance of a Aws::Telemetry::OTelProvider for telemetry provider.
  • :token_provider (Aws::TokenProvider) —

    Your Bearer token used for authentication. This can be any class that includes and implements Aws::TokenProvider, or instance of any one of the following classes:

    • Aws::StaticTokenProvider - Used for configuring static, non-refreshing tokens.

    • Aws::SSOTokenProvider - Used for loading tokens from AWS SSO using an access token generated from aws login.

    When :token_provider is not configured directly, the Aws::TokenProviderChain will be used to search for tokens configured for your profile in shared configuration files.

  • :use_dualstack_endpoint (Boolean) —

    When set to true, dualstack enabled endpoints (with .aws TLD) will be used if available.

  • :use_fips_endpoint (Boolean) —

    When set to true, fips compatible endpoints will be used if available. When a fips region is used, the region is normalized and this config is set to true.

  • :validate_params (Boolean) — default: true —

    When true, request parameters are validated before sending the request.

  • :endpoint_provider (Aws::Route53GlobalResolver::EndpointProvider) —

    The endpoint provider used to resolve endpoints. Any object that responds to #resolve_endpoint(parameters) where parameters is a Struct similar to Aws::Route53GlobalResolver::EndpointParameters.

  • :http_continue_timeout (Float) — default: 1 —

    The number of seconds to wait for a 100-continue response before sending the request body. This option has no effect unless the request has "Expect" header set to "100-continue". Defaults to nil which disables this behaviour. This value can safely be set per request on the session.

  • :http_idle_timeout (Float) — default: 5 —

    The number of seconds a connection is allowed to sit idle before it is considered stale. Stale connections are closed and removed from the pool before making a request.

  • :http_open_timeout (Float) — default: 15 —

    The default number of seconds to wait for response data. This value can safely be set per-request on the session.

  • :http_proxy (URI::HTTP, String) —

    A proxy to send requests through. Formatted like 'http://proxy.com:123'.

  • :http_read_timeout (Float) — default: 60 —

    The default number of seconds to wait for response data. This value can safely be set per-request on the session.

  • :http_wire_trace (Boolean) — default: false —

    When true, HTTP debug output will be sent to the :logger.

  • :on_chunk_received (Proc) —

    When a Proc object is provided, it will be used as callback when each chunk of the response body is received. It provides three arguments: the chunk, the number of bytes received, and the total number of bytes in the response (or nil if the server did not send a content-length).

  • :on_chunk_sent (Proc) —

    When a Proc object is provided, it will be used as callback when each chunk of the request body is sent. It provides three arguments: the chunk, the number of bytes read from the body, and the total number of bytes in the body.

  • :raise_response_errors (Boolean) — default: true —

    When true, response errors are raised.

  • :ssl_ca_bundle (String) —

    Full path to the SSL certificate authority bundle file that should be used when verifying peer certificates. If you do not pass :ssl_ca_bundle or :ssl_ca_directory the the system default will be used if available.

  • :ssl_ca_directory (String) —

    Full path of the directory that contains the unbundled SSL certificate authority files for verifying peer certificates. If you do not pass :ssl_ca_bundle or :ssl_ca_directory the the system default will be used if available.

  • :ssl_ca_store (String) —

    Sets the X509::Store to verify peer certificate.

  • :ssl_cert (OpenSSL::X509::Certificate) —

    Sets a client certificate when creating http connections.

  • :ssl_key (OpenSSL::PKey) —

    Sets a client key when creating http connections.

  • :ssl_timeout (Float) —

    Sets the SSL timeout in seconds

  • :ssl_verify_peer (Boolean) — default: true —

    When true, SSL peer certificates are verified when establishing a connection.



473
474
475
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 473

def initialize(*args)
  super
end

Instance Method Details

#associate_hosted_zone(params = {}) ⇒ Types::AssociateHostedZoneOutput

Associates a Route 53 private hosted zone with a Route 53 Global Resolver resource. This allows the resolver to resolve DNS queries for the private hosted zone from anywhere globally.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.associate_hosted_zone({
  hosted_zone_id: "HostedZoneId", # required
  resource_arn: "ResourceArn", # required
  name: "ResourceName", # required
})

Response structure


resp.id #=> String
resp.resource_arn #=> String
resp.hosted_zone_id #=> String
resp.hosted_zone_name #=> String
resp.name #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :hosted_zone_id (required, String) —

    The ID of the Route 53 private hosted zone to associate with the Route 53 Global Resolver resource.

  • :resource_arn (required, String) —

    An Amazon Resource Name (ARN) of the Route 53 Global Resolver the private hosted zone will be associated to.

  • :name (required, String) —

    Name for the private hosted zone association.

Returns:

See Also:



534
535
536
537
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 534

def associate_hosted_zone(params = {}, options = {})
  req = build_request(:associate_hosted_zone, params)
  req.send_request(options)
end

#batch_create_firewall_rule(params = {}) ⇒ Types::BatchCreateFirewallRuleOutput

Creates multiple DNS firewall rules in a single operation. This is more efficient than creating rules individually when you need to set up multiple rules at once.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.batch_create_firewall_rule({
  firewall_rules: [ # required
    {
      action: "ALLOW", # required, accepts ALLOW, ALERT, BLOCK
      block_override_dns_type: "CNAME", # accepts CNAME
      block_override_domain: "Domain",
      block_override_ttl: 1,
      block_response: "NODATA", # accepts NODATA, NXDOMAIN, OVERRIDE
      client_token: "ClientToken", # required
      confidence_threshold: "LOW", # accepts LOW, MEDIUM, HIGH
      description: "ResourceDescription",
      dns_advanced_protection: "DGA", # accepts DGA, DNS_TUNNELING, DICTIONARY_DGA
      firewall_domain_list_id: "ResourceId",
      name: "ResourceName", # required
      priority: 1,
      dns_view_id: "ResourceId", # required
      q_type: "DnsQueryType",
    },
  ],
})

Response structure


resp.failures #=> Array
resp.failures[0].firewall_rule.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.failures[0].firewall_rule.block_override_dns_type #=> String, one of "CNAME"
resp.failures[0].firewall_rule.block_override_domain #=> String
resp.failures[0].firewall_rule.block_override_ttl #=> Integer
resp.failures[0].firewall_rule.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.failures[0].firewall_rule.client_token #=> String
resp.failures[0].firewall_rule.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.failures[0].firewall_rule.created_at #=> Time
resp.failures[0].firewall_rule.description #=> String
resp.failures[0].firewall_rule.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.failures[0].firewall_rule.firewall_domain_list_id #=> String
resp.failures[0].firewall_rule.id #=> String
resp.failures[0].firewall_rule.managed_domain_list_name #=> String
resp.failures[0].firewall_rule.name #=> String
resp.failures[0].firewall_rule.priority #=> Integer
resp.failures[0].firewall_rule.dns_view_id #=> String
resp.failures[0].firewall_rule.query_type #=> String
resp.failures[0].firewall_rule.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.failures[0].firewall_rule.updated_at #=> Time
resp.failures[0].code #=> Integer
resp.failures[0].message #=> String
resp.successes #=> Array
resp.successes[0].firewall_rule.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.successes[0].firewall_rule.block_override_dns_type #=> String, one of "CNAME"
resp.successes[0].firewall_rule.block_override_domain #=> String
resp.successes[0].firewall_rule.block_override_ttl #=> Integer
resp.successes[0].firewall_rule.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.successes[0].firewall_rule.client_token #=> String
resp.successes[0].firewall_rule.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.successes[0].firewall_rule.created_at #=> Time
resp.successes[0].firewall_rule.description #=> String
resp.successes[0].firewall_rule.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.successes[0].firewall_rule.firewall_domain_list_id #=> String
resp.successes[0].firewall_rule.id #=> String
resp.successes[0].firewall_rule.managed_domain_list_name #=> String
resp.successes[0].firewall_rule.name #=> String
resp.successes[0].firewall_rule.priority #=> Integer
resp.successes[0].firewall_rule.dns_view_id #=> String
resp.successes[0].firewall_rule.query_type #=> String
resp.successes[0].firewall_rule.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.successes[0].firewall_rule.updated_at #=> Time
resp.successes[0].code #=> Integer
resp.successes[0].message #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

Returns:

See Also:



632
633
634
635
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 632

def batch_create_firewall_rule(params = {}, options = {})
  req = build_request(:batch_create_firewall_rule, params)
  req.send_request(options)
end

#batch_delete_firewall_rule(params = {}) ⇒ Types::BatchDeleteFirewallRuleOutput

Deletes multiple DNS firewall rules in a single operation. This is more efficient than deleting rules individually.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.batch_delete_firewall_rule({
  firewall_rules: [ # required
    {
      firewall_rule_id: "ResourceId", # required
    },
  ],
})

Response structure


resp.failures #=> Array
resp.failures[0].firewall_rule.client_token #=> String
resp.failures[0].firewall_rule.id #=> String
resp.failures[0].firewall_rule.name #=> String
resp.failures[0].firewall_rule.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.failures[0].code #=> Integer
resp.failures[0].message #=> String
resp.successes #=> Array
resp.successes[0].firewall_rule.client_token #=> String
resp.successes[0].firewall_rule.id #=> String
resp.successes[0].firewall_rule.name #=> String
resp.successes[0].firewall_rule.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.successes[0].code #=> Integer
resp.successes[0].message #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

Returns:

See Also:



685
686
687
688
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 685

def batch_delete_firewall_rule(params = {}, options = {})
  req = build_request(:batch_delete_firewall_rule, params)
  req.send_request(options)
end

#batch_update_firewall_rule(params = {}) ⇒ Types::BatchUpdateFirewallRuleOutput

Updates multiple DNS firewall rules in a single operation. This is more efficient than updating rules individually.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.batch_update_firewall_rule({
  firewall_rules: [ # required
    {
      action: "ALLOW", # accepts ALLOW, ALERT, BLOCK
      block_override_dns_type: "CNAME", # accepts CNAME
      block_override_domain: "Domain",
      block_override_ttl: 1,
      block_response: "NODATA", # accepts NODATA, NXDOMAIN, OVERRIDE
      confidence_threshold: "LOW", # accepts LOW, MEDIUM, HIGH
      description: "ResourceDescription",
      dns_advanced_protection: "DGA", # accepts DGA, DNS_TUNNELING, DICTIONARY_DGA
      firewall_rule_id: "ResourceId", # required
      name: "ResourceName",
      priority: 1,
    },
  ],
})

Response structure


resp.failures #=> Array
resp.failures[0].firewall_rule.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.failures[0].firewall_rule.block_override_dns_type #=> String, one of "CNAME"
resp.failures[0].firewall_rule.block_override_domain #=> String
resp.failures[0].firewall_rule.block_override_ttl #=> Integer
resp.failures[0].firewall_rule.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.failures[0].firewall_rule.client_token #=> String
resp.failures[0].firewall_rule.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.failures[0].firewall_rule.created_at #=> Time
resp.failures[0].firewall_rule.description #=> String
resp.failures[0].firewall_rule.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.failures[0].firewall_rule.firewall_domain_list_id #=> String
resp.failures[0].firewall_rule.id #=> String
resp.failures[0].firewall_rule.name #=> String
resp.failures[0].firewall_rule.priority #=> Integer
resp.failures[0].firewall_rule.dns_view_id #=> String
resp.failures[0].firewall_rule.query_type #=> String
resp.failures[0].firewall_rule.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.failures[0].firewall_rule.updated_at #=> Time
resp.failures[0].code #=> Integer
resp.failures[0].message #=> String
resp.successes #=> Array
resp.successes[0].firewall_rule.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.successes[0].firewall_rule.block_override_dns_type #=> String, one of "CNAME"
resp.successes[0].firewall_rule.block_override_domain #=> String
resp.successes[0].firewall_rule.block_override_ttl #=> Integer
resp.successes[0].firewall_rule.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.successes[0].firewall_rule.client_token #=> String
resp.successes[0].firewall_rule.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.successes[0].firewall_rule.created_at #=> Time
resp.successes[0].firewall_rule.description #=> String
resp.successes[0].firewall_rule.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.successes[0].firewall_rule.firewall_domain_list_id #=> String
resp.successes[0].firewall_rule.id #=> String
resp.successes[0].firewall_rule.name #=> String
resp.successes[0].firewall_rule.priority #=> Integer
resp.successes[0].firewall_rule.dns_view_id #=> String
resp.successes[0].firewall_rule.query_type #=> String
resp.successes[0].firewall_rule.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.successes[0].firewall_rule.updated_at #=> Time
resp.successes[0].code #=> Integer
resp.successes[0].message #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

Returns:

See Also:



776
777
778
779
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 776

def batch_update_firewall_rule(params = {}, options = {})
  req = build_request(:batch_update_firewall_rule, params)
  req.send_request(options)
end

#create_access_source(params = {}) ⇒ Types::CreateAccessSourceOutput

Creates an access source for a DNS view. Access sources define IP addresses or CIDR ranges that are allowed to send DNS queries to the Route 53 Global Resolver, along with the permitted DNS protocols.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Example: CreateAccessSource example


resp = client.create_access_source({
  name: "My Access Source", 
  cidr: "85.90.183.3/30", 
  client_token: "9fas9-9usdfa-xbi8-kco", 
  dns_view_id: "dnsv-123456789", 
  ip_address_type: "IPV4", 
  protocol: "DO53", 
  tags: {
    "Key1" => "Value1", 
  }, 
})

resp.to_h outputs the following:
{
  name: "My Access Source", 
  arn: "arn:aws:route53globalresolver::123456789012:access-source/as-823as9d9831", 
  cidr: "85.90.183.3/30", 
  created_at: Time.parse("2025-10-16T14:07:45.934184715Z"), 
  dns_view_id: "dnsv-123456789", 
  id: "as-123456789", 
  ip_address_type: "IPV4", 
  protocol: "DO53", 
  status: "CREATING", 
  updated_at: Time.parse("2025-10-16T14:07:45.934184715Z"), 
}

Request syntax with placeholder values


resp = client.create_access_source({
  cidr: "Cidr", # required
  client_token: "ClientToken",
  ip_address_type: "IPV4", # accepts IPV4, IPV6
  name: "ResourceNameShort",
  dns_view_id: "ResourceId", # required
  protocol: "DO53", # required, accepts DO53, DOH, DOT
  tags: {
    "TagKey" => "TagValue",
  },
})

Response structure


resp.arn #=> String
resp.cidr #=> String
resp.created_at #=> Time
resp.id #=> String
resp.ip_address_type #=> String, one of "IPV4", "IPV6"
resp.name #=> String
resp.dns_view_id #=> String
resp.protocol #=> String, one of "DO53", "DOH", "DOT"
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :cidr (required, String) —

    The IP address or CIDR range that is allowed to send DNS queries to the Route 53 Global Resolver.

  • :client_token (String) —

    A unique string that identifies the request and ensures idempotency.

    A suitable default value is auto-generated. You should normally not need to pass this option.**

  • :ip_address_type (String) —

    The IP address type for this access source. Valid values are IPv4 and IPv6 (if the Route 53 Global Resolver supports dual-stack).

  • :name (String) —

    A descriptive name for the access source.

  • :dns_view_id (required, String) —

    The ID of the DNS view to associate with this access source.

  • :protocol (required, String) —

    The DNS protocol that is permitted for this access source. Valid values are Do53 (DNS over port 53), DoT (DNS over TLS), and DoH (DNS over HTTPS).

  • :tags (Hash<String,String>) —

    Tags to associate with the access source.

Returns:

See Also:



892
893
894
895
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 892

def create_access_source(params = {}, options = {})
  req = build_request(:create_access_source, params)
  req.send_request(options)
end

#create_access_token(params = {}) ⇒ Types::CreateAccessTokenOutput

Creates an access token for a DNS view. Access tokens provide token-based authentication for DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) connections to the Route 53 Global Resolver.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.create_access_token({
  client_token: "ClientToken",
  dns_view_id: "ResourceId", # required
  expires_at: Time.now,
  name: "ResourceNameShort",
  tags: {
    "TagKey" => "TagValue",
  },
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.created_at #=> Time
resp.dns_view_id #=> String
resp.expires_at #=> Time
resp.name #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"
resp.value #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :client_token (String) —

    A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the same clientToken has the same result every time.

    A suitable default value is auto-generated. You should normally not need to pass this option.**

  • :dns_view_id (required, String) —

    The ID of the DNS view to associate with this token.

  • :expires_at (Time, DateTime, Date, Integer, String) —

    The date and time when the token expires. Tokens can have a minimum expiration of 30 days and maximum of 365 days from creation.

  • :name (String) —

    A descriptive name for the access token.

  • :tags (Hash<String,String>) —

    An array of user-defined keys and optional values. These tags can be used for categorization and organization.

Returns:

See Also:



969
970
971
972
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 969

def create_access_token(params = {}, options = {})
  req = build_request(:create_access_token, params)
  req.send_request(options)
end

#create_dns_view(params = {}) ⇒ Types::CreateDNSViewOutput

Creates a DNS view within a Route 53 Global Resolver. A DNS view models end users, user groups, networks, and devices, and serves as a parent resource that holds configurations controlling access, authorization, DNS firewall rules, and forwarding rules.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.create_dns_view({
  global_resolver_id: "ResourceId", # required
  client_token: "ClientToken",
  name: "ResourceName", # required
  dnssec_validation: "ENABLED", # accepts ENABLED, DISABLED
  edns_client_subnet: "ENABLED", # accepts ENABLED, DISABLED
  firewall_rules_fail_open: "ENABLED", # accepts ENABLED, DISABLED
  description: "ResourceDescription",
  tags: {
    "TagKey" => "TagValue",
  },
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dnssec_validation #=> String, one of "ENABLED", "DISABLED"
resp.edns_client_subnet #=> String, one of "ENABLED", "DISABLED"
resp.firewall_rules_fail_open #=> String, one of "ENABLED", "DISABLED"
resp.name #=> String
resp.description #=> String
resp.global_resolver_id #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "ENABLING", "DISABLING", "DISABLED", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :global_resolver_id (required, String) —

    The ID of the Route 53 Global Resolver to associate with this DNS view.

  • :client_token (String) —

    A unique string that identifies the request and ensures idempotency.

    A suitable default value is auto-generated. You should normally not need to pass this option.**

  • :name (required, String) —

    A descriptive name for the DNS view.

  • :dnssec_validation (String) —

    Whether to enable DNSSEC validation for DNS queries in this DNS view. When enabled, the resolver verifies the authenticity and integrity of DNS responses from public name servers for DNSSEC-signed domains.

  • :edns_client_subnet (String) —

    Whether to enable EDNS Client Subnet injection for DNS queries in this DNS view. When enabled, client subnet information is forwarded to provide more accurate geographic-based DNS responses.

  • :firewall_rules_fail_open (String) —

    Determines the behavior when Route 53 Global Resolver cannot apply DNS firewall rules due to service impairment. When enabled, DNS queries are allowed through; when disabled, queries are blocked.

  • :description (String) —

    An optional description for the DNS view.

  • :tags (Hash<String,String>) —

    Tags to associate with the DNS view.

Returns:

See Also:



1068
1069
1070
1071
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1068

def create_dns_view(params = {}, options = {})
  req = build_request(:create_dns_view, params)
  req.send_request(options)
end

#create_firewall_domain_list(params = {}) ⇒ Types::CreateFirewallDomainListOutput

Creates a firewall domain list. Domain lists are reusable sets of domain specifications that you use in DNS firewall rules to allow, block, or alert on DNS queries to specific domains.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.create_firewall_domain_list({
  client_token: "ClientToken",
  global_resolver_id: "ResourceId", # required
  description: "ResourceDescription",
  name: "ResourceName", # required
  tags: {
    "TagKey" => "TagValue",
  },
})

Response structure


resp.arn #=> String
resp.global_resolver_id #=> String
resp.created_at #=> Time
resp.description #=> String
resp.domain_count #=> Integer
resp.id #=> String
resp.name #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :client_token (String) —

    A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the same clientToken has the same result every time.

    A suitable default value is auto-generated. You should normally not need to pass this option.**

  • :global_resolver_id (required, String) —

    The ID of the Route 53 Global Resolver that the domain list will be associated with.

  • :description (String) —

    An optional description for the firewall domain list.

  • :name (required, String) —

    A descriptive name for the firewall domain list.

  • :tags (Hash<String,String>) —

    An array of user-defined keys and optional values. These tags can be used for categorization and organization.

Returns:

See Also:



1145
1146
1147
1148
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1145

def create_firewall_domain_list(params = {}, options = {})
  req = build_request(:create_firewall_domain_list, params)
  req.send_request(options)
end

#create_firewall_rule(params = {}) ⇒ Types::CreateFirewallRuleOutput

Creates a DNS firewall rule. Firewall rules define actions (ALLOW, BLOCK, or ALERT) to take on DNS queries that match specified domain lists, managed domain lists, or advanced threat protections.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.create_firewall_rule({
  action: "ALLOW", # required, accepts ALLOW, ALERT, BLOCK
  block_override_dns_type: "CNAME", # accepts CNAME
  block_override_domain: "Domain",
  block_override_ttl: 1,
  block_response: "NODATA", # accepts NODATA, NXDOMAIN, OVERRIDE
  client_token: "ClientToken",
  confidence_threshold: "LOW", # accepts LOW, MEDIUM, HIGH
  description: "ResourceDescription",
  dns_advanced_protection: "DGA", # accepts DGA, DNS_TUNNELING, DICTIONARY_DGA
  firewall_domain_list_id: "ResourceId",
  name: "ResourceName", # required
  priority: 1,
  dns_view_id: "ResourceId", # required
  q_type: "DnsQueryType",
})

Response structure


resp.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.block_override_dns_type #=> String, one of "CNAME"
resp.block_override_domain #=> String
resp.block_override_ttl #=> Integer
resp.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.created_at #=> Time
resp.description #=> String
resp.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.firewall_domain_list_id #=> String
resp.id #=> String
resp.name #=> String
resp.priority #=> Integer
resp.dns_view_id #=> String
resp.query_type #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :action (required, String) —

    The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:

    • ALLOW - Permit the request to go through.

    • ALERT - Permit the request and send metrics and logs to CloudWatch.

    • BLOCK - Disallow the request. This option requires additional details in the rule's BlockResponse.

  • :block_override_dns_type (String) —

    The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

    This setting is required if the BlockResponse setting is OVERRIDE.

  • :block_override_domain (String) —

    The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

    This setting is required if the BlockResponse setting is OVERRIDE.

  • :block_override_ttl (Integer) —

    The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

    This setting is required if the BlockResponse setting is OVERRIDE.

  • :block_response (String) —

    The response to return when the action is BLOCK. Valid values are NXDOMAIN (domain does not exist), NODATA (domain exists but no records), or OVERRIDE (return custom response).

  • :client_token (String) —

    A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the same clientToken has the same result every time.

    A suitable default value is auto-generated. You should normally not need to pass this option.**

  • :confidence_threshold (String) —

    The confidence threshold for advanced threat detection. Valid values are HIGH, MEDIUM, or LOW, indicating the accuracy level required for threat detection.

  • :description (String) —

    An optional description for the firewall rule.

  • :dns_advanced_protection (String) —

    Whether to enable advanced DNS threat protection for this rule. Advanced protection can detect and block DNS tunneling and Domain Generation Algorithm (DGA) threats.

  • :firewall_domain_list_id (String) —

    The ID of the firewall domain list to use in this rule.

  • :name (required, String) —

    A descriptive name for the firewall rule.

  • :priority (Integer) —

    The priority of this rule. Rules are evaluated in priority order, with lower numbers having higher priority. When a DNS query matches multiple rules, the rule with the highest priority (lowest number) is applied.

  • :dns_view_id (required, String) —

    The ID of the DNS view to associate with this firewall rule.

  • :q_type (String) —

    The DNS query type to match for this rule. Examples include A (IPv4 address), AAAA (IPv6 address), MX (mail exchange), or TXT (text record).

Returns:

See Also:



1301
1302
1303
1304
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1301

def create_firewall_rule(params = {}, options = {})
  req = build_request(:create_firewall_rule, params)
  req.send_request(options)
end

#create_global_resolver(params = {}) ⇒ Types::CreateGlobalResolverOutput

Creates a new Route 53 Global Resolver instance. A Route 53 Global Resolver is a global, internet-accessible DNS resolver that provides secure DNS resolution for both public and private domains through global anycast IP addresses.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.create_global_resolver({
  client_token: "ClientToken",
  description: "ResourceDescription",
  ip_address_type: "IPV4", # accepts IPV4, DUAL_STACK
  name: "ResourceName", # required
  observability_region: "Region",
  regions: ["Region"], # required
  tags: {
    "TagKey" => "TagValue",
  },
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.created_at #=> Time
resp.description #=> String
resp.dns_name #=> String
resp.ip_address_type #=> String, one of "IPV4", "DUAL_STACK"
resp.ipv4_addresses #=> Array
resp.ipv4_addresses[0] #=> String
resp.ipv6_addresses #=> Array
resp.ipv6_addresses[0] #=> String
resp.name #=> String
resp.observability_region #=> String
resp.regions #=> Array
resp.regions[0] #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :client_token (String) —

    A unique string that identifies the request and ensures idempotency. If you make multiple requests with the same client token, only one Route 53 Global Resolver is created.

    A suitable default value is auto-generated. You should normally not need to pass this option.**

  • :description (String) —

    An optional description for the Route 53 Global Resolver instance. Maximum length of 1024 characters.

  • :ip_address_type (String) —

    The IP address type for the Route 53 Global Resolver. Valid values are IPV4 (default) or DUAL_STACK for both IPv4 and IPv6 support.

  • :name (required, String) —

    A descriptive name for the Route 53 Global Resolver instance. Maximum length of 64 characters.

  • :observability_region (String) —

    The Amazon Web Services Region where query resolution logs and metrics will be aggregated and delivered. If not specified, logging is not enabled.

  • :regions (required, Array<String>) —

    List of Amazon Web Services Regions where the Route 53 Global Resolver will operate. The resolver will be distributed across these Regions to provide global availability and low-latency DNS resolution.

  • :tags (Hash<String,String>) —

    Tags to associate with the Route 53 Global Resolver. Tags are key-value pairs that help you organize and identify your resources.

Returns:

See Also:



1406
1407
1408
1409
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1406

def create_global_resolver(params = {}, options = {})
  req = build_request(:create_global_resolver, params)
  req.send_request(options)
end

#delete_access_source(params = {}) ⇒ Types::DeleteAccessSourceOutput

Deletes an access source. This operation cannot be undone.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.delete_access_source({
  access_source_id: "ResourceId", # required
})

Response structure


resp.arn #=> String
resp.cidr #=> String
resp.created_at #=> Time
resp.id #=> String
resp.ip_address_type #=> String, one of "IPV4", "IPV6"
resp.name #=> String
resp.dns_view_id #=> String
resp.protocol #=> String, one of "DO53", "DOH", "DOT"
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :access_source_id (required, String) —

    The unique identifier of the access source to delete.

Returns:

See Also:



1458
1459
1460
1461
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1458

def delete_access_source(params = {}, options = {})
  req = build_request(:delete_access_source, params)
  req.send_request(options)
end

#delete_access_token(params = {}) ⇒ Types::DeleteAccessTokenOutput

Deletes an access token. This operation cannot be undone.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.delete_access_token({
  access_token_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"
resp.deleted_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :access_token_id (required, String) —

    The unique identifier of the access token to delete.

Returns:

See Also:



1496
1497
1498
1499
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1496

def delete_access_token(params = {}, options = {})
  req = build_request(:delete_access_token, params)
  req.send_request(options)
end

#delete_dns_view(params = {}) ⇒ Types::DeleteDNSViewOutput

Deletes a DNS view. This operation cannot be undone.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.delete_dns_view({
  dns_view_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dnssec_validation #=> String, one of "ENABLED", "DISABLED"
resp.edns_client_subnet #=> String, one of "ENABLED", "DISABLED"
resp.firewall_rules_fail_open #=> String, one of "ENABLED", "DISABLED"
resp.name #=> String
resp.description #=> String
resp.global_resolver_id #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "ENABLING", "DISABLING", "DISABLED", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :dns_view_id (required, String) —

    The unique identifier of the DNS view to delete.

Returns:

See Also:



1552
1553
1554
1555
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1552

def delete_dns_view(params = {}, options = {})
  req = build_request(:delete_dns_view, params)
  req.send_request(options)
end

#delete_firewall_domain_list(params = {}) ⇒ Types::DeleteFirewallDomainListOutput

Deletes a firewall domain list. This operation cannot be undone.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.delete_firewall_domain_list({
  firewall_domain_list_id: "ResourceId", # required
})

Response structure


resp.arn #=> String
resp.id #=> String
resp.name #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :firewall_domain_list_id (required, String) —

    The unique identifier of the firewall domain list to delete.

Returns:

See Also:



1592
1593
1594
1595
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1592

def delete_firewall_domain_list(params = {}, options = {})
  req = build_request(:delete_firewall_domain_list, params)
  req.send_request(options)
end

#delete_firewall_rule(params = {}) ⇒ Types::DeleteFirewallRuleOutput

Deletes a DNS firewall rule. This operation cannot be undone.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.delete_firewall_rule({
  firewall_rule_id: "ResourceId", # required
})

Response structure


resp.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.block_override_dns_type #=> String, one of "CNAME"
resp.block_override_domain #=> String
resp.block_override_ttl #=> Integer
resp.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.created_at #=> Time
resp.description #=> String
resp.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.firewall_domain_list_id #=> String
resp.id #=> String
resp.name #=> String
resp.priority #=> Integer
resp.dns_view_id #=> String
resp.query_type #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :firewall_rule_id (required, String) —

    The unique identifier of the firewall rule to delete.

Returns:

See Also:



1658
1659
1660
1661
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1658

def delete_firewall_rule(params = {}, options = {})
  req = build_request(:delete_firewall_rule, params)
  req.send_request(options)
end

#delete_global_resolver(params = {}) ⇒ Types::DeleteGlobalResolverOutput

Deletes a Route 53 Global Resolver instance. This operation cannot be undone. All associated DNS views, access sources, tokens, and firewall rules are also deleted.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.delete_global_resolver({
  global_resolver_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dns_name #=> String
resp.observability_region #=> String
resp.name #=> String
resp.description #=> String
resp.regions #=> Array
resp.regions[0] #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.ipv4_addresses #=> Array
resp.ipv4_addresses[0] #=> String
resp.ipv6_addresses #=> Array
resp.ipv6_addresses[0] #=> String
resp.ip_address_type #=> String, one of "IPV4", "DUAL_STACK"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :global_resolver_id (required, String) —

    The unique identifier of the Route 53 Global Resolver to delete.

Returns:

See Also:



1723
1724
1725
1726
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1723

def delete_global_resolver(params = {}, options = {})
  req = build_request(:delete_global_resolver, params)
  req.send_request(options)
end

#disable_dns_view(params = {}) ⇒ Types::DisableDNSViewOutput

Disables a DNS view, preventing it from serving DNS queries.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.disable_dns_view({
  dns_view_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dnssec_validation #=> String, one of "ENABLED", "DISABLED"
resp.edns_client_subnet #=> String, one of "ENABLED", "DISABLED"
resp.firewall_rules_fail_open #=> String, one of "ENABLED", "DISABLED"
resp.name #=> String
resp.description #=> String
resp.global_resolver_id #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "ENABLING", "DISABLING", "DISABLED", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :dns_view_id (required, String) —

    The unique identifier of the DNS view to disable.

Returns:

See Also:



1779
1780
1781
1782
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1779

def disable_dns_view(params = {}, options = {})
  req = build_request(:disable_dns_view, params)
  req.send_request(options)
end

#disassociate_hosted_zone(params = {}) ⇒ Types::DisassociateHostedZoneOutput

Disassociates a Route 53 private hosted zone from a Route 53 Global Resolver resource.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.disassociate_hosted_zone({
  hosted_zone_id: "HostedZoneId", # required
  resource_arn: "ResourceArn", # required
})

Response structure


resp.id #=> String
resp.resource_arn #=> String
resp.hosted_zone_id #=> String
resp.hosted_zone_name #=> String
resp.name #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :hosted_zone_id (required, String) —

    The ID of the Route 53 private hosted zone to disassociate.

  • :resource_arn (required, String) —

    The Amazon Resource Name (ARN) of the Route 53 Global Resolver resource to disassociate the hosted zone from.

Returns:

See Also:



1833
1834
1835
1836
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1833

def disassociate_hosted_zone(params = {}, options = {})
  req = build_request(:disassociate_hosted_zone, params)
  req.send_request(options)
end

#enable_dns_view(params = {}) ⇒ Types::EnableDNSViewOutput

Enables a disabled DNS view, allowing it to serve DNS queries again.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.enable_dns_view({
  dns_view_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dnssec_validation #=> String, one of "ENABLED", "DISABLED"
resp.edns_client_subnet #=> String, one of "ENABLED", "DISABLED"
resp.firewall_rules_fail_open #=> String, one of "ENABLED", "DISABLED"
resp.name #=> String
resp.description #=> String
resp.global_resolver_id #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "ENABLING", "DISABLING", "DISABLED", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :dns_view_id (required, String) —

    The unique identifier of the DNS view to enable.

Returns:

See Also:



1889
1890
1891
1892
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1889

def enable_dns_view(params = {}, options = {})
  req = build_request(:enable_dns_view, params)
  req.send_request(options)
end

#get_access_source(params = {}) ⇒ Types::GetAccessSourceOutput

Retrieves information about an access source.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_access_source({
  access_source_id: "ResourceId", # required
})

Response structure


resp.arn #=> String
resp.cidr #=> String
resp.created_at #=> Time
resp.id #=> String
resp.ip_address_type #=> String, one of "IPV4", "IPV6"
resp.name #=> String
resp.dns_view_id #=> String
resp.protocol #=> String, one of "DO53", "DOH", "DOT"
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :access_source_id (required, String) —

    The unique identifier of the access source to retrieve.

Returns:

See Also:



1941
1942
1943
1944
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1941

def get_access_source(params = {}, options = {})
  req = build_request(:get_access_source, params)
  req.send_request(options)
end

#get_access_token(params = {}) ⇒ Types::GetAccessTokenOutput

Retrieves information about an access token.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_access_token({
  access_token_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.created_at #=> Time
resp.dns_view_id #=> String
resp.expires_at #=> Time
resp.global_resolver_id #=> String
resp.name #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"
resp.updated_at #=> Time
resp.value #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :access_token_id (required, String) —

    ID of the token.

Returns:

See Also:



1995
1996
1997
1998
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 1995

def get_access_token(params = {}, options = {})
  req = build_request(:get_access_token, params)
  req.send_request(options)
end

#get_dns_view(params = {}) ⇒ Types::GetDNSViewOutput

Retrieves information about a DNS view.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_dns_view({
  dns_view_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dnssec_validation #=> String, one of "ENABLED", "DISABLED"
resp.edns_client_subnet #=> String, one of "ENABLED", "DISABLED"
resp.firewall_rules_fail_open #=> String, one of "ENABLED", "DISABLED"
resp.name #=> String
resp.description #=> String
resp.global_resolver_id #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "ENABLING", "DISABLING", "DISABLED", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :dns_view_id (required, String) —

    The ID of the DNS view to retrieve information about.

Returns:

See Also:



2051
2052
2053
2054
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2051

def get_dns_view(params = {}, options = {})
  req = build_request(:get_dns_view, params)
  req.send_request(options)
end

#get_firewall_domain_list(params = {}) ⇒ Types::GetFirewallDomainListOutput

Retrieves information about a firewall domain list.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_firewall_domain_list({
  firewall_domain_list_id: "ResourceId", # required
})

Response structure


resp.arn #=> String
resp.global_resolver_id #=> String
resp.client_token #=> String
resp.created_at #=> Time
resp.description #=> String
resp.domain_count #=> Integer
resp.id #=> String
resp.name #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.status_message #=> String
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :firewall_domain_list_id (required, String) —

    ID of the domain list.

Returns:

See Also:



2105
2106
2107
2108
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2105

def get_firewall_domain_list(params = {}, options = {})
  req = build_request(:get_firewall_domain_list, params)
  req.send_request(options)
end

#get_firewall_rule(params = {}) ⇒ Types::GetFirewallRuleOutput

Retrieves information about a DNS firewall rule.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_firewall_rule({
  firewall_rule_id: "ResourceId", # required
})

Response structure


resp.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.block_override_dns_type #=> String, one of "CNAME"
resp.block_override_domain #=> String
resp.block_override_ttl #=> Integer
resp.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.created_at #=> Time
resp.description #=> String
resp.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.firewall_domain_list_id #=> String
resp.id #=> String
resp.name #=> String
resp.priority #=> Integer
resp.dns_view_id #=> String
resp.query_type #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :firewall_rule_id (required, String) —

    ID of the DNS Firewall rule.

Returns:

See Also:



2171
2172
2173
2174
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2171

def get_firewall_rule(params = {}, options = {})
  req = build_request(:get_firewall_rule, params)
  req.send_request(options)
end

#get_global_resolver(params = {}) ⇒ Types::GetGlobalResolverOutput

Retrieves information about a Route 53 Global Resolver instance.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_global_resolver({
  global_resolver_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dns_name #=> String
resp.observability_region #=> String
resp.name #=> String
resp.description #=> String
resp.regions #=> Array
resp.regions[0] #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.ipv4_addresses #=> Array
resp.ipv4_addresses[0] #=> String
resp.ipv6_addresses #=> Array
resp.ipv6_addresses[0] #=> String
resp.ip_address_type #=> String, one of "IPV4", "DUAL_STACK"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :global_resolver_id (required, String) —

    The ID of the Route 53 Global Resolver to retrieve information about.

Returns:

See Also:



2234
2235
2236
2237
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2234

def get_global_resolver(params = {}, options = {})
  req = build_request(:get_global_resolver, params)
  req.send_request(options)
end

#get_hosted_zone_association(params = {}) ⇒ Types::GetHostedZoneAssociationOutput

Retrieves information about a hosted zone association.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_hosted_zone_association({
  hosted_zone_association_id: "ResourceId", # required
})

Response structure


resp.id #=> String
resp.resource_arn #=> String
resp.hosted_zone_id #=> String
resp.hosted_zone_name #=> String
resp.name #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :hosted_zone_association_id (required, String) —

    ID of the private hosted zone association.

Returns:

See Also:



2282
2283
2284
2285
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2282

def get_hosted_zone_association(params = {}, options = {})
  req = build_request(:get_hosted_zone_association, params)
  req.send_request(options)
end

#get_managed_firewall_domain_list(params = {}) ⇒ Types::GetManagedFirewallDomainListOutput

Retrieves information about an Amazon Web Services-managed firewall domain list. Managed domain lists contain domains associated with malicious activity, content categories, or specific threats.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.get_managed_firewall_domain_list({
  managed_firewall_domain_list_id: "ResourceId", # required
})

Response structure


resp.description #=> String
resp.id #=> String
resp.name #=> String
resp.managed_list_type #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :managed_firewall_domain_list_id (required, String) —

    ID of the Managed Domain List.

Returns:

See Also:



2324
2325
2326
2327
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2324

def get_managed_firewall_domain_list(params = {}, options = {})
  req = build_request(:get_managed_firewall_domain_list, params)
  req.send_request(options)
end

#import_firewall_domains(params = {}) ⇒ Types::ImportFirewallDomainsOutput

Imports a list of domains from an Amazon S3 file into a firewall domain list. The file should contain one domain per line.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.import_firewall_domains({
  domain_file_url: "String", # required
  firewall_domain_list_id: "ResourceId", # required
  operation: "String", # required
})

Response structure


resp.id #=> String
resp.name #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :domain_file_url (required, String) —

    The fully qualified URL of the file in Amazon S3 that contains the list of domains to import. The file should contain one domain per line.

  • :firewall_domain_list_id (required, String) —

    ID of the DNS Firewall domain list that you want to import the domain list to.

  • :operation (required, String) —

    This value is REPLACE, and it updates the domain list to match the list of domains in the imported file.

Returns:

See Also:



2375
2376
2377
2378
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2375

def import_firewall_domains(params = {}, options = {})
  req = build_request(:import_firewall_domains, params)
  req.send_request(options)
end

#list_access_sources(params = {}) ⇒ Types::ListAccessSourcesOutput

Lists all access sources with pagination support.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_access_sources({
  max_results: 1,
  next_token: "String",
  filters: {
    "String" => ["String"],
  },
})

Response structure


resp.next_token #=> String
resp.access_sources #=> Array
resp.access_sources[0].arn #=> String
resp.access_sources[0].cidr #=> String
resp.access_sources[0].created_at #=> Time
resp.access_sources[0].id #=> String
resp.access_sources[0].ip_address_type #=> String, one of "IPV4", "IPV6"
resp.access_sources[0].name #=> String
resp.access_sources[0].dns_view_id #=> String
resp.access_sources[0].protocol #=> String, one of "DO53", "DOH", "DOT"
resp.access_sources[0].status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.access_sources[0].updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :filters (Hash<String,Array>) —

    Values to filter the results.

Returns:

See Also:



2434
2435
2436
2437
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2434

def list_access_sources(params = {}, options = {})
  req = build_request(:list_access_sources, params)
  req.send_request(options)
end

#list_access_tokens(params = {}) ⇒ Types::ListAccessTokensOutput

Lists all access tokens for a DNS view with pagination support.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_access_tokens({
  max_results: 1,
  next_token: "String",
  dns_view_id: "ResourceId", # required
  filters: {
    "String" => ["String"],
  },
})

Response structure


resp.next_token #=> String
resp.access_tokens #=> Array
resp.access_tokens[0].id #=> String
resp.access_tokens[0].arn #=> String
resp.access_tokens[0].created_at #=> Time
resp.access_tokens[0].dns_view_id #=> String
resp.access_tokens[0].expires_at #=> Time
resp.access_tokens[0].global_resolver_id #=> String
resp.access_tokens[0].name #=> String
resp.access_tokens[0].status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"
resp.access_tokens[0].updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :dns_view_id (required, String) —

    The ID of the DNS view to list the tokens for.

  • :filters (Hash<String,Array>) —

    Filtering parameters.

Returns:

See Also:



2496
2497
2498
2499
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2496

def list_access_tokens(params = {}, options = {})
  req = build_request(:list_access_tokens, params)
  req.send_request(options)
end

#list_dns_views(params = {}) ⇒ Types::ListDNSViewsOutput

Lists all DNS views for a Route 53 Global Resolver with pagination support.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_dns_views({
  max_results: 1,
  next_token: "String",
  global_resolver_id: "ResourceId", # required
})

Response structure


resp.next_token #=> String
resp.dns_views #=> Array
resp.dns_views[0].id #=> String
resp.dns_views[0].arn #=> String
resp.dns_views[0].client_token #=> String
resp.dns_views[0].dnssec_validation #=> String, one of "ENABLED", "DISABLED"
resp.dns_views[0].edns_client_subnet #=> String, one of "ENABLED", "DISABLED"
resp.dns_views[0].firewall_rules_fail_open #=> String, one of "ENABLED", "DISABLED"
resp.dns_views[0].name #=> String
resp.dns_views[0].description #=> String
resp.dns_views[0].global_resolver_id #=> String
resp.dns_views[0].created_at #=> Time
resp.dns_views[0].updated_at #=> Time
resp.dns_views[0].status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "ENABLING", "DISABLING", "DISABLED", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :global_resolver_id (required, String) —

    The Global Resolver ID.

Returns:

See Also:



2556
2557
2558
2559
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2556

def list_dns_views(params = {}, options = {})
  req = build_request(:list_dns_views, params)
  req.send_request(options)
end

#list_firewall_domain_lists(params = {}) ⇒ Types::ListFirewallDomainListsOutput

Lists all firewall domain lists for a Route 53 Global Resolver with pagination support.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_firewall_domain_lists({
  max_results: 1,
  next_token: "String",
  global_resolver_id: "ResourceId",
})

Response structure


resp.next_token #=> String
resp.firewall_domain_lists #=> Array
resp.firewall_domain_lists[0].arn #=> String
resp.firewall_domain_lists[0].global_resolver_id #=> String
resp.firewall_domain_lists[0].created_at #=> Time
resp.firewall_domain_lists[0].description #=> String
resp.firewall_domain_lists[0].id #=> String
resp.firewall_domain_lists[0].name #=> String
resp.firewall_domain_lists[0].status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.firewall_domain_lists[0].updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :global_resolver_id (String) —

    The ID of the Global Resolver that contains the DNS view the domain lists are associated to.

Returns:

See Also:



2613
2614
2615
2616
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2613

def list_firewall_domain_lists(params = {}, options = {})
  req = build_request(:list_firewall_domain_lists, params)
  req.send_request(options)
end

#list_firewall_domains(params = {}) ⇒ Types::ListFirewallDomainsOutput

Lists all the domains in DNS Firewall domain list you have created.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_firewall_domains({
  max_results: 1,
  next_token: "String",
  firewall_domain_list_id: "ResourceId", # required
})

Response structure


resp.next_token #=> String
resp.domains #=> Array
resp.domains[0] #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :firewall_domain_list_id (required, String) —

    ID of the DNS Firewall domain list.

Returns:

See Also:



2661
2662
2663
2664
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2661

def list_firewall_domains(params = {}, options = {})
  req = build_request(:list_firewall_domains, params)
  req.send_request(options)
end

#list_firewall_rules(params = {}) ⇒ Types::ListFirewallRulesOutput

Lists all DNS firewall rules for a DNS view with pagination support.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_firewall_rules({
  max_results: 1,
  next_token: "String",
  dns_view_id: "ResourceId", # required
  filters: {
    "String" => ["String"],
  },
})

Response structure


resp.next_token #=> String
resp.firewall_rules #=> Array
resp.firewall_rules[0].action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.firewall_rules[0].block_override_dns_type #=> String, one of "CNAME"
resp.firewall_rules[0].block_override_domain #=> String
resp.firewall_rules[0].block_override_ttl #=> Integer
resp.firewall_rules[0].block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.firewall_rules[0].confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.firewall_rules[0].created_at #=> Time
resp.firewall_rules[0].description #=> String
resp.firewall_rules[0].dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.firewall_rules[0].firewall_domain_list_id #=> String
resp.firewall_rules[0].id #=> String
resp.firewall_rules[0].name #=> String
resp.firewall_rules[0].priority #=> Integer
resp.firewall_rules[0].dns_view_id #=> String
resp.firewall_rules[0].query_type #=> String
resp.firewall_rules[0].status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.firewall_rules[0].updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :dns_view_id (required, String) —

    ID of the DNS view.

  • :filters (Hash<String,Array>) —

    Values to filter the results.

Returns:

See Also:



2731
2732
2733
2734
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2731

def list_firewall_rules(params = {}, options = {})
  req = build_request(:list_firewall_rules, params)
  req.send_request(options)
end

#list_global_resolvers(params = {}) ⇒ Types::ListGlobalResolversOutput

Lists all Route 53 Global Resolver instances in your account with pagination support.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_global_resolvers({
  max_results: 1,
  next_token: "String",
})

Response structure


resp.next_token #=> String
resp.global_resolvers #=> Array
resp.global_resolvers[0].id #=> String
resp.global_resolvers[0].arn #=> String
resp.global_resolvers[0].client_token #=> String
resp.global_resolvers[0].dns_name #=> String
resp.global_resolvers[0].observability_region #=> String
resp.global_resolvers[0].name #=> String
resp.global_resolvers[0].description #=> String
resp.global_resolvers[0].regions #=> Array
resp.global_resolvers[0].regions[0] #=> String
resp.global_resolvers[0].created_at #=> Time
resp.global_resolvers[0].updated_at #=> Time
resp.global_resolvers[0].status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.global_resolvers[0].ipv4_addresses #=> Array
resp.global_resolvers[0].ipv4_addresses[0] #=> String
resp.global_resolvers[0].ipv6_addresses #=> Array
resp.global_resolvers[0].ipv6_addresses[0] #=> String
resp.global_resolvers[0].ip_address_type #=> String, one of "IPV4", "DUAL_STACK"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of Route 53 Global Resolver instances to return in the response. Valid range is 1-100.

  • :next_token (String) —

    The token for the next page of results. This value is returned in the response if there are more results to retrieve.

Returns:

See Also:



2793
2794
2795
2796
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2793

def list_global_resolvers(params = {}, options = {})
  req = build_request(:list_global_resolvers, params)
  req.send_request(options)
end

#list_hosted_zone_associations(params = {}) ⇒ Types::ListHostedZoneAssociationsOutput

Lists all hosted zone associations for a Route 53 Global Resolver resource with pagination support.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_hosted_zone_associations({
  max_results: 1,
  next_token: "String",
  resource_arn: "ResourceArn", # required
})

Response structure


resp.next_token #=> String
resp.hosted_zone_associations #=> Array
resp.hosted_zone_associations[0].id #=> String
resp.hosted_zone_associations[0].resource_arn #=> String
resp.hosted_zone_associations[0].hosted_zone_id #=> String
resp.hosted_zone_associations[0].hosted_zone_name #=> String
resp.hosted_zone_associations[0].name #=> String
resp.hosted_zone_associations[0].created_at #=> Time
resp.hosted_zone_associations[0].updated_at #=> Time
resp.hosted_zone_associations[0].status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :resource_arn (required, String) —

    Amazon Resource Name (ARN) of the DNS view.

Returns:

See Also:



2849
2850
2851
2852
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2849

def list_hosted_zone_associations(params = {}, options = {})
  req = build_request(:list_hosted_zone_associations, params)
  req.send_request(options)
end

#list_managed_firewall_domain_lists(params = {}) ⇒ Types::ListManagedFirewallDomainListsOutput

Returns a paginated list of the Amazon Web Services Managed DNS Lists and the categories for DNS Firewall. The categories are either THREAT or CONTENT.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

The returned response is a pageable response and is Enumerable. For details on usage see PageableResponse.

Examples:

Request syntax with placeholder values


resp = client.list_managed_firewall_domain_lists({
  max_results: 1,
  next_token: "String",
  managed_firewall_domain_list_type: "String", # required
})

Response structure


resp.next_token #=> String
resp.managed_firewall_domain_lists #=> Array
resp.managed_firewall_domain_lists[0].description #=> String
resp.managed_firewall_domain_lists[0].id #=> String
resp.managed_firewall_domain_lists[0].name #=> String
resp.managed_firewall_domain_lists[0].managed_list_type #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :max_results (Integer) —

    The maximum number of results to retrieve in a single call.

  • :next_token (String) —

    A pagination token used for large sets of results that can't be returned in a single response.

  • :managed_firewall_domain_list_type (required, String) —

    The category of the Manage DNS list either THREAT or CONTENT.

Returns:

See Also:



2902
2903
2904
2905
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2902

def list_managed_firewall_domain_lists(params = {}, options = {})
  req = build_request(:list_managed_firewall_domain_lists, params)
  req.send_request(options)
end

#list_tags_for_resource(params = {}) ⇒ Types::ListTagsForResourceResponse

Lists the tags associated with a Route 53 Global Resolver resource.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.list_tags_for_resource({
  resource_arn: "ResourceArn", # required
})

Response structure


resp.tags #=> Hash
resp.tags["TagKey"] #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :resource_arn (required, String) —

    Amazon Resource Name (ARN) for the resource.

Returns:

See Also:



2937
2938
2939
2940
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2937

def list_tags_for_resource(params = {}, options = {})
  req = build_request(:list_tags_for_resource, params)
  req.send_request(options)
end

#tag_resource(params = {}) ⇒ Struct

Adds or updates tags for a Route 53 Global Resolver resource. Tags are key-value pairs that help you organize and identify your resources.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.tag_resource({
  resource_arn: "ResourceArn", # required
  tags: { # required
    "TagKey" => "TagValue",
  },
})

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :resource_arn (required, String) —

    Amazon Resource Name (ARN) of the resource to be tagged.

  • :tags (required, Hash<String,String>) —

    An array of user-defined keys and optional values. These tags can be used for categorization and organization.

Returns:

  • (Struct) —

    Returns an empty response.

See Also:



2973
2974
2975
2976
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 2973

def tag_resource(params = {}, options = {})
  req = build_request(:tag_resource, params)
  req.send_request(options)
end

#untag_resource(params = {}) ⇒ Struct

Removes tags from a Route 53 Global Resolver resource.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.untag_resource({
  resource_arn: "ResourceArn", # required
  tag_keys: ["TagKey"], # required
})

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :resource_arn (required, String) —

    Amazon Resource Name (ARN) of the resource.

  • :tag_keys (required, Array<String>) —

    The tag keys associated with the resource.

Returns:

  • (Struct) —

    Returns an empty response.

See Also:



3005
3006
3007
3008
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3005

def untag_resource(params = {}, options = {})
  req = build_request(:untag_resource, params)
  req.send_request(options)
end

#update_access_source(params = {}) ⇒ Types::UpdateAccessSourceOutput

Updates the configuration of an access source.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.update_access_source({
  access_source_id: "ResourceId", # required
  cidr: "Cidr",
  ip_address_type: "IPV4", # accepts IPV4, IPV6
  name: "ResourceNameShort",
  protocol: "DO53", # accepts DO53, DOH, DOT
})

Response structure


resp.arn #=> String
resp.cidr #=> String
resp.created_at #=> Time
resp.id #=> String
resp.ip_address_type #=> String, one of "IPV4", "IPV6"
resp.name #=> String
resp.dns_view_id #=> String
resp.protocol #=> String, one of "DO53", "DOH", "DOT"
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :access_source_id (required, String) —

    The unique identifier of the access source to update.

  • :cidr (String) —

    The CIDR block for the access source.

  • :ip_address_type (String) —

    The IP address type for the access source.

  • :name (String) —

    The name of the access source.

  • :protocol (String) —

    The protocol for the access source.

Returns:

See Also:



3073
3074
3075
3076
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3073

def update_access_source(params = {}, options = {})
  req = build_request(:update_access_source, params)
  req.send_request(options)
end

#update_access_token(params = {}) ⇒ Types::UpdateAccessTokenOutput

Updates the configuration of an access token.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.update_access_token({
  access_token_id: "ResourceId", # required
  name: "ResourceNameShort", # required
})

Response structure


resp.id #=> String
resp.name #=> String

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :access_token_id (required, String) —

    The ID of the token.

  • :name (required, String) —

    The new name of the token.

Returns:

See Also:



3113
3114
3115
3116
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3113

def update_access_token(params = {}, options = {})
  req = build_request(:update_access_token, params)
  req.send_request(options)
end

#update_dns_view(params = {}) ⇒ Types::UpdateDNSViewOutput

Updates the configuration of a DNS view.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.update_dns_view({
  dns_view_id: "ResourceId", # required
  name: "ResourceName",
  description: "ResourceDescription",
  dnssec_validation: "ENABLED", # accepts ENABLED, DISABLED
  edns_client_subnet: "ENABLED", # accepts ENABLED, DISABLED
  firewall_rules_fail_open: "ENABLED", # accepts ENABLED, DISABLED
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dnssec_validation #=> String, one of "ENABLED", "DISABLED"
resp.edns_client_subnet #=> String, one of "ENABLED", "DISABLED"
resp.firewall_rules_fail_open #=> String, one of "ENABLED", "DISABLED"
resp.name #=> String
resp.description #=> String
resp.global_resolver_id #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "ENABLING", "DISABLING", "DISABLED", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :dns_view_id (required, String) —

    The unique identifier of the DNS view to update.

  • :name (String) —

    The name of the DNS view.

  • :description (String) —

    A description of the DNS view.

  • :dnssec_validation (String) —

    Whether to enable DNSSEC validation for the DNS view.

  • :edns_client_subnet (String) —

    Whether to enable EDNS Client Subnet injection for the DNS view.

  • :firewall_rules_fail_open (String) —

    Whether firewall rules should fail open when they cannot be evaluated.

Returns:

See Also:



3189
3190
3191
3192
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3189

def update_dns_view(params = {}, options = {})
  req = build_request(:update_dns_view, params)
  req.send_request(options)
end

#update_firewall_domains(params = {}) ⇒ Types::UpdateFirewallDomainsOutput

Updates a DNS Firewall domain list from an array of specified domains.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.update_firewall_domains({
  domains: ["Domain"], # required
  firewall_domain_list_id: "ResourceId", # required
  operation: "String", # required
})

Response structure


resp.id #=> String
resp.name #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :domains (required, Array<String>) —

    A list of the domains. You can add up to 1000 domains per request.

  • :firewall_domain_list_id (required, String) —

    The ID of the DNS Firewall domain list to which you want to add the domains.

  • :operation (required, String) —

    The operation for updating the domain list. The allowed values are ADD, REMOVE, and REPLACE.

Returns:

See Also:



3237
3238
3239
3240
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3237

def update_firewall_domains(params = {}, options = {})
  req = build_request(:update_firewall_domains, params)
  req.send_request(options)
end

#update_firewall_rule(params = {}) ⇒ Types::UpdateFirewallRuleOutput

Updates the configuration of a DNS firewall rule.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.update_firewall_rule({
  action: "ALLOW", # accepts ALLOW, ALERT, BLOCK
  block_override_dns_type: "CNAME", # accepts CNAME
  block_override_domain: "Domain",
  block_override_ttl: 1,
  block_response: "NODATA", # accepts NODATA, NXDOMAIN, OVERRIDE
  client_token: "ClientToken", # required
  confidence_threshold: "LOW", # accepts LOW, MEDIUM, HIGH
  description: "ResourceDescription",
  dns_advanced_protection: "DGA", # accepts DGA, DNS_TUNNELING, DICTIONARY_DGA
  firewall_rule_id: "ResourceId", # required
  name: "ResourceName",
  priority: 1,
})

Response structure


resp.action #=> String, one of "ALLOW", "ALERT", "BLOCK"
resp.block_override_dns_type #=> String, one of "CNAME"
resp.block_override_domain #=> String
resp.block_override_ttl #=> Integer
resp.block_response #=> String, one of "NODATA", "NXDOMAIN", "OVERRIDE"
resp.confidence_threshold #=> String, one of "LOW", "MEDIUM", "HIGH"
resp.created_at #=> Time
resp.description #=> String
resp.dns_advanced_protection #=> String, one of "DGA", "DNS_TUNNELING", "DICTIONARY_DGA"
resp.firewall_domain_list_id #=> String
resp.id #=> String
resp.name #=> String
resp.priority #=> Integer
resp.dns_view_id #=> String
resp.query_type #=> String
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.updated_at #=> Time

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :action (String) —

    The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advanced rule.

  • :block_override_dns_type (String) —

    The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

  • :block_override_domain (String) —

    The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

  • :block_override_ttl (Integer) —

    The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

  • :block_response (String) —

    The way that you want DNS Firewall to block the request. Used for the rule action setting BLOCK.

  • :client_token (required, String) —

    A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the same clientToken has the same result every time.

    A suitable default value is auto-generated. You should normally not need to pass this option.**

  • :confidence_threshold (String) —

    The confidence threshold for DNS Firewall Advanced. You must provide this value when you create a DNS Firewall Advanced rule.

  • :description (String) —

    The description for the Firewall rule.

  • :dns_advanced_protection (String) —

    The type of the DNS Firewall Advanced rule. Valid values are DGA, DNS_TUNNELING, and DICTIONARY_DGA.

  • :firewall_rule_id (required, String) —

    The ID of the DNS Firewall rule.

  • :name (String) —

    The name of the DNS Firewall rule.

  • :priority (Integer) —

    The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.

Returns:

See Also:



3364
3365
3366
3367
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3364

def update_firewall_rule(params = {}, options = {})
  req = build_request(:update_firewall_rule, params)
  req.send_request(options)
end

#update_global_resolver(params = {}) ⇒ Types::UpdateGlobalResolverOutput

Updates the configuration of a Route 53 Global Resolver instance. You can modify the name, description, and observability Region.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.update_global_resolver({
  global_resolver_id: "ResourceId", # required
  name: "ResourceName",
  observability_region: "Region",
  description: "ResourceDescription",
  ip_address_type: "IPV4", # accepts IPV4, DUAL_STACK
})

Response structure


resp.id #=> String
resp.arn #=> String
resp.client_token #=> String
resp.dns_name #=> String
resp.observability_region #=> String
resp.name #=> String
resp.description #=> String
resp.regions #=> Array
resp.regions[0] #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "UPDATING", "DELETING"
resp.ipv4_addresses #=> Array
resp.ipv4_addresses[0] #=> String
resp.ipv6_addresses #=> Array
resp.ipv6_addresses[0] #=> String
resp.ip_address_type #=> String, one of "IPV4", "DUAL_STACK"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :global_resolver_id (required, String) —

    The ID of the Global Resolver.

  • :name (String) —

    The name of the Global Resolver.

  • :observability_region (String) —

    The Amazon Web Services Regions in which the users' Global Resolver query resolution logs will be propagated.

  • :description (String) —

    The description of the Global Resolver.

  • :ip_address_type (String) —

    The IP address type for the Global Resolver. Valid values are IPV4 or DUAL_STACK for both IPv4 and IPv6 support.

Returns:

See Also:



3446
3447
3448
3449
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3446

def update_global_resolver(params = {}, options = {})
  req = build_request(:update_global_resolver, params)
  req.send_request(options)
end

#update_hosted_zone_association(params = {}) ⇒ Types::UpdateHostedZoneAssociationOutput

Updates the configuration of a hosted zone association.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.

Examples:

Request syntax with placeholder values


resp = client.update_hosted_zone_association({
  hosted_zone_association_id: "ResourceId", # required
  name: "ResourceName",
})

Response structure


resp.id #=> String
resp.resource_arn #=> String
resp.hosted_zone_id #=> String
resp.hosted_zone_name #=> String
resp.name #=> String
resp.created_at #=> Time
resp.updated_at #=> Time
resp.status #=> String, one of "CREATING", "OPERATIONAL", "DELETING"

Parameters:

  • params (Hash) (defaults to: {}) —

    ({})

Options Hash (params):

  • :hosted_zone_association_id (required, String) —

    The ID of the private hosted zone association.

  • :name (String) —

    The name you want to update the hosted zone association to.

Returns:

See Also:



3498
3499
3500
3501
 
# File 'gems/aws-sdk-route53globalresolver/lib/aws-sdk-route53globalresolver/client.rb', line 3498

def update_hosted_zone_association(params = {}, options = {})
  req = build_request(:update_hosted_zone_association, params)
  req.send_request(options)
end