BatchCreateFirewallRuleInputItem - Amazon Route 53

BatchCreateFirewallRuleInputItem

Information about a DNS Firewall rule to create in a batch operation.

Contents

action

The action to take when a DNS query matches the firewall rule.

Type: String

Valid Values: ALLOW | ALERT | BLOCK

Required: Yes

clientToken

A unique string that identifies the request and ensures idempotency.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 256.

Required: Yes

dnsViewId

The ID of the DNS view to associate the firewall rule with.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: [-.a-zA-Z0-9]+

Required: Yes

name

A name for the firewall rule.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: (?!^[0-9]+$)([a-zA-Z0-9-_/' ']+)

Required: Yes

blockOverrideDnsType

The DNS record type for the custom response when the action is BLOCK.

Type: String

Valid Values: CNAME

Required: No

blockOverrideDomain

The custom domain name for the BLOCK response.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 256.

Pattern: \*?[-a-zA-Z0-9.]+

Required: No

blockOverrideTtl

The TTL value for the custom response when the action is BLOCK.

Type: Integer

Valid Range: Minimum value of 0. Maximum value of 604800.

Required: No

blockResponse

The type of block response to return when the action is BLOCK.

Type: String

Valid Values: NODATA | NXDOMAIN | OVERRIDE

Required: No

confidenceThreshold

The confidence threshold for advanced threat detection.

Type: String

Valid Values: LOW | MEDIUM | HIGH

Required: No

description

A description of the firewall rule.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 256.

Required: No

dnsAdvancedProtection

Whether to enable advanced DNS threat protection for the firewall rule.

Type: String

Valid Values: DGA | DNS_TUNNELING

Required: No

firewallDomainListId

The ID of the firewall domain list to associate with the rule.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: [-.a-zA-Z0-9]+

Required: No

priority

The priority of the firewall rule.

Type: Long

Valid Range: Minimum value of 1. Maximum value of 10000.

Required: No

qType

The DNS query type that the firewall rule should match.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 16.

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: