Package com.pulumi.aws.route53

Class ResolverFirewallRuleArgs

  • public final class ResolverFirewallRuleArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • action

        public com.pulumi.core.Output<java.lang.String> action()
        Returns:
        The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advanced rule. Valid values: `ALLOW`, `BLOCK`, `ALERT`. Note: `ALLOW` is not valid for DNS Firewall Advanced rules.

      • blockOverrideDnsType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> blockOverrideDnsType()
        Returns:
        The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Value values: `CNAME`.

      • blockOverrideDomain

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> blockOverrideDomain()
        Returns:
        The custom DNS record to send back in response to the query.

      • blockOverrideTtl

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> blockOverrideTtl()
        Returns:
        The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Minimum value of 0. Maximum value of 604800.

      • blockResponse

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> blockResponse()
        Returns:
        The way that you want DNS Firewall to block the request. Valid values: `NODATA`, `NXDOMAIN`, `OVERRIDE`.

      • confidenceThreshold

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> confidenceThreshold()
        Returns:
        The confidence threshold for DNS Firewall Advanced rules. You must provide this value when creating a DNS Firewall Advanced rule. Valid values: `LOW`, `MEDIUM`, `HIGH`. Conflicts with `firewallDomainListId`.

      • dnsThreatProtection

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> dnsThreatProtection()
        Returns:
        The type of DNS Firewall Advanced rule. You must provide this value when creating a DNS Firewall Advanced rule. Valid values: `DGA`, `DICTIONARY_DGA`, `DNS_TUNNELING`. Conflicts with `firewallDomainListId`.

      • firewallDomainListId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> firewallDomainListId()
        Returns:
        The ID of the domain list that you want to use in the rule. Required for standard rules. Conflicts with `dnsThreatProtection` and `confidenceThreshold`.

      • firewallDomainRedirectionAction

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> firewallDomainRedirectionAction()
        Returns:
        Evaluate DNS redirection in the DNS redirection chain, such as CNAME, DNAME, ot ALIAS. Valid values are `INSPECT_REDIRECTION_DOMAIN` and `TRUST_REDIRECTION_DOMAIN`. Default value is `INSPECT_REDIRECTION_DOMAIN`.

      • firewallRuleGroupId

        public com.pulumi.core.Output<java.lang.String> firewallRuleGroupId()
        Returns:
        The unique identifier of the firewall rule group where you want to create the rule.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        A name that lets you identify the rule, to manage and use it.

      • priority

        public com.pulumi.core.Output<java.lang.Integer> priority()
        Returns:
        The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.

      • qType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> qType()
        Returns:
        The query type you want the rule to evaluate. Additional details can be found [here](https://en.wikipedia.org/wiki/List_of_DNS_record_types)

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.