Copyright	(c) 2013-2021 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay <brendan.g.hay+amazonka@gmail.com>
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	None

Amazonka.Route53Resolver.Types.FirewallConfig

Description

Documentation

data FirewallConfig Source #

Configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC).

See: newFirewallConfig smart constructor.

Constructors

FirewallConfig'

Fields

resourceId :: Maybe Text
The ID of the VPC that this firewall configuration applies to.
ownerId :: Maybe Text
The Amazon Web Services account ID of the owner of the VPC that this firewall configuration applies to.
id :: Maybe Text
The ID of the firewall configuration.
firewallFailOpen :: Maybe FirewallFailOpenStatus
Determines how DNS Firewall operates during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.
- By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
- If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.
This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

Instances

Instances details

Eq FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods (==) :: FirewallConfig -> FirewallConfig -> Bool # (/=) :: FirewallConfig -> FirewallConfig -> Bool #
Read FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods readsPrec :: Int -> ReadS FirewallConfig # readList :: ReadS [FirewallConfig] # readPrec :: ReadPrec FirewallConfig # readListPrec :: ReadPrec [FirewallConfig] #
Show FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods showsPrec :: Int -> FirewallConfig -> ShowS # show :: FirewallConfig -> String # showList :: [FirewallConfig] -> ShowS #
Generic FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Associated Types type Rep FirewallConfig :: Type -> Type # Methods from :: FirewallConfig -> Rep FirewallConfig x # to :: Rep FirewallConfig x -> FirewallConfig #
NFData FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods rnf :: FirewallConfig -> () #
Hashable FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods hashWithSalt :: Int -> FirewallConfig -> Int # hash :: FirewallConfig -> Int #
FromJSON FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods parseJSON :: Value -> Parser FirewallConfig # parseJSONList :: Value -> Parser [FirewallConfig] #
type Rep FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig type Rep FirewallConfig = D1 ('MetaData "FirewallConfig" "Amazonka.Route53Resolver.Types.FirewallConfig" "libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver" 'False) (C1 ('MetaCons "FirewallConfig'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "resourceId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "ownerId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "id") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "firewallFailOpen") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe FirewallFailOpenStatus)))))

newFirewallConfig :: FirewallConfig Source #

Create a value of FirewallConfig with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:resourceId:FirewallConfig', firewallConfig_resourceId - The ID of the VPC that this firewall configuration applies to.

$sel:ownerId:FirewallConfig', firewallConfig_ownerId - The Amazon Web Services account ID of the owner of the VPC that this firewall configuration applies to.

$sel:id:FirewallConfig', firewallConfig_id - The ID of the firewall configuration.

$sel:firewallFailOpen:FirewallConfig', firewallConfig_firewallFailOpen - Determines how DNS Firewall operates during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

firewallConfig_resourceId :: Lens' FirewallConfig (Maybe Text) Source #

The ID of the VPC that this firewall configuration applies to.

firewallConfig_ownerId :: Lens' FirewallConfig (Maybe Text) Source #

The Amazon Web Services account ID of the owner of the VPC that this firewall configuration applies to.

firewallConfig_id :: Lens' FirewallConfig (Maybe Text) Source #

The ID of the firewall configuration.

firewallConfig_firewallFailOpen :: Lens' FirewallConfig (Maybe FirewallFailOpenStatus) Source #

Determines how DNS Firewall operates during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.