| Copyright | (c) 2013-2021 Brendan Hay |
|---|---|
| License | Mozilla Public License, v. 2.0. |
| Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
| Stability | auto-generated |
| Portability | non-portable (GHC extensions) |
| Safe Haskell | None |
Amazonka.Route53Resolver.Types
Contents
- Service Configuration
- Errors
- Action
- BlockOverrideDnsType
- BlockResponse
- FirewallDomainImportOperation
- FirewallDomainListStatus
- FirewallDomainUpdateOperation
- FirewallFailOpenStatus
- FirewallRuleGroupAssociationStatus
- FirewallRuleGroupStatus
- IpAddressStatus
- MutationProtectionStatus
- ResolverDNSSECValidationStatus
- ResolverEndpointDirection
- ResolverEndpointStatus
- ResolverQueryLogConfigAssociationError
- ResolverQueryLogConfigAssociationStatus
- ResolverQueryLogConfigStatus
- ResolverRuleAssociationStatus
- ResolverRuleStatus
- RuleTypeOption
- ShareStatus
- SortOrder
- Validation
- Filter
- FirewallConfig
- FirewallDomainList
- FirewallDomainListMetadata
- FirewallRule
- FirewallRuleGroup
- FirewallRuleGroupAssociation
- FirewallRuleGroupMetadata
- IpAddressRequest
- IpAddressResponse
- IpAddressUpdate
- ResolverDnssecConfig
- ResolverEndpoint
- ResolverQueryLogConfig
- ResolverQueryLogConfigAssociation
- ResolverRule
- ResolverRuleAssociation
- ResolverRuleConfig
- Tag
- TargetAddress
Description
Synopsis
- defaultService :: Service
- _InvalidTagException :: AsError a => Getting (First ServiceError) a ServiceError
- _ValidationException :: AsError a => Getting (First ServiceError) a ServiceError
- _AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidParameterException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidRequestException :: AsError a => Getting (First ServiceError) a ServiceError
- _ConflictException :: AsError a => Getting (First ServiceError) a ServiceError
- _ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError
- _InternalServiceErrorException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceExistsException :: AsError a => Getting (First ServiceError) a ServiceError
- _UnknownResourceException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidPolicyDocument :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
- _LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceInUseException :: AsError a => Getting (First ServiceError) a ServiceError
- newtype Action where
- Action' {
- fromAction :: Text
- pattern Action_ALERT :: Action
- pattern Action_ALLOW :: Action
- pattern Action_BLOCK :: Action
- Action' {
- newtype BlockOverrideDnsType where
- newtype BlockResponse where
- BlockResponse' { }
- pattern BlockResponse_NODATA :: BlockResponse
- pattern BlockResponse_NXDOMAIN :: BlockResponse
- pattern BlockResponse_OVERRIDE :: BlockResponse
- newtype FirewallDomainImportOperation where
- newtype FirewallDomainListStatus where
- FirewallDomainListStatus' { }
- pattern FirewallDomainListStatus_COMPLETE :: FirewallDomainListStatus
- pattern FirewallDomainListStatus_COMPLETE_IMPORT_FAILED :: FirewallDomainListStatus
- pattern FirewallDomainListStatus_DELETING :: FirewallDomainListStatus
- pattern FirewallDomainListStatus_IMPORTING :: FirewallDomainListStatus
- pattern FirewallDomainListStatus_UPDATING :: FirewallDomainListStatus
- newtype FirewallDomainUpdateOperation where
- newtype FirewallFailOpenStatus where
- newtype FirewallRuleGroupAssociationStatus where
- FirewallRuleGroupAssociationStatus' { }
- pattern FirewallRuleGroupAssociationStatus_COMPLETE :: FirewallRuleGroupAssociationStatus
- pattern FirewallRuleGroupAssociationStatus_DELETING :: FirewallRuleGroupAssociationStatus
- pattern FirewallRuleGroupAssociationStatus_UPDATING :: FirewallRuleGroupAssociationStatus
- newtype FirewallRuleGroupStatus where
- newtype IpAddressStatus where
- IpAddressStatus' { }
- pattern IpAddressStatus_ATTACHED :: IpAddressStatus
- pattern IpAddressStatus_ATTACHING :: IpAddressStatus
- pattern IpAddressStatus_CREATING :: IpAddressStatus
- pattern IpAddressStatus_DELETE_FAILED_FAS_EXPIRED :: IpAddressStatus
- pattern IpAddressStatus_DELETING :: IpAddressStatus
- pattern IpAddressStatus_DETACHING :: IpAddressStatus
- pattern IpAddressStatus_FAILED_CREATION :: IpAddressStatus
- pattern IpAddressStatus_FAILED_RESOURCE_GONE :: IpAddressStatus
- pattern IpAddressStatus_REMAP_ATTACHING :: IpAddressStatus
- pattern IpAddressStatus_REMAP_DETACHING :: IpAddressStatus
- newtype MutationProtectionStatus where
- newtype ResolverDNSSECValidationStatus where
- ResolverDNSSECValidationStatus' { }
- pattern ResolverDNSSECValidationStatus_DISABLED :: ResolverDNSSECValidationStatus
- pattern ResolverDNSSECValidationStatus_DISABLING :: ResolverDNSSECValidationStatus
- pattern ResolverDNSSECValidationStatus_ENABLED :: ResolverDNSSECValidationStatus
- pattern ResolverDNSSECValidationStatus_ENABLING :: ResolverDNSSECValidationStatus
- newtype ResolverEndpointDirection where
- newtype ResolverEndpointStatus where
- ResolverEndpointStatus' { }
- pattern ResolverEndpointStatus_ACTION_NEEDED :: ResolverEndpointStatus
- pattern ResolverEndpointStatus_AUTO_RECOVERING :: ResolverEndpointStatus
- pattern ResolverEndpointStatus_CREATING :: ResolverEndpointStatus
- pattern ResolverEndpointStatus_DELETING :: ResolverEndpointStatus
- pattern ResolverEndpointStatus_OPERATIONAL :: ResolverEndpointStatus
- pattern ResolverEndpointStatus_UPDATING :: ResolverEndpointStatus
- newtype ResolverQueryLogConfigAssociationError where
- ResolverQueryLogConfigAssociationError' { }
- pattern ResolverQueryLogConfigAssociationError_ACCESS_DENIED :: ResolverQueryLogConfigAssociationError
- pattern ResolverQueryLogConfigAssociationError_DESTINATION_NOT_FOUND :: ResolverQueryLogConfigAssociationError
- pattern ResolverQueryLogConfigAssociationError_INTERNAL_SERVICE_ERROR :: ResolverQueryLogConfigAssociationError
- pattern ResolverQueryLogConfigAssociationError_NONE :: ResolverQueryLogConfigAssociationError
- newtype ResolverQueryLogConfigAssociationStatus where
- ResolverQueryLogConfigAssociationStatus' { }
- pattern ResolverQueryLogConfigAssociationStatus_ACTION_NEEDED :: ResolverQueryLogConfigAssociationStatus
- pattern ResolverQueryLogConfigAssociationStatus_ACTIVE :: ResolverQueryLogConfigAssociationStatus
- pattern ResolverQueryLogConfigAssociationStatus_CREATING :: ResolverQueryLogConfigAssociationStatus
- pattern ResolverQueryLogConfigAssociationStatus_DELETING :: ResolverQueryLogConfigAssociationStatus
- pattern ResolverQueryLogConfigAssociationStatus_FAILED :: ResolverQueryLogConfigAssociationStatus
- newtype ResolverQueryLogConfigStatus where
- ResolverQueryLogConfigStatus' { }
- pattern ResolverQueryLogConfigStatus_CREATED :: ResolverQueryLogConfigStatus
- pattern ResolverQueryLogConfigStatus_CREATING :: ResolverQueryLogConfigStatus
- pattern ResolverQueryLogConfigStatus_DELETING :: ResolverQueryLogConfigStatus
- pattern ResolverQueryLogConfigStatus_FAILED :: ResolverQueryLogConfigStatus
- newtype ResolverRuleAssociationStatus where
- ResolverRuleAssociationStatus' { }
- pattern ResolverRuleAssociationStatus_COMPLETE :: ResolverRuleAssociationStatus
- pattern ResolverRuleAssociationStatus_CREATING :: ResolverRuleAssociationStatus
- pattern ResolverRuleAssociationStatus_DELETING :: ResolverRuleAssociationStatus
- pattern ResolverRuleAssociationStatus_FAILED :: ResolverRuleAssociationStatus
- pattern ResolverRuleAssociationStatus_OVERRIDDEN :: ResolverRuleAssociationStatus
- newtype ResolverRuleStatus where
- ResolverRuleStatus' { }
- pattern ResolverRuleStatus_COMPLETE :: ResolverRuleStatus
- pattern ResolverRuleStatus_DELETING :: ResolverRuleStatus
- pattern ResolverRuleStatus_FAILED :: ResolverRuleStatus
- pattern ResolverRuleStatus_UPDATING :: ResolverRuleStatus
- newtype RuleTypeOption where
- RuleTypeOption' { }
- pattern RuleTypeOption_FORWARD :: RuleTypeOption
- pattern RuleTypeOption_RECURSIVE :: RuleTypeOption
- pattern RuleTypeOption_SYSTEM :: RuleTypeOption
- newtype ShareStatus where
- ShareStatus' { }
- pattern ShareStatus_NOT_SHARED :: ShareStatus
- pattern ShareStatus_SHARED_BY_ME :: ShareStatus
- pattern ShareStatus_SHARED_WITH_ME :: ShareStatus
- newtype SortOrder where
- SortOrder' { }
- pattern SortOrder_ASCENDING :: SortOrder
- pattern SortOrder_DESCENDING :: SortOrder
- newtype Validation where
- Validation' { }
- pattern Validation_DISABLE :: Validation
- pattern Validation_ENABLE :: Validation
- data Filter = Filter' {}
- newFilter :: Filter
- filter_values :: Lens' Filter (Maybe [Text])
- filter_name :: Lens' Filter (Maybe Text)
- data FirewallConfig = FirewallConfig' {}
- newFirewallConfig :: FirewallConfig
- firewallConfig_resourceId :: Lens' FirewallConfig (Maybe Text)
- firewallConfig_ownerId :: Lens' FirewallConfig (Maybe Text)
- firewallConfig_id :: Lens' FirewallConfig (Maybe Text)
- firewallConfig_firewallFailOpen :: Lens' FirewallConfig (Maybe FirewallFailOpenStatus)
- data FirewallDomainList = FirewallDomainList' {}
- newFirewallDomainList :: FirewallDomainList
- firewallDomainList_creationTime :: Lens' FirewallDomainList (Maybe Text)
- firewallDomainList_status :: Lens' FirewallDomainList (Maybe FirewallDomainListStatus)
- firewallDomainList_arn :: Lens' FirewallDomainList (Maybe Text)
- firewallDomainList_creatorRequestId :: Lens' FirewallDomainList (Maybe Text)
- firewallDomainList_managedOwnerName :: Lens' FirewallDomainList (Maybe Text)
- firewallDomainList_domainCount :: Lens' FirewallDomainList (Maybe Int)
- firewallDomainList_modificationTime :: Lens' FirewallDomainList (Maybe Text)
- firewallDomainList_statusMessage :: Lens' FirewallDomainList (Maybe Text)
- firewallDomainList_name :: Lens' FirewallDomainList (Maybe Text)
- firewallDomainList_id :: Lens' FirewallDomainList (Maybe Text)
- data FirewallDomainListMetadata = FirewallDomainListMetadata' {}
- newFirewallDomainListMetadata :: FirewallDomainListMetadata
- firewallDomainListMetadata_arn :: Lens' FirewallDomainListMetadata (Maybe Text)
- firewallDomainListMetadata_creatorRequestId :: Lens' FirewallDomainListMetadata (Maybe Text)
- firewallDomainListMetadata_managedOwnerName :: Lens' FirewallDomainListMetadata (Maybe Text)
- firewallDomainListMetadata_name :: Lens' FirewallDomainListMetadata (Maybe Text)
- firewallDomainListMetadata_id :: Lens' FirewallDomainListMetadata (Maybe Text)
- data FirewallRule = FirewallRule' {
- creationTime :: Maybe Text
- blockOverrideDnsType :: Maybe BlockOverrideDnsType
- firewallRuleGroupId :: Maybe Text
- priority :: Maybe Int
- blockResponse :: Maybe BlockResponse
- creatorRequestId :: Maybe Text
- modificationTime :: Maybe Text
- action :: Maybe Action
- blockOverrideTtl :: Maybe Int
- name :: Maybe Text
- blockOverrideDomain :: Maybe Text
- firewallDomainListId :: Maybe Text
- newFirewallRule :: FirewallRule
- firewallRule_creationTime :: Lens' FirewallRule (Maybe Text)
- firewallRule_blockOverrideDnsType :: Lens' FirewallRule (Maybe BlockOverrideDnsType)
- firewallRule_firewallRuleGroupId :: Lens' FirewallRule (Maybe Text)
- firewallRule_priority :: Lens' FirewallRule (Maybe Int)
- firewallRule_blockResponse :: Lens' FirewallRule (Maybe BlockResponse)
- firewallRule_creatorRequestId :: Lens' FirewallRule (Maybe Text)
- firewallRule_modificationTime :: Lens' FirewallRule (Maybe Text)
- firewallRule_action :: Lens' FirewallRule (Maybe Action)
- firewallRule_blockOverrideTtl :: Lens' FirewallRule (Maybe Int)
- firewallRule_name :: Lens' FirewallRule (Maybe Text)
- firewallRule_blockOverrideDomain :: Lens' FirewallRule (Maybe Text)
- firewallRule_firewallDomainListId :: Lens' FirewallRule (Maybe Text)
- data FirewallRuleGroup = FirewallRuleGroup' {}
- newFirewallRuleGroup :: FirewallRuleGroup
- firewallRuleGroup_creationTime :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_status :: Lens' FirewallRuleGroup (Maybe FirewallRuleGroupStatus)
- firewallRuleGroup_arn :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_creatorRequestId :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_modificationTime :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_shareStatus :: Lens' FirewallRuleGroup (Maybe ShareStatus)
- firewallRuleGroup_ownerId :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_statusMessage :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_name :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_id :: Lens' FirewallRuleGroup (Maybe Text)
- firewallRuleGroup_ruleCount :: Lens' FirewallRuleGroup (Maybe Int)
- data FirewallRuleGroupAssociation = FirewallRuleGroupAssociation' {
- creationTime :: Maybe Text
- status :: Maybe FirewallRuleGroupAssociationStatus
- mutationProtection :: Maybe MutationProtectionStatus
- firewallRuleGroupId :: Maybe Text
- priority :: Maybe Int
- arn :: Maybe Text
- vpcId :: Maybe Text
- creatorRequestId :: Maybe Text
- managedOwnerName :: Maybe Text
- modificationTime :: Maybe Text
- statusMessage :: Maybe Text
- name :: Maybe Text
- id :: Maybe Text
- newFirewallRuleGroupAssociation :: FirewallRuleGroupAssociation
- firewallRuleGroupAssociation_creationTime :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_status :: Lens' FirewallRuleGroupAssociation (Maybe FirewallRuleGroupAssociationStatus)
- firewallRuleGroupAssociation_mutationProtection :: Lens' FirewallRuleGroupAssociation (Maybe MutationProtectionStatus)
- firewallRuleGroupAssociation_firewallRuleGroupId :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_priority :: Lens' FirewallRuleGroupAssociation (Maybe Int)
- firewallRuleGroupAssociation_arn :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_vpcId :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_creatorRequestId :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_managedOwnerName :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_modificationTime :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_statusMessage :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_name :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- firewallRuleGroupAssociation_id :: Lens' FirewallRuleGroupAssociation (Maybe Text)
- data FirewallRuleGroupMetadata = FirewallRuleGroupMetadata' {}
- newFirewallRuleGroupMetadata :: FirewallRuleGroupMetadata
- firewallRuleGroupMetadata_arn :: Lens' FirewallRuleGroupMetadata (Maybe Text)
- firewallRuleGroupMetadata_creatorRequestId :: Lens' FirewallRuleGroupMetadata (Maybe Text)
- firewallRuleGroupMetadata_shareStatus :: Lens' FirewallRuleGroupMetadata (Maybe ShareStatus)
- firewallRuleGroupMetadata_ownerId :: Lens' FirewallRuleGroupMetadata (Maybe Text)
- firewallRuleGroupMetadata_name :: Lens' FirewallRuleGroupMetadata (Maybe Text)
- firewallRuleGroupMetadata_id :: Lens' FirewallRuleGroupMetadata (Maybe Text)
- data IpAddressRequest = IpAddressRequest' {}
- newIpAddressRequest :: Text -> IpAddressRequest
- ipAddressRequest_ip :: Lens' IpAddressRequest (Maybe Text)
- ipAddressRequest_subnetId :: Lens' IpAddressRequest Text
- data IpAddressResponse = IpAddressResponse' {}
- newIpAddressResponse :: IpAddressResponse
- ipAddressResponse_creationTime :: Lens' IpAddressResponse (Maybe Text)
- ipAddressResponse_status :: Lens' IpAddressResponse (Maybe IpAddressStatus)
- ipAddressResponse_modificationTime :: Lens' IpAddressResponse (Maybe Text)
- ipAddressResponse_subnetId :: Lens' IpAddressResponse (Maybe Text)
- ipAddressResponse_ip :: Lens' IpAddressResponse (Maybe Text)
- ipAddressResponse_ipId :: Lens' IpAddressResponse (Maybe Text)
- ipAddressResponse_statusMessage :: Lens' IpAddressResponse (Maybe Text)
- data IpAddressUpdate = IpAddressUpdate' {}
- newIpAddressUpdate :: IpAddressUpdate
- ipAddressUpdate_subnetId :: Lens' IpAddressUpdate (Maybe Text)
- ipAddressUpdate_ip :: Lens' IpAddressUpdate (Maybe Text)
- ipAddressUpdate_ipId :: Lens' IpAddressUpdate (Maybe Text)
- data ResolverDnssecConfig = ResolverDnssecConfig' {}
- newResolverDnssecConfig :: ResolverDnssecConfig
- resolverDnssecConfig_resourceId :: Lens' ResolverDnssecConfig (Maybe Text)
- resolverDnssecConfig_ownerId :: Lens' ResolverDnssecConfig (Maybe Text)
- resolverDnssecConfig_validationStatus :: Lens' ResolverDnssecConfig (Maybe ResolverDNSSECValidationStatus)
- resolverDnssecConfig_id :: Lens' ResolverDnssecConfig (Maybe Text)
- data ResolverEndpoint = ResolverEndpoint' {
- creationTime :: Maybe Text
- status :: Maybe ResolverEndpointStatus
- securityGroupIds :: Maybe [Text]
- direction :: Maybe ResolverEndpointDirection
- arn :: Maybe Text
- creatorRequestId :: Maybe Text
- modificationTime :: Maybe Text
- ipAddressCount :: Maybe Int
- statusMessage :: Maybe Text
- name :: Maybe Text
- id :: Maybe Text
- hostVPCId :: Maybe Text
- newResolverEndpoint :: ResolverEndpoint
- resolverEndpoint_creationTime :: Lens' ResolverEndpoint (Maybe Text)
- resolverEndpoint_status :: Lens' ResolverEndpoint (Maybe ResolverEndpointStatus)
- resolverEndpoint_securityGroupIds :: Lens' ResolverEndpoint (Maybe [Text])
- resolverEndpoint_direction :: Lens' ResolverEndpoint (Maybe ResolverEndpointDirection)
- resolverEndpoint_arn :: Lens' ResolverEndpoint (Maybe Text)
- resolverEndpoint_creatorRequestId :: Lens' ResolverEndpoint (Maybe Text)
- resolverEndpoint_modificationTime :: Lens' ResolverEndpoint (Maybe Text)
- resolverEndpoint_ipAddressCount :: Lens' ResolverEndpoint (Maybe Int)
- resolverEndpoint_statusMessage :: Lens' ResolverEndpoint (Maybe Text)
- resolverEndpoint_name :: Lens' ResolverEndpoint (Maybe Text)
- resolverEndpoint_id :: Lens' ResolverEndpoint (Maybe Text)
- resolverEndpoint_hostVPCId :: Lens' ResolverEndpoint (Maybe Text)
- data ResolverQueryLogConfig = ResolverQueryLogConfig' {}
- newResolverQueryLogConfig :: ResolverQueryLogConfig
- resolverQueryLogConfig_creationTime :: Lens' ResolverQueryLogConfig (Maybe Text)
- resolverQueryLogConfig_status :: Lens' ResolverQueryLogConfig (Maybe ResolverQueryLogConfigStatus)
- resolverQueryLogConfig_associationCount :: Lens' ResolverQueryLogConfig (Maybe Int)
- resolverQueryLogConfig_arn :: Lens' ResolverQueryLogConfig (Maybe Text)
- resolverQueryLogConfig_creatorRequestId :: Lens' ResolverQueryLogConfig (Maybe Text)
- resolverQueryLogConfig_destinationArn :: Lens' ResolverQueryLogConfig (Maybe Text)
- resolverQueryLogConfig_shareStatus :: Lens' ResolverQueryLogConfig (Maybe ShareStatus)
- resolverQueryLogConfig_ownerId :: Lens' ResolverQueryLogConfig (Maybe Text)
- resolverQueryLogConfig_name :: Lens' ResolverQueryLogConfig (Maybe Text)
- resolverQueryLogConfig_id :: Lens' ResolverQueryLogConfig (Maybe Text)
- data ResolverQueryLogConfigAssociation = ResolverQueryLogConfigAssociation' {}
- newResolverQueryLogConfigAssociation :: ResolverQueryLogConfigAssociation
- resolverQueryLogConfigAssociation_creationTime :: Lens' ResolverQueryLogConfigAssociation (Maybe Text)
- resolverQueryLogConfigAssociation_status :: Lens' ResolverQueryLogConfigAssociation (Maybe ResolverQueryLogConfigAssociationStatus)
- resolverQueryLogConfigAssociation_resolverQueryLogConfigId :: Lens' ResolverQueryLogConfigAssociation (Maybe Text)
- resolverQueryLogConfigAssociation_resourceId :: Lens' ResolverQueryLogConfigAssociation (Maybe Text)
- resolverQueryLogConfigAssociation_error :: Lens' ResolverQueryLogConfigAssociation (Maybe ResolverQueryLogConfigAssociationError)
- resolverQueryLogConfigAssociation_id :: Lens' ResolverQueryLogConfigAssociation (Maybe Text)
- resolverQueryLogConfigAssociation_errorMessage :: Lens' ResolverQueryLogConfigAssociation (Maybe Text)
- data ResolverRule = ResolverRule' {
- creationTime :: Maybe Text
- status :: Maybe ResolverRuleStatus
- arn :: Maybe Text
- resolverEndpointId :: Maybe Text
- creatorRequestId :: Maybe Text
- targetIps :: Maybe (NonEmpty TargetAddress)
- modificationTime :: Maybe Text
- shareStatus :: Maybe ShareStatus
- ownerId :: Maybe Text
- domainName :: Maybe Text
- statusMessage :: Maybe Text
- name :: Maybe Text
- id :: Maybe Text
- ruleType :: Maybe RuleTypeOption
- newResolverRule :: ResolverRule
- resolverRule_creationTime :: Lens' ResolverRule (Maybe Text)
- resolverRule_status :: Lens' ResolverRule (Maybe ResolverRuleStatus)
- resolverRule_arn :: Lens' ResolverRule (Maybe Text)
- resolverRule_resolverEndpointId :: Lens' ResolverRule (Maybe Text)
- resolverRule_creatorRequestId :: Lens' ResolverRule (Maybe Text)
- resolverRule_targetIps :: Lens' ResolverRule (Maybe (NonEmpty TargetAddress))
- resolverRule_modificationTime :: Lens' ResolverRule (Maybe Text)
- resolverRule_shareStatus :: Lens' ResolverRule (Maybe ShareStatus)
- resolverRule_ownerId :: Lens' ResolverRule (Maybe Text)
- resolverRule_domainName :: Lens' ResolverRule (Maybe Text)
- resolverRule_statusMessage :: Lens' ResolverRule (Maybe Text)
- resolverRule_name :: Lens' ResolverRule (Maybe Text)
- resolverRule_id :: Lens' ResolverRule (Maybe Text)
- resolverRule_ruleType :: Lens' ResolverRule (Maybe RuleTypeOption)
- data ResolverRuleAssociation = ResolverRuleAssociation' {}
- newResolverRuleAssociation :: ResolverRuleAssociation
- resolverRuleAssociation_status :: Lens' ResolverRuleAssociation (Maybe ResolverRuleAssociationStatus)
- resolverRuleAssociation_resolverRuleId :: Lens' ResolverRuleAssociation (Maybe Text)
- resolverRuleAssociation_vPCId :: Lens' ResolverRuleAssociation (Maybe Text)
- resolverRuleAssociation_statusMessage :: Lens' ResolverRuleAssociation (Maybe Text)
- resolverRuleAssociation_name :: Lens' ResolverRuleAssociation (Maybe Text)
- resolverRuleAssociation_id :: Lens' ResolverRuleAssociation (Maybe Text)
- data ResolverRuleConfig = ResolverRuleConfig' {}
- newResolverRuleConfig :: ResolverRuleConfig
- resolverRuleConfig_resolverEndpointId :: Lens' ResolverRuleConfig (Maybe Text)
- resolverRuleConfig_targetIps :: Lens' ResolverRuleConfig (Maybe (NonEmpty TargetAddress))
- resolverRuleConfig_name :: Lens' ResolverRuleConfig (Maybe Text)
- data Tag = Tag' {}
- newTag :: Text -> Text -> Tag
- tag_key :: Lens' Tag Text
- tag_value :: Lens' Tag Text
- data TargetAddress = TargetAddress' {}
- newTargetAddress :: Text -> TargetAddress
- targetAddress_port :: Lens' TargetAddress (Maybe Natural)
- targetAddress_ip :: Lens' TargetAddress Text
Service Configuration
defaultService :: Service Source #
API version 2018-04-01 of the Amazon Route 53 Resolver SDK configuration.
Errors
_InvalidTagException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified tag is invalid.
_ValidationException :: AsError a => Getting (First ServiceError) a ServiceError Source #
_AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The current account doesn't have the IAM permissions required to perform the specified Resolver operation.
_ResourceUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified resource isn't available.
_InvalidParameterException :: AsError a => Getting (First ServiceError) a ServiceError Source #
One or more parameters in this request are not valid.
_InvalidRequestException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request is invalid.
_ConflictException :: AsError a => Getting (First ServiceError) a ServiceError Source #
_ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request was throttled. Try again in a few minutes.
_InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The value that you specified for NextToken in a List request isn't
valid.
_InternalServiceErrorException :: AsError a => Getting (First ServiceError) a ServiceError Source #
We encountered an unknown error. Try again in a few minutes.
_ResourceExistsException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The resource that you tried to create already exists.
_UnknownResourceException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified resource doesn't exist.
_InvalidPolicyDocument :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified Resolver rule policy is invalid.
_ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified resource doesn't exist.
_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request caused one or more limits to be exceeded.
_ResourceInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The resource that you tried to update or delete is currently in use.
Action
Constructors
| Action' | |
Fields
| |
Bundled Patterns
| pattern Action_ALERT :: Action | |
| pattern Action_ALLOW :: Action | |
| pattern Action_BLOCK :: Action |
Instances
BlockOverrideDnsType
newtype BlockOverrideDnsType Source #
Constructors
| BlockOverrideDnsType' | |
Fields | |
Bundled Patterns
| pattern BlockOverrideDnsType_CNAME :: BlockOverrideDnsType |
Instances
BlockResponse
newtype BlockResponse Source #
Constructors
| BlockResponse' | |
Fields | |
Bundled Patterns
| pattern BlockResponse_NODATA :: BlockResponse | |
| pattern BlockResponse_NXDOMAIN :: BlockResponse | |
| pattern BlockResponse_OVERRIDE :: BlockResponse |
Instances
FirewallDomainImportOperation
newtype FirewallDomainImportOperation Source #
Constructors
| FirewallDomainImportOperation' | |
Fields | |
Bundled Patterns
| pattern FirewallDomainImportOperation_REPLACE :: FirewallDomainImportOperation |
Instances
FirewallDomainListStatus
newtype FirewallDomainListStatus Source #
Constructors
| FirewallDomainListStatus' | |
Fields | |
Bundled Patterns
Instances
FirewallDomainUpdateOperation
newtype FirewallDomainUpdateOperation Source #
Constructors
| FirewallDomainUpdateOperation' | |
Fields | |
Bundled Patterns
Instances
FirewallFailOpenStatus
newtype FirewallFailOpenStatus Source #
Constructors
| FirewallFailOpenStatus' | |
Fields | |
Bundled Patterns
| pattern FirewallFailOpenStatus_DISABLED :: FirewallFailOpenStatus | |
| pattern FirewallFailOpenStatus_ENABLED :: FirewallFailOpenStatus |
Instances
FirewallRuleGroupAssociationStatus
newtype FirewallRuleGroupAssociationStatus Source #
Constructors
| FirewallRuleGroupAssociationStatus' | |
Bundled Patterns
Instances
FirewallRuleGroupStatus
newtype FirewallRuleGroupStatus Source #
Constructors
| FirewallRuleGroupStatus' | |
Fields | |
Bundled Patterns
Instances
IpAddressStatus
newtype IpAddressStatus Source #
Constructors
| IpAddressStatus' | |
Fields | |
Bundled Patterns
| pattern IpAddressStatus_ATTACHED :: IpAddressStatus | |
| pattern IpAddressStatus_ATTACHING :: IpAddressStatus | |
| pattern IpAddressStatus_CREATING :: IpAddressStatus | |
| pattern IpAddressStatus_DELETE_FAILED_FAS_EXPIRED :: IpAddressStatus | |
| pattern IpAddressStatus_DELETING :: IpAddressStatus | |
| pattern IpAddressStatus_DETACHING :: IpAddressStatus | |
| pattern IpAddressStatus_FAILED_CREATION :: IpAddressStatus | |
| pattern IpAddressStatus_FAILED_RESOURCE_GONE :: IpAddressStatus | |
| pattern IpAddressStatus_REMAP_ATTACHING :: IpAddressStatus | |
| pattern IpAddressStatus_REMAP_DETACHING :: IpAddressStatus |
Instances
MutationProtectionStatus
newtype MutationProtectionStatus Source #
Constructors
| MutationProtectionStatus' | |
Fields | |
Bundled Patterns
| pattern MutationProtectionStatus_DISABLED :: MutationProtectionStatus | |
| pattern MutationProtectionStatus_ENABLED :: MutationProtectionStatus |
Instances
ResolverDNSSECValidationStatus
newtype ResolverDNSSECValidationStatus Source #
Constructors
| ResolverDNSSECValidationStatus' | |
Fields | |
Bundled Patterns
Instances
ResolverEndpointDirection
newtype ResolverEndpointDirection Source #
Constructors
| ResolverEndpointDirection' | |
Fields | |
Bundled Patterns
| pattern ResolverEndpointDirection_INBOUND :: ResolverEndpointDirection | |
| pattern ResolverEndpointDirection_OUTBOUND :: ResolverEndpointDirection |
Instances
ResolverEndpointStatus
newtype ResolverEndpointStatus Source #
Constructors
| ResolverEndpointStatus' | |
Fields | |
Bundled Patterns
Instances
ResolverQueryLogConfigAssociationError
newtype ResolverQueryLogConfigAssociationError Source #
Constructors
| ResolverQueryLogConfigAssociationError' | |
Bundled Patterns
Instances
ResolverQueryLogConfigAssociationStatus
newtype ResolverQueryLogConfigAssociationStatus Source #
Constructors
| ResolverQueryLogConfigAssociationStatus' | |
Bundled Patterns
Instances
ResolverQueryLogConfigStatus
newtype ResolverQueryLogConfigStatus Source #
Constructors
| ResolverQueryLogConfigStatus' | |
Fields | |
Bundled Patterns
Instances
ResolverRuleAssociationStatus
newtype ResolverRuleAssociationStatus Source #
Constructors
| ResolverRuleAssociationStatus' | |
Fields | |
Bundled Patterns
Instances
ResolverRuleStatus
newtype ResolverRuleStatus Source #
Constructors
| ResolverRuleStatus' | |
Fields | |
Bundled Patterns
| pattern ResolverRuleStatus_COMPLETE :: ResolverRuleStatus | |
| pattern ResolverRuleStatus_DELETING :: ResolverRuleStatus | |
| pattern ResolverRuleStatus_FAILED :: ResolverRuleStatus | |
| pattern ResolverRuleStatus_UPDATING :: ResolverRuleStatus |
Instances
RuleTypeOption
newtype RuleTypeOption Source #
Constructors
| RuleTypeOption' | |
Fields | |
Bundled Patterns
| pattern RuleTypeOption_FORWARD :: RuleTypeOption | |
| pattern RuleTypeOption_RECURSIVE :: RuleTypeOption | |
| pattern RuleTypeOption_SYSTEM :: RuleTypeOption |
Instances
ShareStatus
newtype ShareStatus Source #
Constructors
| ShareStatus' | |
Fields | |
Bundled Patterns
| pattern ShareStatus_NOT_SHARED :: ShareStatus | |
| pattern ShareStatus_SHARED_BY_ME :: ShareStatus | |
| pattern ShareStatus_SHARED_WITH_ME :: ShareStatus |
Instances
SortOrder
Constructors
| SortOrder' | |
Fields | |
Bundled Patterns
| pattern SortOrder_ASCENDING :: SortOrder | |
| pattern SortOrder_DESCENDING :: SortOrder |
Instances
Validation
newtype Validation Source #
Constructors
| Validation' | |
Fields | |
Bundled Patterns
| pattern Validation_DISABLE :: Validation | |
| pattern Validation_ENABLE :: Validation |
Instances
Filter
For Resolver list operations (ListResolverEndpoints, ListResolverRules, ListResolverRuleAssociations, ListResolverQueryLogConfigs, ListResolverQueryLogConfigAssociations), and ListResolverDnssecConfigs), an optional specification to return a subset of objects.
To filter objects, such as Resolver endpoints or Resolver rules, you
specify Name and Values. For example, to list only inbound Resolver
endpoints, specify Direction for Name and specify INBOUND for
Values.
See: newFilter smart constructor.
Constructors
| Filter' | |
Fields
| |
Instances
| Eq Filter Source # | |
| Read Filter Source # | |
| Show Filter Source # | |
| Generic Filter Source # | |
| NFData Filter Source # | |
Defined in Amazonka.Route53Resolver.Types.Filter | |
| Hashable Filter Source # | |
Defined in Amazonka.Route53Resolver.Types.Filter | |
| ToJSON Filter Source # | |
Defined in Amazonka.Route53Resolver.Types.Filter | |
| type Rep Filter Source # | |
Defined in Amazonka.Route53Resolver.Types.Filter type Rep Filter = D1 ('MetaData "Filter" "Amazonka.Route53Resolver.Types.Filter" "libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver" 'False) (C1 ('MetaCons "Filter'" 'PrefixI 'True) (S1 ('MetaSel ('Just "values") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :*: S1 ('MetaSel ('Just "name") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
Create a value of Filter with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:values:Filter', filter_values - When you're using a List operation and you want the operation to
return a subset of objects, such as Resolver endpoints or Resolver
rules, the value of the parameter that you want to use to filter
objects. For example, to list only inbound Resolver endpoints, specify
Direction for Name and specify INBOUND for Values.
$sel:name:Filter', filter_name - The name of the parameter that you want to use to filter objects.
The valid values for Name depend on the action that you're including
the filter in,
ListResolverEndpoints,
ListResolverRules,
ListResolverRuleAssociations,
ListResolverQueryLogConfigs,
or
ListResolverQueryLogConfigAssociations.
In early versions of Resolver, values for Name were listed as
uppercase, with underscore (_) delimiters. For example,
CreatorRequestId was originally listed as CREATOR_REQUEST_ID.
Uppercase values for Name are still supported.
ListResolverEndpoints
Valid values for Name include the following:
CreatorRequestId: The value that you specified when you created the Resolver endpoint.Direction: Whether you want to return inbound or outbound Resolver endpoints. If you specifyDIRECTIONforName, specifyINBOUNDorOUTBOUNDforValues.HostVPCId: The ID of the VPC that inbound DNS queries pass through on the way from your network to your VPCs in a region, or the VPC that outbound queries pass through on the way from your VPCs to your network. In a CreateResolverEndpoint request,SubnetIdindirectly identifies the VPC. In a GetResolverEndpoint request, the VPC ID for a Resolver endpoint is returned in theHostVPCIdelement.IpAddressCount: The number of IP addresses that you have associated with the Resolver endpoint.Name: The name of the Resolver endpoint.SecurityGroupIds: The IDs of the VPC security groups that you specified when you created the Resolver endpoint.Status: The status of the Resolver endpoint. If you specifyStatusforName, specify one of the following status codes forValues:CREATING,OPERATIONAL,UPDATING,AUTO_RECOVERING,ACTION_NEEDED, orDELETING. For more information, seeStatusin ResolverEndpoint.
ListResolverRules
Valid values for Name include the following:
CreatorRequestId: The value that you specified when you created the Resolver rule.DomainName: The domain name for which Resolver is forwarding DNS queries to your network. In the value that you specify forValues, include a trailing dot (.) after the domain name. For example, if the domain name is example.com, specify the following value. Note the "." aftercom:example.com.
Name: The name of the Resolver rule.ResolverEndpointId: The ID of the Resolver endpoint that the Resolver rule is associated with.You can filter on the Resolver endpoint only for rules that have a value of
FORWARDforRuleType.Status: The status of the Resolver rule. If you specifyStatusforName, specify one of the following status codes forValues:COMPLETE,DELETING,UPDATING, orFAILED.Type: The type of the Resolver rule. If you specifyTYPEforName, specifyFORWARDorSYSTEMforValues.
ListResolverRuleAssociations
Valid values for Name include the following:
Name: The name of the Resolver rule association.ResolverRuleId: The ID of the Resolver rule that is associated with one or more VPCs.Status: The status of the Resolver rule association. If you specifyStatusforName, specify one of the following status codes forValues:CREATING,COMPLETE,DELETING, orFAILED.VPCId: The ID of the VPC that the Resolver rule is associated with.
ListResolverQueryLogConfigs
Valid values for Name include the following:
Arn: The ARN for the query logging configuration.AssociationCount: The number of VPCs that are associated with the query logging configuration.CreationTime: The date and time that the query logging configuration was created, in Unix time format and Coordinated Universal Time (UTC).CreatorRequestId: A unique string that identifies the request that created the query logging configuration.Destination: The Amazon Web Services service that you want to forward query logs to. Valid values include the following:S3
CloudWatchLogs
KinesisFirehose
DestinationArn: The ARN of the location that Resolver is sending query logs to. This value can be the ARN for an S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream.Id: The ID of the query logging configurationName: The name of the query logging configurationOwnerId: The Amazon Web Services account ID for the account that created the query logging configuration.ShareStatus: An indication of whether the query logging configuration is shared with other Amazon Web Services accounts, or was shared with the current account by another Amazon Web Services account. Valid values include:NOT_SHARED,SHARED_WITH_ME, orSHARED_BY_ME.Status: The status of the query logging configuration. If you specifyStatusforName, specify the applicable status code forValues:CREATING,CREATED,DELETING, orFAILED. For more information, see Status.
ListResolverQueryLogConfigAssociations
Valid values for Name include the following:
CreationTime: The date and time that the VPC was associated with the query logging configuration, in Unix time format and Coordinated Universal Time (UTC).Error: If the value ofStatusisFAILED, specify the cause:DESTINATION_NOT_FOUNDorACCESS_DENIED.Id: The ID of the query logging association.ResolverQueryLogConfigId: The ID of the query logging configuration that a VPC is associated with.ResourceId: The ID of the Amazon VPC that is associated with the query logging configuration.Status: The status of the query logging association. If you specifyStatusforName, specify the applicable status code forValues:CREATING,CREATED,DELETING, orFAILED. For more information, see Status.
filter_values :: Lens' Filter (Maybe [Text]) Source #
When you're using a List operation and you want the operation to
return a subset of objects, such as Resolver endpoints or Resolver
rules, the value of the parameter that you want to use to filter
objects. For example, to list only inbound Resolver endpoints, specify
Direction for Name and specify INBOUND for Values.
filter_name :: Lens' Filter (Maybe Text) Source #
The name of the parameter that you want to use to filter objects.
The valid values for Name depend on the action that you're including
the filter in,
ListResolverEndpoints,
ListResolverRules,
ListResolverRuleAssociations,
ListResolverQueryLogConfigs,
or
ListResolverQueryLogConfigAssociations.
In early versions of Resolver, values for Name were listed as
uppercase, with underscore (_) delimiters. For example,
CreatorRequestId was originally listed as CREATOR_REQUEST_ID.
Uppercase values for Name are still supported.
ListResolverEndpoints
Valid values for Name include the following:
CreatorRequestId: The value that you specified when you created the Resolver endpoint.Direction: Whether you want to return inbound or outbound Resolver endpoints. If you specifyDIRECTIONforName, specifyINBOUNDorOUTBOUNDforValues.HostVPCId: The ID of the VPC that inbound DNS queries pass through on the way from your network to your VPCs in a region, or the VPC that outbound queries pass through on the way from your VPCs to your network. In a CreateResolverEndpoint request,SubnetIdindirectly identifies the VPC. In a GetResolverEndpoint request, the VPC ID for a Resolver endpoint is returned in theHostVPCIdelement.IpAddressCount: The number of IP addresses that you have associated with the Resolver endpoint.Name: The name of the Resolver endpoint.SecurityGroupIds: The IDs of the VPC security groups that you specified when you created the Resolver endpoint.Status: The status of the Resolver endpoint. If you specifyStatusforName, specify one of the following status codes forValues:CREATING,OPERATIONAL,UPDATING,AUTO_RECOVERING,ACTION_NEEDED, orDELETING. For more information, seeStatusin ResolverEndpoint.
ListResolverRules
Valid values for Name include the following:
CreatorRequestId: The value that you specified when you created the Resolver rule.DomainName: The domain name for which Resolver is forwarding DNS queries to your network. In the value that you specify forValues, include a trailing dot (.) after the domain name. For example, if the domain name is example.com, specify the following value. Note the "." aftercom:example.com.
Name: The name of the Resolver rule.ResolverEndpointId: The ID of the Resolver endpoint that the Resolver rule is associated with.You can filter on the Resolver endpoint only for rules that have a value of
FORWARDforRuleType.Status: The status of the Resolver rule. If you specifyStatusforName, specify one of the following status codes forValues:COMPLETE,DELETING,UPDATING, orFAILED.Type: The type of the Resolver rule. If you specifyTYPEforName, specifyFORWARDorSYSTEMforValues.
ListResolverRuleAssociations
Valid values for Name include the following:
Name: The name of the Resolver rule association.ResolverRuleId: The ID of the Resolver rule that is associated with one or more VPCs.Status: The status of the Resolver rule association. If you specifyStatusforName, specify one of the following status codes forValues:CREATING,COMPLETE,DELETING, orFAILED.VPCId: The ID of the VPC that the Resolver rule is associated with.
ListResolverQueryLogConfigs
Valid values for Name include the following:
Arn: The ARN for the query logging configuration.AssociationCount: The number of VPCs that are associated with the query logging configuration.CreationTime: The date and time that the query logging configuration was created, in Unix time format and Coordinated Universal Time (UTC).CreatorRequestId: A unique string that identifies the request that created the query logging configuration.Destination: The Amazon Web Services service that you want to forward query logs to. Valid values include the following:S3
CloudWatchLogs
KinesisFirehose
DestinationArn: The ARN of the location that Resolver is sending query logs to. This value can be the ARN for an S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream.Id: The ID of the query logging configurationName: The name of the query logging configurationOwnerId: The Amazon Web Services account ID for the account that created the query logging configuration.ShareStatus: An indication of whether the query logging configuration is shared with other Amazon Web Services accounts, or was shared with the current account by another Amazon Web Services account. Valid values include:NOT_SHARED,SHARED_WITH_ME, orSHARED_BY_ME.Status: The status of the query logging configuration. If you specifyStatusforName, specify the applicable status code forValues:CREATING,CREATED,DELETING, orFAILED. For more information, see Status.
ListResolverQueryLogConfigAssociations
Valid values for Name include the following:
CreationTime: The date and time that the VPC was associated with the query logging configuration, in Unix time format and Coordinated Universal Time (UTC).Error: If the value ofStatusisFAILED, specify the cause:DESTINATION_NOT_FOUNDorACCESS_DENIED.Id: The ID of the query logging association.ResolverQueryLogConfigId: The ID of the query logging configuration that a VPC is associated with.ResourceId: The ID of the Amazon VPC that is associated with the query logging configuration.Status: The status of the query logging association. If you specifyStatusforName, specify the applicable status code forValues:CREATING,CREATED,DELETING, orFAILED. For more information, see Status.
FirewallConfig
data FirewallConfig Source #
Configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC).
See: newFirewallConfig smart constructor.
Constructors
| FirewallConfig' | |
Fields
| |
Instances
newFirewallConfig :: FirewallConfig Source #
Create a value of FirewallConfig with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceId:FirewallConfig', firewallConfig_resourceId - The ID of the VPC that this firewall configuration applies to.
$sel:ownerId:FirewallConfig', firewallConfig_ownerId - The Amazon Web Services account ID of the owner of the VPC that this
firewall configuration applies to.
$sel:id:FirewallConfig', firewallConfig_id - The ID of the firewall configuration.
$sel:firewallFailOpen:FirewallConfig', firewallConfig_firewallFailOpen - Determines how DNS Firewall operates during failures, for example when
all traffic that is sent to DNS Firewall fails to receive a reply.
- By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
- If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.
This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.
firewallConfig_resourceId :: Lens' FirewallConfig (Maybe Text) Source #
The ID of the VPC that this firewall configuration applies to.
firewallConfig_ownerId :: Lens' FirewallConfig (Maybe Text) Source #
The Amazon Web Services account ID of the owner of the VPC that this firewall configuration applies to.
firewallConfig_id :: Lens' FirewallConfig (Maybe Text) Source #
The ID of the firewall configuration.
firewallConfig_firewallFailOpen :: Lens' FirewallConfig (Maybe FirewallFailOpenStatus) Source #
Determines how DNS Firewall operates during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.
- By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
- If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.
This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.
FirewallDomainList
data FirewallDomainList Source #
High-level information about a list of firewall domains for use in a FirewallRule. This is returned by GetFirewallDomainList.
To retrieve the domains that are defined for this domain list, call ListFirewallDomains.
See: newFirewallDomainList smart constructor.
Constructors
| FirewallDomainList' | |
Fields
| |
Instances
newFirewallDomainList :: FirewallDomainList Source #
Create a value of FirewallDomainList with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:FirewallDomainList', firewallDomainList_creationTime - The date and time that the domain list was created, in Unix time format
and Coordinated Universal Time (UTC).
$sel:status:FirewallDomainList', firewallDomainList_status - The status of the domain list.
$sel:arn:FirewallDomainList', firewallDomainList_arn - The Amazon Resource Name (ARN) of the firewall domain list.
$sel:creatorRequestId:FirewallDomainList', firewallDomainList_creatorRequestId - A unique string defined by you to identify the request. This allows you
to retry failed requests without the risk of running the operation
twice. This can be any unique string, for example, a timestamp.
$sel:managedOwnerName:FirewallDomainList', firewallDomainList_managedOwnerName - The owner of the list, used only for lists that are not managed by you.
For example, the managed domain list
AWSManagedDomainsMalwareDomainList has the managed owner name
Route 53 Resolver DNS Firewall.
$sel:domainCount:FirewallDomainList', firewallDomainList_domainCount - The number of domain names that are specified in the domain list.
$sel:modificationTime:FirewallDomainList', firewallDomainList_modificationTime - The date and time that the domain list was last modified, in Unix time
format and Coordinated Universal Time (UTC).
$sel:statusMessage:FirewallDomainList', firewallDomainList_statusMessage - Additional information about the status of the list, if available.
$sel:name:FirewallDomainList', firewallDomainList_name - The name of the domain list.
$sel:id:FirewallDomainList', firewallDomainList_id - The ID of the domain list.
firewallDomainList_creationTime :: Lens' FirewallDomainList (Maybe Text) Source #
The date and time that the domain list was created, in Unix time format and Coordinated Universal Time (UTC).
firewallDomainList_status :: Lens' FirewallDomainList (Maybe FirewallDomainListStatus) Source #
The status of the domain list.
firewallDomainList_arn :: Lens' FirewallDomainList (Maybe Text) Source #
The Amazon Resource Name (ARN) of the firewall domain list.
firewallDomainList_creatorRequestId :: Lens' FirewallDomainList (Maybe Text) Source #
A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
firewallDomainList_managedOwnerName :: Lens' FirewallDomainList (Maybe Text) Source #
The owner of the list, used only for lists that are not managed by you.
For example, the managed domain list
AWSManagedDomainsMalwareDomainList has the managed owner name
Route 53 Resolver DNS Firewall.
firewallDomainList_domainCount :: Lens' FirewallDomainList (Maybe Int) Source #
The number of domain names that are specified in the domain list.
firewallDomainList_modificationTime :: Lens' FirewallDomainList (Maybe Text) Source #
The date and time that the domain list was last modified, in Unix time format and Coordinated Universal Time (UTC).
firewallDomainList_statusMessage :: Lens' FirewallDomainList (Maybe Text) Source #
Additional information about the status of the list, if available.
firewallDomainList_name :: Lens' FirewallDomainList (Maybe Text) Source #
The name of the domain list.
firewallDomainList_id :: Lens' FirewallDomainList (Maybe Text) Source #
The ID of the domain list.
FirewallDomainListMetadata
data FirewallDomainListMetadata Source #
Minimal high-level information for a firewall domain list. The action ListFirewallDomainLists returns an array of these objects.
To retrieve full information for a firewall domain list, call GetFirewallDomainList and ListFirewallDomains.
See: newFirewallDomainListMetadata smart constructor.
Constructors
| FirewallDomainListMetadata' | |
Fields
| |
Instances
newFirewallDomainListMetadata :: FirewallDomainListMetadata Source #
Create a value of FirewallDomainListMetadata with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:FirewallDomainListMetadata', firewallDomainListMetadata_arn - The Amazon Resource Name (ARN) of the firewall domain list metadata.
$sel:creatorRequestId:FirewallDomainListMetadata', firewallDomainListMetadata_creatorRequestId - A unique string defined by you to identify the request. This allows you
to retry failed requests without the risk of running the operation
twice. This can be any unique string, for example, a timestamp.
$sel:managedOwnerName:FirewallDomainListMetadata', firewallDomainListMetadata_managedOwnerName - The owner of the list, used only for lists that are not managed by you.
For example, the managed domain list
AWSManagedDomainsMalwareDomainList has the managed owner name
Route 53 Resolver DNS Firewall.
$sel:name:FirewallDomainListMetadata', firewallDomainListMetadata_name - The name of the domain list.
$sel:id:FirewallDomainListMetadata', firewallDomainListMetadata_id - The ID of the domain list.
firewallDomainListMetadata_arn :: Lens' FirewallDomainListMetadata (Maybe Text) Source #
The Amazon Resource Name (ARN) of the firewall domain list metadata.
firewallDomainListMetadata_creatorRequestId :: Lens' FirewallDomainListMetadata (Maybe Text) Source #
A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
firewallDomainListMetadata_managedOwnerName :: Lens' FirewallDomainListMetadata (Maybe Text) Source #
The owner of the list, used only for lists that are not managed by you.
For example, the managed domain list
AWSManagedDomainsMalwareDomainList has the managed owner name
Route 53 Resolver DNS Firewall.
firewallDomainListMetadata_name :: Lens' FirewallDomainListMetadata (Maybe Text) Source #
The name of the domain list.
firewallDomainListMetadata_id :: Lens' FirewallDomainListMetadata (Maybe Text) Source #
The ID of the domain list.
FirewallRule
data FirewallRule Source #
A single firewall rule in a rule group.
See: newFirewallRule smart constructor.
Constructors
| FirewallRule' | |
Fields
| |
Instances
newFirewallRule :: FirewallRule Source #
Create a value of FirewallRule with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:FirewallRule', firewallRule_creationTime - The date and time that the rule was created, in Unix time format and
Coordinated Universal Time (UTC).
$sel:blockOverrideDnsType:FirewallRule', firewallRule_blockOverrideDnsType - The DNS record's type. This determines the format of the record value
that you provided in BlockOverrideDomain. Used for the rule action
BLOCK with a BlockResponse setting of OVERRIDE.
$sel:firewallRuleGroupId:FirewallRule', firewallRule_firewallRuleGroupId - The unique identifier of the firewall rule group of the rule.
$sel:priority:FirewallRule', firewallRule_priority - The priority of the rule in the rule group. This value must be unique
within the rule group. DNS Firewall processes the rules in a rule group
by order of priority, starting from the lowest setting.
$sel:blockResponse:FirewallRule', firewallRule_blockResponse - The way that you want DNS Firewall to block the request. Used for the
rule action setting BLOCK.
NODATA- Respond indicating that the query was successful, but no response is available for it.NXDOMAIN- Respond indicating that the domain name that's in the query doesn't exist.OVERRIDE- Provide a custom override in the response. This option requires custom handling details in the rule'sBlockOverride*settings.
$sel:creatorRequestId:FirewallRule', firewallRule_creatorRequestId - A unique string defined by you to identify the request. This allows you
to retry failed requests without the risk of executing the operation
twice. This can be any unique string, for example, a timestamp.
$sel:modificationTime:FirewallRule', firewallRule_modificationTime - The date and time that the rule was last modified, in Unix time format
and Coordinated Universal Time (UTC).
$sel:action:FirewallRule', firewallRule_action - The action that DNS Firewall should take on a DNS query when it matches
one of the domains in the rule's domain list:
ALLOW- Permit the request to go through.ALERT- Permit the request to go through but send an alert to the logs.BLOCK- Disallow the request. If this is specified, additional handling details are provided in the rule'sBlockResponsesetting.
$sel:blockOverrideTtl:FirewallRule', firewallRule_blockOverrideTtl - The recommended amount of time, in seconds, for the DNS resolver or web
browser to cache the provided override record. Used for the rule action
BLOCK with a BlockResponse setting of OVERRIDE.
$sel:name:FirewallRule', firewallRule_name - The name of the rule.
$sel:blockOverrideDomain:FirewallRule', firewallRule_blockOverrideDomain - The custom DNS record to send back in response to the query. Used for
the rule action BLOCK with a BlockResponse setting of OVERRIDE.
$sel:firewallDomainListId:FirewallRule', firewallRule_firewallDomainListId - The ID of the domain list that's used in the rule.
firewallRule_creationTime :: Lens' FirewallRule (Maybe Text) Source #
The date and time that the rule was created, in Unix time format and Coordinated Universal Time (UTC).
firewallRule_blockOverrideDnsType :: Lens' FirewallRule (Maybe BlockOverrideDnsType) Source #
The DNS record's type. This determines the format of the record value
that you provided in BlockOverrideDomain. Used for the rule action
BLOCK with a BlockResponse setting of OVERRIDE.
firewallRule_firewallRuleGroupId :: Lens' FirewallRule (Maybe Text) Source #
The unique identifier of the firewall rule group of the rule.
firewallRule_priority :: Lens' FirewallRule (Maybe Int) Source #
The priority of the rule in the rule group. This value must be unique within the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.
firewallRule_blockResponse :: Lens' FirewallRule (Maybe BlockResponse) Source #
The way that you want DNS Firewall to block the request. Used for the
rule action setting BLOCK.
NODATA- Respond indicating that the query was successful, but no response is available for it.NXDOMAIN- Respond indicating that the domain name that's in the query doesn't exist.OVERRIDE- Provide a custom override in the response. This option requires custom handling details in the rule'sBlockOverride*settings.
firewallRule_creatorRequestId :: Lens' FirewallRule (Maybe Text) Source #
A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of executing the operation twice. This can be any unique string, for example, a timestamp.
firewallRule_modificationTime :: Lens' FirewallRule (Maybe Text) Source #
The date and time that the rule was last modified, in Unix time format and Coordinated Universal Time (UTC).
firewallRule_action :: Lens' FirewallRule (Maybe Action) Source #
The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:
ALLOW- Permit the request to go through.ALERT- Permit the request to go through but send an alert to the logs.BLOCK- Disallow the request. If this is specified, additional handling details are provided in the rule'sBlockResponsesetting.
firewallRule_blockOverrideTtl :: Lens' FirewallRule (Maybe Int) Source #
The recommended amount of time, in seconds, for the DNS resolver or web
browser to cache the provided override record. Used for the rule action
BLOCK with a BlockResponse setting of OVERRIDE.
firewallRule_name :: Lens' FirewallRule (Maybe Text) Source #
The name of the rule.
firewallRule_blockOverrideDomain :: Lens' FirewallRule (Maybe Text) Source #
The custom DNS record to send back in response to the query. Used for
the rule action BLOCK with a BlockResponse setting of OVERRIDE.
firewallRule_firewallDomainListId :: Lens' FirewallRule (Maybe Text) Source #
The ID of the domain list that's used in the rule.
FirewallRuleGroup
data FirewallRuleGroup Source #
High-level information for a firewall rule group. A firewall rule group is a collection of rules that DNS Firewall uses to filter DNS network traffic for a VPC. To retrieve the rules for the rule group, call ListFirewallRules.
See: newFirewallRuleGroup smart constructor.
Constructors
| FirewallRuleGroup' | |
Fields
| |
Instances
newFirewallRuleGroup :: FirewallRuleGroup Source #
Create a value of FirewallRuleGroup with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:FirewallRuleGroup', firewallRuleGroup_creationTime - The date and time that the rule group was created, in Unix time format
and Coordinated Universal Time (UTC).
$sel:status:FirewallRuleGroup', firewallRuleGroup_status - The status of the domain list.
$sel:arn:FirewallRuleGroup', firewallRuleGroup_arn - The ARN (Amazon Resource Name) of the rule group.
$sel:creatorRequestId:FirewallRuleGroup', firewallRuleGroup_creatorRequestId - A unique string defined by you to identify the request. This allows you
to retry failed requests without the risk of running the operation
twice. This can be any unique string, for example, a timestamp.
$sel:modificationTime:FirewallRuleGroup', firewallRuleGroup_modificationTime - The date and time that the rule group was last modified, in Unix time
format and Coordinated Universal Time (UTC).
$sel:shareStatus:FirewallRuleGroup', firewallRuleGroup_shareStatus - Whether the rule group is shared with other Amazon Web Services
accounts, or was shared with the current account by another Amazon Web
Services account. Sharing is configured through Resource Access Manager
(RAM).
$sel:ownerId:FirewallRuleGroup', firewallRuleGroup_ownerId - The Amazon Web Services account ID for the account that created the rule
group. When a rule group is shared with your account, this is the
account that has shared the rule group with you.
$sel:statusMessage:FirewallRuleGroup', firewallRuleGroup_statusMessage - Additional information about the status of the rule group, if available.
$sel:name:FirewallRuleGroup', firewallRuleGroup_name - The name of the rule group.
$sel:id:FirewallRuleGroup', firewallRuleGroup_id - The ID of the rule group.
$sel:ruleCount:FirewallRuleGroup', firewallRuleGroup_ruleCount - The number of rules in the rule group.
firewallRuleGroup_creationTime :: Lens' FirewallRuleGroup (Maybe Text) Source #
The date and time that the rule group was created, in Unix time format and Coordinated Universal Time (UTC).
firewallRuleGroup_status :: Lens' FirewallRuleGroup (Maybe FirewallRuleGroupStatus) Source #
The status of the domain list.
firewallRuleGroup_arn :: Lens' FirewallRuleGroup (Maybe Text) Source #
The ARN (Amazon Resource Name) of the rule group.
firewallRuleGroup_creatorRequestId :: Lens' FirewallRuleGroup (Maybe Text) Source #
A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
firewallRuleGroup_modificationTime :: Lens' FirewallRuleGroup (Maybe Text) Source #
The date and time that the rule group was last modified, in Unix time format and Coordinated Universal Time (UTC).
firewallRuleGroup_shareStatus :: Lens' FirewallRuleGroup (Maybe ShareStatus) Source #
Whether the rule group is shared with other Amazon Web Services accounts, or was shared with the current account by another Amazon Web Services account. Sharing is configured through Resource Access Manager (RAM).
firewallRuleGroup_ownerId :: Lens' FirewallRuleGroup (Maybe Text) Source #
The Amazon Web Services account ID for the account that created the rule group. When a rule group is shared with your account, this is the account that has shared the rule group with you.
firewallRuleGroup_statusMessage :: Lens' FirewallRuleGroup (Maybe Text) Source #
Additional information about the status of the rule group, if available.
firewallRuleGroup_name :: Lens' FirewallRuleGroup (Maybe Text) Source #
The name of the rule group.
firewallRuleGroup_id :: Lens' FirewallRuleGroup (Maybe Text) Source #
The ID of the rule group.
firewallRuleGroup_ruleCount :: Lens' FirewallRuleGroup (Maybe Int) Source #
The number of rules in the rule group.
FirewallRuleGroupAssociation
data FirewallRuleGroupAssociation Source #
An association between a firewall rule group and a VPC, which enables DNS filtering for the VPC.
See: newFirewallRuleGroupAssociation smart constructor.
Constructors
| FirewallRuleGroupAssociation' | |
Fields
| |
Instances
newFirewallRuleGroupAssociation :: FirewallRuleGroupAssociation Source #
Create a value of FirewallRuleGroupAssociation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_creationTime - The date and time that the association was created, in Unix time format
and Coordinated Universal Time (UTC).
$sel:status:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_status - The current status of the association.
$sel:mutationProtection:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_mutationProtection - If enabled, this setting disallows modification or removal of the
association, to help prevent against accidentally altering DNS firewall
protections.
$sel:firewallRuleGroupId:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_firewallRuleGroupId - The unique identifier of the firewall rule group.
$sel:priority:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_priority - The setting that determines the processing order of the rule group among
the rule groups that are associated with a single VPC. DNS Firewall
filters VPC traffic starting from rule group with the lowest numeric
priority setting.
$sel:arn:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_arn - The Amazon Resource Name (ARN) of the firewall rule group association.
$sel:vpcId:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_vpcId - The unique identifier of the VPC that is associated with the rule group.
$sel:creatorRequestId:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_creatorRequestId - A unique string defined by you to identify the request. This allows you
to retry failed requests without the risk of running the operation
twice. This can be any unique string, for example, a timestamp.
$sel:managedOwnerName:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_managedOwnerName - The owner of the association, used only for associations that are not
managed by you. If you use Firewall Manager to manage your DNS
Firewalls, then this reports Firewall Manager as the managed owner.
$sel:modificationTime:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_modificationTime - The date and time that the association was last modified, in Unix time
format and Coordinated Universal Time (UTC).
$sel:statusMessage:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_statusMessage - Additional information about the status of the response, if available.
$sel:name:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_name - The name of the association.
$sel:id:FirewallRuleGroupAssociation', firewallRuleGroupAssociation_id - The identifier for the association.
firewallRuleGroupAssociation_creationTime :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The date and time that the association was created, in Unix time format and Coordinated Universal Time (UTC).
firewallRuleGroupAssociation_status :: Lens' FirewallRuleGroupAssociation (Maybe FirewallRuleGroupAssociationStatus) Source #
The current status of the association.
firewallRuleGroupAssociation_mutationProtection :: Lens' FirewallRuleGroupAssociation (Maybe MutationProtectionStatus) Source #
If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections.
firewallRuleGroupAssociation_firewallRuleGroupId :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The unique identifier of the firewall rule group.
firewallRuleGroupAssociation_priority :: Lens' FirewallRuleGroupAssociation (Maybe Int) Source #
The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC. DNS Firewall filters VPC traffic starting from rule group with the lowest numeric priority setting.
firewallRuleGroupAssociation_arn :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The Amazon Resource Name (ARN) of the firewall rule group association.
firewallRuleGroupAssociation_vpcId :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The unique identifier of the VPC that is associated with the rule group.
firewallRuleGroupAssociation_creatorRequestId :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
firewallRuleGroupAssociation_managedOwnerName :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The owner of the association, used only for associations that are not managed by you. If you use Firewall Manager to manage your DNS Firewalls, then this reports Firewall Manager as the managed owner.
firewallRuleGroupAssociation_modificationTime :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The date and time that the association was last modified, in Unix time format and Coordinated Universal Time (UTC).
firewallRuleGroupAssociation_statusMessage :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
Additional information about the status of the response, if available.
firewallRuleGroupAssociation_name :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The name of the association.
firewallRuleGroupAssociation_id :: Lens' FirewallRuleGroupAssociation (Maybe Text) Source #
The identifier for the association.
FirewallRuleGroupMetadata
data FirewallRuleGroupMetadata Source #
Minimal high-level information for a firewall rule group. The action ListFirewallRuleGroups returns an array of these objects.
To retrieve full information for a firewall rule group, call GetFirewallRuleGroup and ListFirewallRules.
See: newFirewallRuleGroupMetadata smart constructor.
Constructors
| FirewallRuleGroupMetadata' | |
Fields
| |
Instances
newFirewallRuleGroupMetadata :: FirewallRuleGroupMetadata Source #
Create a value of FirewallRuleGroupMetadata with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:FirewallRuleGroupMetadata', firewallRuleGroupMetadata_arn - The ARN (Amazon Resource Name) of the rule group.
$sel:creatorRequestId:FirewallRuleGroupMetadata', firewallRuleGroupMetadata_creatorRequestId - A unique string defined by you to identify the request. This allows you
to retry failed requests without the risk of running the operation
twice. This can be any unique string, for example, a timestamp.
$sel:shareStatus:FirewallRuleGroupMetadata', firewallRuleGroupMetadata_shareStatus - Whether the rule group is shared with other Amazon Web Services
accounts, or was shared with the current account by another Amazon Web
Services account. Sharing is configured through Resource Access Manager
(RAM).
$sel:ownerId:FirewallRuleGroupMetadata', firewallRuleGroupMetadata_ownerId - The Amazon Web Services account ID for the account that created the rule
group. When a rule group is shared with your account, this is the
account that has shared the rule group with you.
$sel:name:FirewallRuleGroupMetadata', firewallRuleGroupMetadata_name - The name of the rule group.
$sel:id:FirewallRuleGroupMetadata', firewallRuleGroupMetadata_id - The ID of the rule group.
firewallRuleGroupMetadata_arn :: Lens' FirewallRuleGroupMetadata (Maybe Text) Source #
The ARN (Amazon Resource Name) of the rule group.
firewallRuleGroupMetadata_creatorRequestId :: Lens' FirewallRuleGroupMetadata (Maybe Text) Source #
A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
firewallRuleGroupMetadata_shareStatus :: Lens' FirewallRuleGroupMetadata (Maybe ShareStatus) Source #
Whether the rule group is shared with other Amazon Web Services accounts, or was shared with the current account by another Amazon Web Services account. Sharing is configured through Resource Access Manager (RAM).
firewallRuleGroupMetadata_ownerId :: Lens' FirewallRuleGroupMetadata (Maybe Text) Source #
The Amazon Web Services account ID for the account that created the rule group. When a rule group is shared with your account, this is the account that has shared the rule group with you.
firewallRuleGroupMetadata_name :: Lens' FirewallRuleGroupMetadata (Maybe Text) Source #
The name of the rule group.
firewallRuleGroupMetadata_id :: Lens' FirewallRuleGroupMetadata (Maybe Text) Source #
The ID of the rule group.
IpAddressRequest
data IpAddressRequest Source #
In a
CreateResolverEndpoint
request, the IP address that DNS queries originate from (for outbound
endpoints) or that you forward DNS queries to (for inbound endpoints).
IpAddressRequest also includes the ID of the subnet that contains the
IP address.
See: newIpAddressRequest smart constructor.
Constructors
| IpAddressRequest' | |
Instances
Arguments
| :: Text | |
| -> IpAddressRequest |
Create a value of IpAddressRequest with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ip:IpAddressRequest', ipAddressRequest_ip - The IP address that you want to use for DNS queries.
$sel:subnetId:IpAddressRequest', ipAddressRequest_subnetId - The ID of the subnet that contains the IP address.
ipAddressRequest_ip :: Lens' IpAddressRequest (Maybe Text) Source #
The IP address that you want to use for DNS queries.
ipAddressRequest_subnetId :: Lens' IpAddressRequest Text Source #
The ID of the subnet that contains the IP address.
IpAddressResponse
data IpAddressResponse Source #
In the response to a GetResolverEndpoint request, information about the IP addresses that the Resolver endpoint uses for DNS queries.
See: newIpAddressResponse smart constructor.
Constructors
| IpAddressResponse' | |
Fields
| |
Instances
newIpAddressResponse :: IpAddressResponse Source #
Create a value of IpAddressResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:IpAddressResponse', ipAddressResponse_creationTime - The date and time that the IP address was created, in Unix time format
and Coordinated Universal Time (UTC).
$sel:status:IpAddressResponse', ipAddressResponse_status - A status code that gives the current status of the request.
$sel:modificationTime:IpAddressResponse', ipAddressResponse_modificationTime - The date and time that the IP address was last modified, in Unix time
format and Coordinated Universal Time (UTC).
$sel:subnetId:IpAddressResponse', ipAddressResponse_subnetId - The ID of one subnet.
$sel:ip:IpAddressResponse', ipAddressResponse_ip - One IP address that the Resolver endpoint uses for DNS queries.
$sel:ipId:IpAddressResponse', ipAddressResponse_ipId - The ID of one IP address.
$sel:statusMessage:IpAddressResponse', ipAddressResponse_statusMessage - A message that provides additional information about the status of the
request.
ipAddressResponse_creationTime :: Lens' IpAddressResponse (Maybe Text) Source #
The date and time that the IP address was created, in Unix time format and Coordinated Universal Time (UTC).
ipAddressResponse_status :: Lens' IpAddressResponse (Maybe IpAddressStatus) Source #
A status code that gives the current status of the request.
ipAddressResponse_modificationTime :: Lens' IpAddressResponse (Maybe Text) Source #
The date and time that the IP address was last modified, in Unix time format and Coordinated Universal Time (UTC).
ipAddressResponse_subnetId :: Lens' IpAddressResponse (Maybe Text) Source #
The ID of one subnet.
ipAddressResponse_ip :: Lens' IpAddressResponse (Maybe Text) Source #
One IP address that the Resolver endpoint uses for DNS queries.
ipAddressResponse_ipId :: Lens' IpAddressResponse (Maybe Text) Source #
The ID of one IP address.
ipAddressResponse_statusMessage :: Lens' IpAddressResponse (Maybe Text) Source #
A message that provides additional information about the status of the request.
IpAddressUpdate
data IpAddressUpdate Source #
In an UpdateResolverEndpoint request, information about an IP address to update.
See: newIpAddressUpdate smart constructor.
Constructors
| IpAddressUpdate' | |
Fields
| |
Instances
newIpAddressUpdate :: IpAddressUpdate Source #
Create a value of IpAddressUpdate with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:subnetId:IpAddressUpdate', ipAddressUpdate_subnetId - The ID of the subnet that includes the IP address that you want to
update. To get this ID, use
GetResolverEndpoint.
$sel:ip:IpAddressUpdate', ipAddressUpdate_ip - The new IP address.
$sel:ipId:IpAddressUpdate', ipAddressUpdate_ipId - Only when removing an IP address from a Resolver endpoint: The ID of
the IP address that you want to remove. To get this ID, use
GetResolverEndpoint.
ipAddressUpdate_subnetId :: Lens' IpAddressUpdate (Maybe Text) Source #
The ID of the subnet that includes the IP address that you want to update. To get this ID, use GetResolverEndpoint.
ipAddressUpdate_ip :: Lens' IpAddressUpdate (Maybe Text) Source #
The new IP address.
ipAddressUpdate_ipId :: Lens' IpAddressUpdate (Maybe Text) Source #
Only when removing an IP address from a Resolver endpoint: The ID of the IP address that you want to remove. To get this ID, use GetResolverEndpoint.
ResolverDnssecConfig
data ResolverDnssecConfig Source #
A complex type that contains information about a configuration for DNSSEC validation.
See: newResolverDnssecConfig smart constructor.
Constructors
| ResolverDnssecConfig' | |
Fields
| |
Instances
newResolverDnssecConfig :: ResolverDnssecConfig Source #
Create a value of ResolverDnssecConfig with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceId:ResolverDnssecConfig', resolverDnssecConfig_resourceId - The ID of the virtual private cloud (VPC) that you're configuring the
DNSSEC validation status for.
$sel:ownerId:ResolverDnssecConfig', resolverDnssecConfig_ownerId - The owner account ID of the virtual private cloud (VPC) for a
configuration for DNSSEC validation.
$sel:validationStatus:ResolverDnssecConfig', resolverDnssecConfig_validationStatus - The validation status for a DNSSEC configuration. The status can be one
of the following:
- ENABLING: DNSSEC validation is being enabled but is not complete.
- ENABLED: DNSSEC validation is enabled.
- DISABLING: DNSSEC validation is being disabled but is not complete.
- DISABLED DNSSEC validation is disabled.
$sel:id:ResolverDnssecConfig', resolverDnssecConfig_id - The ID for a configuration for DNSSEC validation.
resolverDnssecConfig_resourceId :: Lens' ResolverDnssecConfig (Maybe Text) Source #
The ID of the virtual private cloud (VPC) that you're configuring the DNSSEC validation status for.
resolverDnssecConfig_ownerId :: Lens' ResolverDnssecConfig (Maybe Text) Source #
The owner account ID of the virtual private cloud (VPC) for a configuration for DNSSEC validation.
resolverDnssecConfig_validationStatus :: Lens' ResolverDnssecConfig (Maybe ResolverDNSSECValidationStatus) Source #
The validation status for a DNSSEC configuration. The status can be one of the following:
- ENABLING: DNSSEC validation is being enabled but is not complete.
- ENABLED: DNSSEC validation is enabled.
- DISABLING: DNSSEC validation is being disabled but is not complete.
- DISABLED DNSSEC validation is disabled.
resolverDnssecConfig_id :: Lens' ResolverDnssecConfig (Maybe Text) Source #
The ID for a configuration for DNSSEC validation.
ResolverEndpoint
data ResolverEndpoint Source #
In the response to a CreateResolverEndpoint, DeleteResolverEndpoint, GetResolverEndpoint, ListResolverEndpoints, or UpdateResolverEndpoint request, a complex type that contains settings for an existing inbound or outbound Resolver endpoint.
See: newResolverEndpoint smart constructor.
Constructors
| ResolverEndpoint' | |
Fields
| |
Instances
newResolverEndpoint :: ResolverEndpoint Source #
Create a value of ResolverEndpoint with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:ResolverEndpoint', resolverEndpoint_creationTime - The date and time that the endpoint was created, in Unix time format and
Coordinated Universal Time (UTC).
$sel:status:ResolverEndpoint', resolverEndpoint_status - A code that specifies the current status of the Resolver endpoint. Valid
values include the following:
CREATING: Resolver is creating and configuring one or more Amazon VPC network interfaces for this endpoint.OPERATIONAL: The Amazon VPC network interfaces for this endpoint are correctly configured and able to pass inbound or outbound DNS queries between your network and Resolver.UPDATING: Resolver is associating or disassociating one or more network interfaces with this endpoint.AUTO_RECOVERING: Resolver is trying to recover one or more of the network interfaces that are associated with this endpoint. During the recovery process, the endpoint functions with limited capacity because of the limit on the number of DNS queries per IP address (per network interface). For the current limit, see Limits on Route 53 Resolver.ACTION_NEEDED: This endpoint is unhealthy, and Resolver can't automatically recover it. To resolve the problem, we recommend that you check each IP address that you associated with the endpoint. For each IP address that isn't available, add another IP address and then delete the IP address that isn't available. (An endpoint must always include at least two IP addresses.) A status ofACTION_NEEDEDcan have a variety of causes. Here are two common causes:- One or more of the network interfaces that are associated with the endpoint were deleted using Amazon VPC.
- The network interface couldn't be created for some reason that's outside the control of Resolver.
DELETING: Resolver is deleting this endpoint and the associated network interfaces.
$sel:securityGroupIds:ResolverEndpoint', resolverEndpoint_securityGroupIds - The ID of one or more security groups that control access to this VPC.
The security group must include one or more inbound rules (for inbound
endpoints) or outbound rules (for outbound endpoints). Inbound and
outbound rules must allow TCP and UDP access. For inbound access, open
port 53. For outbound access, open the port that you're using for DNS
queries on your network.
$sel:direction:ResolverEndpoint', resolverEndpoint_direction - Indicates whether the Resolver endpoint allows inbound or outbound DNS
queries:
INBOUND: allows DNS queries to your VPC from your networkOUTBOUND: allows DNS queries from your VPC to your network
$sel:arn:ResolverEndpoint', resolverEndpoint_arn - The ARN (Amazon Resource Name) for the Resolver endpoint.
$sel:creatorRequestId:ResolverEndpoint', resolverEndpoint_creatorRequestId - A unique string that identifies the request that created the Resolver
endpoint. The CreatorRequestId allows failed requests to be retried
without the risk of running the operation twice.
$sel:modificationTime:ResolverEndpoint', resolverEndpoint_modificationTime - The date and time that the endpoint was last modified, in Unix time
format and Coordinated Universal Time (UTC).
$sel:ipAddressCount:ResolverEndpoint', resolverEndpoint_ipAddressCount - The number of IP addresses that the Resolver endpoint can use for DNS
queries.
$sel:statusMessage:ResolverEndpoint', resolverEndpoint_statusMessage - A detailed description of the status of the Resolver endpoint.
$sel:name:ResolverEndpoint', resolverEndpoint_name - The name that you assigned to the Resolver endpoint when you submitted a
CreateResolverEndpoint
request.
$sel:id:ResolverEndpoint', resolverEndpoint_id - The ID of the Resolver endpoint.
$sel:hostVPCId:ResolverEndpoint', resolverEndpoint_hostVPCId - The ID of the VPC that you want to create the Resolver endpoint in.
resolverEndpoint_creationTime :: Lens' ResolverEndpoint (Maybe Text) Source #
The date and time that the endpoint was created, in Unix time format and Coordinated Universal Time (UTC).
resolverEndpoint_status :: Lens' ResolverEndpoint (Maybe ResolverEndpointStatus) Source #
A code that specifies the current status of the Resolver endpoint. Valid values include the following:
CREATING: Resolver is creating and configuring one or more Amazon VPC network interfaces for this endpoint.OPERATIONAL: The Amazon VPC network interfaces for this endpoint are correctly configured and able to pass inbound or outbound DNS queries between your network and Resolver.UPDATING: Resolver is associating or disassociating one or more network interfaces with this endpoint.AUTO_RECOVERING: Resolver is trying to recover one or more of the network interfaces that are associated with this endpoint. During the recovery process, the endpoint functions with limited capacity because of the limit on the number of DNS queries per IP address (per network interface). For the current limit, see Limits on Route 53 Resolver.ACTION_NEEDED: This endpoint is unhealthy, and Resolver can't automatically recover it. To resolve the problem, we recommend that you check each IP address that you associated with the endpoint. For each IP address that isn't available, add another IP address and then delete the IP address that isn't available. (An endpoint must always include at least two IP addresses.) A status ofACTION_NEEDEDcan have a variety of causes. Here are two common causes:- One or more of the network interfaces that are associated with the endpoint were deleted using Amazon VPC.
- The network interface couldn't be created for some reason that's outside the control of Resolver.
DELETING: Resolver is deleting this endpoint and the associated network interfaces.
resolverEndpoint_securityGroupIds :: Lens' ResolverEndpoint (Maybe [Text]) Source #
The ID of one or more security groups that control access to this VPC. The security group must include one or more inbound rules (for inbound endpoints) or outbound rules (for outbound endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network.
resolverEndpoint_direction :: Lens' ResolverEndpoint (Maybe ResolverEndpointDirection) Source #
Indicates whether the Resolver endpoint allows inbound or outbound DNS queries:
INBOUND: allows DNS queries to your VPC from your networkOUTBOUND: allows DNS queries from your VPC to your network
resolverEndpoint_arn :: Lens' ResolverEndpoint (Maybe Text) Source #
The ARN (Amazon Resource Name) for the Resolver endpoint.
resolverEndpoint_creatorRequestId :: Lens' ResolverEndpoint (Maybe Text) Source #
A unique string that identifies the request that created the Resolver
endpoint. The CreatorRequestId allows failed requests to be retried
without the risk of running the operation twice.
resolverEndpoint_modificationTime :: Lens' ResolverEndpoint (Maybe Text) Source #
The date and time that the endpoint was last modified, in Unix time format and Coordinated Universal Time (UTC).
resolverEndpoint_ipAddressCount :: Lens' ResolverEndpoint (Maybe Int) Source #
The number of IP addresses that the Resolver endpoint can use for DNS queries.
resolverEndpoint_statusMessage :: Lens' ResolverEndpoint (Maybe Text) Source #
A detailed description of the status of the Resolver endpoint.
resolverEndpoint_name :: Lens' ResolverEndpoint (Maybe Text) Source #
The name that you assigned to the Resolver endpoint when you submitted a CreateResolverEndpoint request.
resolverEndpoint_id :: Lens' ResolverEndpoint (Maybe Text) Source #
The ID of the Resolver endpoint.
resolverEndpoint_hostVPCId :: Lens' ResolverEndpoint (Maybe Text) Source #
The ID of the VPC that you want to create the Resolver endpoint in.
ResolverQueryLogConfig
data ResolverQueryLogConfig Source #
In the response to a CreateResolverQueryLogConfig, DeleteResolverQueryLogConfig, GetResolverQueryLogConfig, or ListResolverQueryLogConfigs request, a complex type that contains settings for one query logging configuration.
See: newResolverQueryLogConfig smart constructor.
Constructors
| ResolverQueryLogConfig' | |
Fields
| |
Instances
newResolverQueryLogConfig :: ResolverQueryLogConfig Source #
Create a value of ResolverQueryLogConfig with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:ResolverQueryLogConfig', resolverQueryLogConfig_creationTime - The date and time that the query logging configuration was created, in
Unix time format and Coordinated Universal Time (UTC).
$sel:status:ResolverQueryLogConfig', resolverQueryLogConfig_status - The status of the specified query logging configuration. Valid values
include the following:
CREATING: Resolver is creating the query logging configuration.CREATED: The query logging configuration was successfully created. Resolver is logging queries that originate in the specified VPC.DELETING: Resolver is deleting this query logging configuration.FAILED: Resolver can't deliver logs to the location that is specified in the query logging configuration. Here are two common causes:- The specified destination (for example, an Amazon S3 bucket) was deleted.
- Permissions don't allow sending logs to the destination.
$sel:associationCount:ResolverQueryLogConfig', resolverQueryLogConfig_associationCount - The number of VPCs that are associated with the query logging
configuration.
$sel:arn:ResolverQueryLogConfig', resolverQueryLogConfig_arn - The ARN for the query logging configuration.
$sel:creatorRequestId:ResolverQueryLogConfig', resolverQueryLogConfig_creatorRequestId - A unique string that identifies the request that created the query
logging configuration. The CreatorRequestId allows failed requests to
be retried without the risk of running the operation twice.
$sel:destinationArn:ResolverQueryLogConfig', resolverQueryLogConfig_destinationArn - The ARN of the resource that you want Resolver to send query logs: an
Amazon S3 bucket, a CloudWatch Logs log group, or a Kinesis Data
Firehose delivery stream.
$sel:shareStatus:ResolverQueryLogConfig', resolverQueryLogConfig_shareStatus - An indication of whether the query logging configuration is shared with
other Amazon Web Services accounts, or was shared with the current
account by another Amazon Web Services account. Sharing is configured
through Resource Access Manager (RAM).
$sel:ownerId:ResolverQueryLogConfig', resolverQueryLogConfig_ownerId - The Amazon Web Services account ID for the account that created the
query logging configuration.
$sel:name:ResolverQueryLogConfig', resolverQueryLogConfig_name - The name of the query logging configuration.
$sel:id:ResolverQueryLogConfig', resolverQueryLogConfig_id - The ID for the query logging configuration.
resolverQueryLogConfig_creationTime :: Lens' ResolverQueryLogConfig (Maybe Text) Source #
The date and time that the query logging configuration was created, in Unix time format and Coordinated Universal Time (UTC).
resolverQueryLogConfig_status :: Lens' ResolverQueryLogConfig (Maybe ResolverQueryLogConfigStatus) Source #
The status of the specified query logging configuration. Valid values include the following:
CREATING: Resolver is creating the query logging configuration.CREATED: The query logging configuration was successfully created. Resolver is logging queries that originate in the specified VPC.DELETING: Resolver is deleting this query logging configuration.FAILED: Resolver can't deliver logs to the location that is specified in the query logging configuration. Here are two common causes:- The specified destination (for example, an Amazon S3 bucket) was deleted.
- Permissions don't allow sending logs to the destination.
resolverQueryLogConfig_associationCount :: Lens' ResolverQueryLogConfig (Maybe Int) Source #
The number of VPCs that are associated with the query logging configuration.
resolverQueryLogConfig_arn :: Lens' ResolverQueryLogConfig (Maybe Text) Source #
The ARN for the query logging configuration.
resolverQueryLogConfig_creatorRequestId :: Lens' ResolverQueryLogConfig (Maybe Text) Source #
A unique string that identifies the request that created the query
logging configuration. The CreatorRequestId allows failed requests to
be retried without the risk of running the operation twice.
resolverQueryLogConfig_destinationArn :: Lens' ResolverQueryLogConfig (Maybe Text) Source #
The ARN of the resource that you want Resolver to send query logs: an Amazon S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream.
resolverQueryLogConfig_shareStatus :: Lens' ResolverQueryLogConfig (Maybe ShareStatus) Source #
An indication of whether the query logging configuration is shared with other Amazon Web Services accounts, or was shared with the current account by another Amazon Web Services account. Sharing is configured through Resource Access Manager (RAM).
resolverQueryLogConfig_ownerId :: Lens' ResolverQueryLogConfig (Maybe Text) Source #
The Amazon Web Services account ID for the account that created the query logging configuration.
resolverQueryLogConfig_name :: Lens' ResolverQueryLogConfig (Maybe Text) Source #
The name of the query logging configuration.
resolverQueryLogConfig_id :: Lens' ResolverQueryLogConfig (Maybe Text) Source #
The ID for the query logging configuration.
ResolverQueryLogConfigAssociation
data ResolverQueryLogConfigAssociation Source #
In the response to an AssociateResolverQueryLogConfig, DisassociateResolverQueryLogConfig, GetResolverQueryLogConfigAssociation, or ListResolverQueryLogConfigAssociations, request, a complex type that contains settings for a specified association between an Amazon VPC and a query logging configuration.
See: newResolverQueryLogConfigAssociation smart constructor.
Constructors
| ResolverQueryLogConfigAssociation' | |
Fields
| |
Instances
newResolverQueryLogConfigAssociation :: ResolverQueryLogConfigAssociation Source #
Create a value of ResolverQueryLogConfigAssociation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:ResolverQueryLogConfigAssociation', resolverQueryLogConfigAssociation_creationTime - The date and time that the VPC was associated with the query logging
configuration, in Unix time format and Coordinated Universal Time (UTC).
$sel:status:ResolverQueryLogConfigAssociation', resolverQueryLogConfigAssociation_status - The status of the specified query logging association. Valid values
include the following:
CREATING: Resolver is creating an association between an Amazon VPC and a query logging configuration.CREATED: The association between an Amazon VPC and a query logging configuration was successfully created. Resolver is logging queries that originate in the specified VPC.DELETING: Resolver is deleting this query logging association.FAILED: Resolver either couldn't create or couldn't delete the query logging association.
$sel:resolverQueryLogConfigId:ResolverQueryLogConfigAssociation', resolverQueryLogConfigAssociation_resolverQueryLogConfigId - The ID of the query logging configuration that a VPC is associated with.
$sel:resourceId:ResolverQueryLogConfigAssociation', resolverQueryLogConfigAssociation_resourceId - The ID of the Amazon VPC that is associated with the query logging
configuration.
$sel:error:ResolverQueryLogConfigAssociation', resolverQueryLogConfigAssociation_error - If the value of Status is FAILED, the value of Error indicates the
cause:
DESTINATION_NOT_FOUND: The specified destination (for example, an Amazon S3 bucket) was deleted.ACCESS_DENIED: Permissions don't allow sending logs to the destination.
If the value of Status is a value other than FAILED, Error is
null.
$sel:id:ResolverQueryLogConfigAssociation', resolverQueryLogConfigAssociation_id - The ID of the query logging association.
$sel:errorMessage:ResolverQueryLogConfigAssociation', resolverQueryLogConfigAssociation_errorMessage - Contains additional information about the error. If the value or Error
is null, the value of ErrorMessage also is null.
resolverQueryLogConfigAssociation_creationTime :: Lens' ResolverQueryLogConfigAssociation (Maybe Text) Source #
The date and time that the VPC was associated with the query logging configuration, in Unix time format and Coordinated Universal Time (UTC).
resolverQueryLogConfigAssociation_status :: Lens' ResolverQueryLogConfigAssociation (Maybe ResolverQueryLogConfigAssociationStatus) Source #
The status of the specified query logging association. Valid values include the following:
CREATING: Resolver is creating an association between an Amazon VPC and a query logging configuration.CREATED: The association between an Amazon VPC and a query logging configuration was successfully created. Resolver is logging queries that originate in the specified VPC.DELETING: Resolver is deleting this query logging association.FAILED: Resolver either couldn't create or couldn't delete the query logging association.
resolverQueryLogConfigAssociation_resolverQueryLogConfigId :: Lens' ResolverQueryLogConfigAssociation (Maybe Text) Source #
The ID of the query logging configuration that a VPC is associated with.
resolverQueryLogConfigAssociation_resourceId :: Lens' ResolverQueryLogConfigAssociation (Maybe Text) Source #
The ID of the Amazon VPC that is associated with the query logging configuration.
resolverQueryLogConfigAssociation_error :: Lens' ResolverQueryLogConfigAssociation (Maybe ResolverQueryLogConfigAssociationError) Source #
If the value of Status is FAILED, the value of Error indicates the
cause:
DESTINATION_NOT_FOUND: The specified destination (for example, an Amazon S3 bucket) was deleted.ACCESS_DENIED: Permissions don't allow sending logs to the destination.
If the value of Status is a value other than FAILED, Error is
null.
resolverQueryLogConfigAssociation_id :: Lens' ResolverQueryLogConfigAssociation (Maybe Text) Source #
The ID of the query logging association.
resolverQueryLogConfigAssociation_errorMessage :: Lens' ResolverQueryLogConfigAssociation (Maybe Text) Source #
Contains additional information about the error. If the value or Error
is null, the value of ErrorMessage also is null.
ResolverRule
data ResolverRule Source #
For queries that originate in your VPC, detailed information about a
Resolver rule, which specifies how to route DNS queries out of the VPC.
The ResolverRule parameter appears in the response to a
CreateResolverRule,
DeleteResolverRule,
GetResolverRule,
ListResolverRules,
or
UpdateResolverRule
request.
See: newResolverRule smart constructor.
Constructors
| ResolverRule' | |
Fields
| |
Instances
newResolverRule :: ResolverRule Source #
Create a value of ResolverRule with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:creationTime:ResolverRule', resolverRule_creationTime - The date and time that the Resolver rule was created, in Unix time
format and Coordinated Universal Time (UTC).
$sel:status:ResolverRule', resolverRule_status - A code that specifies the current status of the Resolver rule.
$sel:arn:ResolverRule', resolverRule_arn - The ARN (Amazon Resource Name) for the Resolver rule specified by Id.
$sel:resolverEndpointId:ResolverRule', resolverRule_resolverEndpointId - The ID of the endpoint that the rule is associated with.
$sel:creatorRequestId:ResolverRule', resolverRule_creatorRequestId - A unique string that you specified when you created the Resolver rule.
CreatorRequestId identifies the request and allows failed requests to
be retried without the risk of running the operation twice.
$sel:targetIps:ResolverRule', resolverRule_targetIps - An array that contains the IP addresses and ports that an outbound
endpoint forwards DNS queries to. Typically, these are the IP addresses
of DNS resolvers on your network. Specify IPv4 addresses. IPv6 is not
supported.
$sel:modificationTime:ResolverRule', resolverRule_modificationTime - The date and time that the Resolver rule was last updated, in Unix time
format and Coordinated Universal Time (UTC).
$sel:shareStatus:ResolverRule', resolverRule_shareStatus - Whether the rule is shared and, if so, whether the current account is
sharing the rule with another account, or another account is sharing the
rule with the current account.
$sel:ownerId:ResolverRule', resolverRule_ownerId - When a rule is shared with another Amazon Web Services account, the
account ID of the account that the rule is shared with.
$sel:domainName:ResolverRule', resolverRule_domainName - DNS queries for this domain name are forwarded to the IP addresses that
are specified in TargetIps. If a query matches multiple Resolver rules
(example.com and www.example.com), the query is routed using the
Resolver rule that contains the most specific domain name
(www.example.com).
$sel:statusMessage:ResolverRule', resolverRule_statusMessage - A detailed description of the status of a Resolver rule.
$sel:name:ResolverRule', resolverRule_name - The name for the Resolver rule, which you specified when you created the
Resolver rule.
$sel:id:ResolverRule', resolverRule_id - The ID that Resolver assigned to the Resolver rule when you created it.
$sel:ruleType:ResolverRule', resolverRule_ruleType - When you want to forward DNS queries for specified domain name to
resolvers on your network, specify FORWARD.
When you have a forwarding rule to forward DNS queries for a domain to
your network and you want Resolver to process queries for a subdomain of
that domain, specify SYSTEM.
For example, to forward DNS queries for example.com to resolvers on your
network, you create a rule and specify FORWARD for RuleType. To then
have Resolver process queries for apex.example.com, you create a rule
and specify SYSTEM for RuleType.
Currently, only Resolver can create rules that have a value of
RECURSIVE for RuleType.
resolverRule_creationTime :: Lens' ResolverRule (Maybe Text) Source #
The date and time that the Resolver rule was created, in Unix time format and Coordinated Universal Time (UTC).
resolverRule_status :: Lens' ResolverRule (Maybe ResolverRuleStatus) Source #
A code that specifies the current status of the Resolver rule.
resolverRule_arn :: Lens' ResolverRule (Maybe Text) Source #
The ARN (Amazon Resource Name) for the Resolver rule specified by Id.
resolverRule_resolverEndpointId :: Lens' ResolverRule (Maybe Text) Source #
The ID of the endpoint that the rule is associated with.
resolverRule_creatorRequestId :: Lens' ResolverRule (Maybe Text) Source #
A unique string that you specified when you created the Resolver rule.
CreatorRequestId identifies the request and allows failed requests to
be retried without the risk of running the operation twice.
resolverRule_targetIps :: Lens' ResolverRule (Maybe (NonEmpty TargetAddress)) Source #
An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network. Specify IPv4 addresses. IPv6 is not supported.
resolverRule_modificationTime :: Lens' ResolverRule (Maybe Text) Source #
The date and time that the Resolver rule was last updated, in Unix time format and Coordinated Universal Time (UTC).
resolverRule_shareStatus :: Lens' ResolverRule (Maybe ShareStatus) Source #
Whether the rule is shared and, if so, whether the current account is sharing the rule with another account, or another account is sharing the rule with the current account.
resolverRule_ownerId :: Lens' ResolverRule (Maybe Text) Source #
When a rule is shared with another Amazon Web Services account, the account ID of the account that the rule is shared with.
resolverRule_domainName :: Lens' ResolverRule (Maybe Text) Source #
DNS queries for this domain name are forwarded to the IP addresses that
are specified in TargetIps. If a query matches multiple Resolver rules
(example.com and www.example.com), the query is routed using the
Resolver rule that contains the most specific domain name
(www.example.com).
resolverRule_statusMessage :: Lens' ResolverRule (Maybe Text) Source #
A detailed description of the status of a Resolver rule.
resolverRule_name :: Lens' ResolverRule (Maybe Text) Source #
The name for the Resolver rule, which you specified when you created the Resolver rule.
resolverRule_id :: Lens' ResolverRule (Maybe Text) Source #
The ID that Resolver assigned to the Resolver rule when you created it.
resolverRule_ruleType :: Lens' ResolverRule (Maybe RuleTypeOption) Source #
When you want to forward DNS queries for specified domain name to
resolvers on your network, specify FORWARD.
When you have a forwarding rule to forward DNS queries for a domain to
your network and you want Resolver to process queries for a subdomain of
that domain, specify SYSTEM.
For example, to forward DNS queries for example.com to resolvers on your
network, you create a rule and specify FORWARD for RuleType. To then
have Resolver process queries for apex.example.com, you create a rule
and specify SYSTEM for RuleType.
Currently, only Resolver can create rules that have a value of
RECURSIVE for RuleType.
ResolverRuleAssociation
data ResolverRuleAssociation Source #
In the response to an AssociateResolverRule, DisassociateResolverRule, or ListResolverRuleAssociations request, provides information about an association between a Resolver rule and a VPC. The association determines which DNS queries that originate in the VPC are forwarded to your network.
See: newResolverRuleAssociation smart constructor.
Constructors
| ResolverRuleAssociation' | |
Fields
| |
Instances
newResolverRuleAssociation :: ResolverRuleAssociation Source #
Create a value of ResolverRuleAssociation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:ResolverRuleAssociation', resolverRuleAssociation_status - A code that specifies the current status of the association between a
Resolver rule and a VPC.
$sel:resolverRuleId:ResolverRuleAssociation', resolverRuleAssociation_resolverRuleId - The ID of the Resolver rule that you associated with the VPC that is
specified by VPCId.
$sel:vPCId:ResolverRuleAssociation', resolverRuleAssociation_vPCId - The ID of the VPC that you associated the Resolver rule with.
$sel:statusMessage:ResolverRuleAssociation', resolverRuleAssociation_statusMessage - A detailed description of the status of the association between a
Resolver rule and a VPC.
$sel:name:ResolverRuleAssociation', resolverRuleAssociation_name - The name of an association between a Resolver rule and a VPC.
$sel:id:ResolverRuleAssociation', resolverRuleAssociation_id - The ID of the association between a Resolver rule and a VPC. Resolver
assigns this value when you submit an
AssociateResolverRule
request.
resolverRuleAssociation_status :: Lens' ResolverRuleAssociation (Maybe ResolverRuleAssociationStatus) Source #
A code that specifies the current status of the association between a Resolver rule and a VPC.
resolverRuleAssociation_resolverRuleId :: Lens' ResolverRuleAssociation (Maybe Text) Source #
The ID of the Resolver rule that you associated with the VPC that is
specified by VPCId.
resolverRuleAssociation_vPCId :: Lens' ResolverRuleAssociation (Maybe Text) Source #
The ID of the VPC that you associated the Resolver rule with.
resolverRuleAssociation_statusMessage :: Lens' ResolverRuleAssociation (Maybe Text) Source #
A detailed description of the status of the association between a Resolver rule and a VPC.
resolverRuleAssociation_name :: Lens' ResolverRuleAssociation (Maybe Text) Source #
The name of an association between a Resolver rule and a VPC.
resolverRuleAssociation_id :: Lens' ResolverRuleAssociation (Maybe Text) Source #
The ID of the association between a Resolver rule and a VPC. Resolver assigns this value when you submit an AssociateResolverRule request.
ResolverRuleConfig
data ResolverRuleConfig Source #
In an UpdateResolverRule request, information about the changes that you want to make.
See: newResolverRuleConfig smart constructor.
Constructors
| ResolverRuleConfig' | |
Fields
| |
Instances
newResolverRuleConfig :: ResolverRuleConfig Source #
Create a value of ResolverRuleConfig with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resolverEndpointId:ResolverRuleConfig', resolverRuleConfig_resolverEndpointId - The ID of the new outbound Resolver endpoint that you want to use to
route DNS queries to the IP addresses that you specify in TargetIps.
$sel:targetIps:ResolverRuleConfig', resolverRuleConfig_targetIps - For DNS queries that originate in your VPC, the new IP addresses that
you want to route outbound DNS queries to.
$sel:name:ResolverRuleConfig', resolverRuleConfig_name - The new name for the Resolver rule. The name that you specify appears in
the Resolver dashboard in the Route 53 console.
resolverRuleConfig_resolverEndpointId :: Lens' ResolverRuleConfig (Maybe Text) Source #
The ID of the new outbound Resolver endpoint that you want to use to
route DNS queries to the IP addresses that you specify in TargetIps.
resolverRuleConfig_targetIps :: Lens' ResolverRuleConfig (Maybe (NonEmpty TargetAddress)) Source #
For DNS queries that originate in your VPC, the new IP addresses that you want to route outbound DNS queries to.
resolverRuleConfig_name :: Lens' ResolverRuleConfig (Maybe Text) Source #
The new name for the Resolver rule. The name that you specify appears in the Resolver dashboard in the Route 53 console.
Tag
One tag that you want to add to the specified resource. A tag consists
of a Key (a name for the tag) and a Value.
See: newTag smart constructor.
Constructors
| Tag' | |
Fields
| |
Instances
| Eq Tag Source # | |
| Read Tag Source # | |
| Show Tag Source # | |
| Generic Tag Source # | |
| NFData Tag Source # | |
Defined in Amazonka.Route53Resolver.Types.Tag | |
| Hashable Tag Source # | |
Defined in Amazonka.Route53Resolver.Types.Tag | |
| ToJSON Tag Source # | |
Defined in Amazonka.Route53Resolver.Types.Tag | |
| FromJSON Tag Source # | |
| type Rep Tag Source # | |
Defined in Amazonka.Route53Resolver.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.Route53Resolver.Types.Tag" "libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))) | |
Create a value of Tag with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:key:Tag', tag_key - The name for the tag. For example, if you want to associate Resolver
resources with the account IDs of your customers for billing purposes,
the value of Key might be account-id.
$sel:value:Tag', tag_value - The value for the tag. For example, if Key is account-id, then
Value might be the ID of the customer account that you're creating
the resource for.
tag_key :: Lens' Tag Text Source #
The name for the tag. For example, if you want to associate Resolver
resources with the account IDs of your customers for billing purposes,
the value of Key might be account-id.
tag_value :: Lens' Tag Text Source #
The value for the tag. For example, if Key is account-id, then
Value might be the ID of the customer account that you're creating
the resource for.
TargetAddress
data TargetAddress Source #
In a CreateResolverRule request, an array of the IPs that you want to forward DNS queries to.
See: newTargetAddress smart constructor.
Constructors
| TargetAddress' | |
Instances
Arguments
| :: Text | |
| -> TargetAddress |
Create a value of TargetAddress with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:port:TargetAddress', targetAddress_port - The port at Ip that you want to forward DNS queries to.
$sel:ip:TargetAddress', targetAddress_ip - One IP address that you want to forward DNS queries to. You can specify
only IPv4 addresses.
targetAddress_port :: Lens' TargetAddress (Maybe Natural) Source #
The port at Ip that you want to forward DNS queries to.
targetAddress_ip :: Lens' TargetAddress Text Source #
One IP address that you want to forward DNS queries to. You can specify only IPv4 addresses.