libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver
Copyright(c) 2013-2021 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay+amazonka@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone

Amazonka.Route53Resolver.UpdateFirewallConfig

Description

Updates the configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC).

Synopsis

Creating a Request

data UpdateFirewallConfig Source #

See: newUpdateFirewallConfig smart constructor.

Constructors

UpdateFirewallConfig' 

Fields

  • resourceId :: Text

    The ID of the VPC that the configuration is for.

  • firewallFailOpen :: FirewallFailOpenStatus

    Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

    • By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
    • If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

    This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

Instances

Instances details
Eq UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Read UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Show UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Generic UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Associated Types

type Rep UpdateFirewallConfig :: Type -> Type #

NFData UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Methods

rnf :: UpdateFirewallConfig -> () #

Hashable UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

ToJSON UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

AWSRequest UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Associated Types

type AWSResponse UpdateFirewallConfig #

ToHeaders UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

ToPath UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

ToQuery UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfig = D1 ('MetaData "UpdateFirewallConfig" "Amazonka.Route53Resolver.UpdateFirewallConfig" "libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver" 'False) (C1 ('MetaCons "UpdateFirewallConfig'" 'PrefixI 'True) (S1 ('MetaSel ('Just "resourceId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "firewallFailOpen") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 FirewallFailOpenStatus)))
type AWSResponse UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

newUpdateFirewallConfig Source #

Create a value of UpdateFirewallConfig with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:resourceId:UpdateFirewallConfig', updateFirewallConfig_resourceId - The ID of the VPC that the configuration is for.

$sel:firewallFailOpen:UpdateFirewallConfig', updateFirewallConfig_firewallFailOpen - Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

  • By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
  • If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

Request Lenses

updateFirewallConfig_resourceId :: Lens' UpdateFirewallConfig Text Source #

The ID of the VPC that the configuration is for.

updateFirewallConfig_firewallFailOpen :: Lens' UpdateFirewallConfig FirewallFailOpenStatus Source #

Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

  • By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
  • If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

Destructuring the Response

data UpdateFirewallConfigResponse Source #

See: newUpdateFirewallConfigResponse smart constructor.

Constructors

UpdateFirewallConfigResponse' 

Fields

Instances

Instances details
Eq UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Read UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Show UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Generic UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Associated Types

type Rep UpdateFirewallConfigResponse :: Type -> Type #

NFData UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfigResponse = D1 ('MetaData "UpdateFirewallConfigResponse" "Amazonka.Route53Resolver.UpdateFirewallConfig" "libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver" 'False) (C1 ('MetaCons "UpdateFirewallConfigResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "firewallConfig") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe FirewallConfig)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newUpdateFirewallConfigResponse Source #

Create a value of UpdateFirewallConfigResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:firewallConfig:UpdateFirewallConfigResponse', updateFirewallConfigResponse_firewallConfig - Configuration of the firewall behavior provided by DNS Firewall for a single VPC.

$sel:httpStatus:UpdateFirewallConfigResponse', updateFirewallConfigResponse_httpStatus - The response's http status code.

Response Lenses

updateFirewallConfigResponse_firewallConfig :: Lens' UpdateFirewallConfigResponse (Maybe FirewallConfig) Source #

Configuration of the firewall behavior provided by DNS Firewall for a single VPC.