Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
Updates the configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC).
Synopsis
- data UpdateFirewallConfig = UpdateFirewallConfig' {}
- newUpdateFirewallConfig :: Text -> FirewallFailOpenStatus -> UpdateFirewallConfig
- updateFirewallConfig_resourceId :: Lens' UpdateFirewallConfig Text
- updateFirewallConfig_firewallFailOpen :: Lens' UpdateFirewallConfig FirewallFailOpenStatus
- data UpdateFirewallConfigResponse = UpdateFirewallConfigResponse' {}
- newUpdateFirewallConfigResponse :: Int -> UpdateFirewallConfigResponse
- updateFirewallConfigResponse_firewallConfig :: Lens' UpdateFirewallConfigResponse (Maybe FirewallConfig)
- updateFirewallConfigResponse_httpStatus :: Lens' UpdateFirewallConfigResponse Int
Creating a Request
data UpdateFirewallConfig Source #
See: newUpdateFirewallConfig
smart constructor.
UpdateFirewallConfig' | |
|
Instances
newUpdateFirewallConfig Source #
Create a value of UpdateFirewallConfig
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceId:UpdateFirewallConfig'
, updateFirewallConfig_resourceId
- The ID of the VPC that the configuration is for.
$sel:firewallFailOpen:UpdateFirewallConfig'
, updateFirewallConfig_firewallFailOpen
- Determines how Route 53 Resolver handles queries during failures, for
example when all traffic that is sent to DNS Firewall fails to receive a
reply.
- By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
- If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.
This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.
Request Lenses
updateFirewallConfig_resourceId :: Lens' UpdateFirewallConfig Text Source #
The ID of the VPC that the configuration is for.
updateFirewallConfig_firewallFailOpen :: Lens' UpdateFirewallConfig FirewallFailOpenStatus Source #
Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.
- By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
- If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.
This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.
Destructuring the Response
data UpdateFirewallConfigResponse Source #
See: newUpdateFirewallConfigResponse
smart constructor.
UpdateFirewallConfigResponse' | |
|
Instances
newUpdateFirewallConfigResponse Source #
Create a value of UpdateFirewallConfigResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:firewallConfig:UpdateFirewallConfigResponse'
, updateFirewallConfigResponse_firewallConfig
- Configuration of the firewall behavior provided by DNS Firewall for a
single VPC.
$sel:httpStatus:UpdateFirewallConfigResponse'
, updateFirewallConfigResponse_httpStatus
- The response's http status code.
Response Lenses
updateFirewallConfigResponse_firewallConfig :: Lens' UpdateFirewallConfigResponse (Maybe FirewallConfig) Source #
Configuration of the firewall behavior provided by DNS Firewall for a single VPC.
updateFirewallConfigResponse_httpStatus :: Lens' UpdateFirewallConfigResponse Int Source #
The response's http status code.