libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver
Copyright(c) 2013-2021 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay+amazonka@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone

Amazonka.Route53Resolver.UpdateFirewallRule

Description

Updates the specified firewall rule.

Synopsis

Creating a Request

data UpdateFirewallRule Source #

See: newUpdateFirewallRule smart constructor.

Constructors

UpdateFirewallRule' 

Fields

  • blockOverrideDnsType :: Maybe BlockOverrideDnsType

    The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

  • priority :: Maybe Int

    The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.

    You must specify a unique priority for each rule in a rule group. To make it easier to insert rules later, leave space between the numbers, for example, use 100, 200, and so on. You can change the priority setting for the rules in a rule group at any time.

  • blockResponse :: Maybe BlockResponse

    The way that you want DNS Firewall to block the request. Used for the rule action setting BLOCK.

    • NODATA - Respond indicating that the query was successful, but no response is available for it.
    • NXDOMAIN - Respond indicating that the domain name that's in the query doesn't exist.
    • OVERRIDE - Provide a custom override in the response. This option requires custom handling details in the rule's BlockOverride* settings.
  • action :: Maybe Action

    The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:

    • ALLOW - Permit the request to go through.
    • ALERT - Permit the request to go through but send an alert to the logs.
    • BLOCK - Disallow the request. This option requires additional details in the rule's BlockResponse.
  • blockOverrideTtl :: Maybe Natural

    The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

  • name :: Maybe Text

    The name of the rule.

  • blockOverrideDomain :: Maybe Text

    The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

  • firewallRuleGroupId :: Text

    The unique identifier of the firewall rule group for the rule.

  • firewallDomainListId :: Text

    The ID of the domain list to use in the rule.

Instances

Instances details
Eq UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Read UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Show UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Generic UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Associated Types

type Rep UpdateFirewallRule :: Type -> Type #

NFData UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Methods

rnf :: UpdateFirewallRule -> () #

Hashable UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

ToJSON UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

AWSRequest UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Associated Types

type AWSResponse UpdateFirewallRule #

ToHeaders UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

ToPath UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

ToQuery UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

type Rep UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

type Rep UpdateFirewallRule = D1 ('MetaData "UpdateFirewallRule" "Amazonka.Route53Resolver.UpdateFirewallRule" "libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver" 'False) (C1 ('MetaCons "UpdateFirewallRule'" 'PrefixI 'True) (((S1 ('MetaSel ('Just "blockOverrideDnsType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe BlockOverrideDnsType)) :*: S1 ('MetaSel ('Just "priority") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Int))) :*: (S1 ('MetaSel ('Just "blockResponse") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe BlockResponse)) :*: S1 ('MetaSel ('Just "action") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Action)))) :*: ((S1 ('MetaSel ('Just "blockOverrideTtl") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :*: S1 ('MetaSel ('Just "name") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "blockOverrideDomain") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: (S1 ('MetaSel ('Just "firewallRuleGroupId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "firewallDomainListId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))))))
type AWSResponse UpdateFirewallRule Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

newUpdateFirewallRule Source #

Create a value of UpdateFirewallRule with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:blockOverrideDnsType:UpdateFirewallRule', updateFirewallRule_blockOverrideDnsType - The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

$sel:priority:UpdateFirewallRule', updateFirewallRule_priority - The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.

You must specify a unique priority for each rule in a rule group. To make it easier to insert rules later, leave space between the numbers, for example, use 100, 200, and so on. You can change the priority setting for the rules in a rule group at any time.

$sel:blockResponse:UpdateFirewallRule', updateFirewallRule_blockResponse - The way that you want DNS Firewall to block the request. Used for the rule action setting BLOCK.

  • NODATA - Respond indicating that the query was successful, but no response is available for it.
  • NXDOMAIN - Respond indicating that the domain name that's in the query doesn't exist.
  • OVERRIDE - Provide a custom override in the response. This option requires custom handling details in the rule's BlockOverride* settings.

$sel:action:UpdateFirewallRule', updateFirewallRule_action - The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:

  • ALLOW - Permit the request to go through.
  • ALERT - Permit the request to go through but send an alert to the logs.
  • BLOCK - Disallow the request. This option requires additional details in the rule's BlockResponse.

$sel:blockOverrideTtl:UpdateFirewallRule', updateFirewallRule_blockOverrideTtl - The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

$sel:name:UpdateFirewallRule', updateFirewallRule_name - The name of the rule.

$sel:blockOverrideDomain:UpdateFirewallRule', updateFirewallRule_blockOverrideDomain - The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

$sel:firewallRuleGroupId:UpdateFirewallRule', updateFirewallRule_firewallRuleGroupId - The unique identifier of the firewall rule group for the rule.

$sel:firewallDomainListId:UpdateFirewallRule', updateFirewallRule_firewallDomainListId - The ID of the domain list to use in the rule.

Request Lenses

updateFirewallRule_blockOverrideDnsType :: Lens' UpdateFirewallRule (Maybe BlockOverrideDnsType) Source #

The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

updateFirewallRule_priority :: Lens' UpdateFirewallRule (Maybe Int) Source #

The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.

You must specify a unique priority for each rule in a rule group. To make it easier to insert rules later, leave space between the numbers, for example, use 100, 200, and so on. You can change the priority setting for the rules in a rule group at any time.

updateFirewallRule_blockResponse :: Lens' UpdateFirewallRule (Maybe BlockResponse) Source #

The way that you want DNS Firewall to block the request. Used for the rule action setting BLOCK.

  • NODATA - Respond indicating that the query was successful, but no response is available for it.
  • NXDOMAIN - Respond indicating that the domain name that's in the query doesn't exist.
  • OVERRIDE - Provide a custom override in the response. This option requires custom handling details in the rule's BlockOverride* settings.

updateFirewallRule_action :: Lens' UpdateFirewallRule (Maybe Action) Source #

The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:

  • ALLOW - Permit the request to go through.
  • ALERT - Permit the request to go through but send an alert to the logs.
  • BLOCK - Disallow the request. This option requires additional details in the rule's BlockResponse.

updateFirewallRule_blockOverrideTtl :: Lens' UpdateFirewallRule (Maybe Natural) Source #

The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

updateFirewallRule_blockOverrideDomain :: Lens' UpdateFirewallRule (Maybe Text) Source #

The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

updateFirewallRule_firewallRuleGroupId :: Lens' UpdateFirewallRule Text Source #

The unique identifier of the firewall rule group for the rule.

updateFirewallRule_firewallDomainListId :: Lens' UpdateFirewallRule Text Source #

The ID of the domain list to use in the rule.

Destructuring the Response

data UpdateFirewallRuleResponse Source #

See: newUpdateFirewallRuleResponse smart constructor.

Constructors

UpdateFirewallRuleResponse' 

Fields

Instances

Instances details
Eq UpdateFirewallRuleResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Read UpdateFirewallRuleResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Show UpdateFirewallRuleResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Generic UpdateFirewallRuleResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

Associated Types

type Rep UpdateFirewallRuleResponse :: Type -> Type #

NFData UpdateFirewallRuleResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

type Rep UpdateFirewallRuleResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallRule

type Rep UpdateFirewallRuleResponse = D1 ('MetaData "UpdateFirewallRuleResponse" "Amazonka.Route53Resolver.UpdateFirewallRule" "libZSservicesZSamazonka-route53resolverZSamazonka-route53resolver" 'False) (C1 ('MetaCons "UpdateFirewallRuleResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "firewallRule") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe FirewallRule)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newUpdateFirewallRuleResponse Source #

Create a value of UpdateFirewallRuleResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:firewallRule:UpdateFirewallRuleResponse', updateFirewallRuleResponse_firewallRule - The firewall rule that you just updated.

$sel:httpStatus:UpdateFirewallRuleResponse', updateFirewallRuleResponse_httpStatus - The response's http status code.

Response Lenses