Associate Firewall Rule Group
route53resolver_associate_firewall_rule_group | R Documentation |
Associates a FirewallRuleGroup with a VPC, to provide DNS filtering for the VPC¶
Description¶
Associates a FirewallRuleGroup with a VPC, to provide DNS filtering for the VPC.
Usage¶
route53resolver_associate_firewall_rule_group(CreatorRequestId,
FirewallRuleGroupId, VpcId, Priority, Name, MutationProtection, Tags)
Arguments¶
CreatorRequestId
[required] A unique string that identifies the request and that allows failed requests to be retried without the risk of running the operation twice.
CreatorRequestId
can be any unique string, for example, a date/time stamp.FirewallRuleGroupId
[required] The unique identifier of the firewall rule group.
VpcId
[required] The unique identifier of the VPC that you want to associate with the rule group.
Priority
[required] The setting that determines the processing order of the rule group among the rule groups that you associate with the specified VPC. DNS Firewall filters VPC traffic starting from the rule group with the lowest numeric priority setting.
You must specify a unique priority for each rule group that you associate with a single VPC. To make it easier to insert rule groups later, leave space between the numbers, for example, use 101, 200, and so on. You can change the priority setting for a rule group association after you create it.
The allowed values for
Priority
are between 100 and 9900.Name
[required] A name that lets you identify the association, to manage and use it.
MutationProtection
If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections. When you create the association, the default setting is
DISABLED
.Tags
A list of the tag keys and values that you want to associate with the rule group association.
Value¶
A list with the following syntax:
list(
FirewallRuleGroupAssociation = list(
Id = "string",
Arn = "string",
FirewallRuleGroupId = "string",
VpcId = "string",
Name = "string",
Priority = 123,
MutationProtection = "ENABLED"|"DISABLED",
ManagedOwnerName = "string",
Status = "COMPLETE"|"DELETING"|"UPDATING",
StatusMessage = "string",
CreatorRequestId = "string",
CreationTime = "string",
ModificationTime = "string"
)
)