Deletes the specified firewall rule¶

Description¶

Deletes the specified firewall rule. Identify the rule using either FirewallDomainListId (for domain-list and DNS Firewall Advanced rules) or FirewallThreatProtectionId (for partner-managed and DNS Firewall Advanced rules) — together with FirewallRuleGroupId.

delete_firewall_rule is the only operation that succeeds against a rule whose Status is CREATION_FAILED.

Usage¶

route53resolver_delete_firewall_rule(FirewallRuleGroupId,
  FirewallDomainListId, FirewallThreatProtectionId, Qtype)

Arguments¶

FirewallRuleGroupId

[required] The unique identifier of the firewall rule group that you want to delete the rule from.
FirewallDomainListId

The ID of the domain list that's used in the rule.
FirewallThreatProtectionId

The ID that is created for a DNS Firewall Advanced rule.
Qtype

The DNS query type that the rule you are deleting evaluates. Allowed values are;
- A: Returns an IPv4 address.
- AAAA: Returns an Ipv6 address.
- CAA: Restricts CAs that can create SSL/TLS certifications for the domain.
- CNAME: Returns another domain name.
- DS: Record that identifies the DNSSEC signing key of a delegated zone.
- MX: Specifies mail servers.
- NAPTR: Regular-expression-based rewriting of domain names.
- NS: Authoritative name servers.
- PTR: Maps an IP address to a domain name.
- SOA: Start of authority record for the zone.
- SPF: Lists the servers authorized to send emails from a domain.
- SRV: Application specific values that identify servers.
- TXT: Verifies email senders and application-specific values.
- A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPENUMBER, where the NUMBER can be 1-65534, for example, TYPE28. For more information, see List of DNS record types.

Value¶

A list with the following syntax:

list(
  FirewallRule = list(
    FirewallRuleGroupId = "string",
    FirewallDomainListId = "string",
    FirewallThreatProtectionId = "string",
    Name = "string",
    Priority = 123,
    Action = "ALLOW"|"BLOCK"|"ALERT",
    BlockResponse = "NODATA"|"NXDOMAIN"|"OVERRIDE",
    BlockOverrideDomain = "string",
    BlockOverrideDnsType = "CNAME",
    BlockOverrideTtl = 123,
    CreatorRequestId = "string",
    CreationTime = "string",
    ModificationTime = "string",
    FirewallDomainRedirectionAction = "INSPECT_REDIRECTION_DOMAIN"|"TRUST_REDIRECTION_DOMAIN",
    Qtype = "string",
    DnsThreatProtection = "DGA"|"DNS_TUNNELING"|"DICTIONARY_DGA",
    ConfidenceThreshold = "LOW"|"MEDIUM"|"HIGH",
    FirewallRuleType = list(
      PartnerThreatProtection = list(
        Partner = "string"
      ),
      FirewallAdvancedContentCategory = list(
        Category = "string"
      ),
      FirewallAdvancedThreatCategory = list(
        Category = "string"
      ),
      DnsThreatProtection = list(
        Value = "string",
        ConfidenceThreshold = "LOW"|"MEDIUM"|"HIGH"
      )
    ),
    Status = "string",
    StatusMessage = "string"
  )
)

Request syntax¶

svc$delete_firewall_rule(
  FirewallRuleGroupId = "string",
  FirewallDomainListId = "string",
  FirewallThreatProtectionId = "string",
  Qtype = "string"
)