NetworkConfig / CentralNetworkServicesConfig / ResolverConfig

Route 53 Resolver configuration.

Use this configuration to define several features of Route 53 resolver, including resolver endpoints, DNS firewall rule groups, and DNS query logs. Amazon Route 53 Resolver responds recursively to DNS queries from AWS resources for public records, Amazon VPC-specific DNS names, and Amazon Route 53 private hosted zones, and is available by default in all VPCs.

route53Resolver:
endpoints:
- name: accelerator-outbound
type: OUTBOUND
vpc: Network-Endpoints
allowedCidrs:
- 10.0.0.0/16
subnets:
- Subnet-A
- Subnet-B
rules: []
tags: []
firewallRuleGroups:
- name: accelerator-rule-group
regions:
- us-east-1
rules:
- name: accelerator-dns-rule
action: BLOCK
priority: 100
blockResponse: NXDOMAIN
customDomainList: path/to/domains.txt
shareTargets:
organizationalUnits:
- Root
tags: []
queryLogs:
name: accelerator-query-logs
destinations:
- s3
- cloud-watch-logs
shareTargets:
organizationalUnits:
- Root
interface IResolverConfig {
    endpoints?: IResolverEndpointConfig[];
    firewallRuleGroups?: IDnsFirewallRuleGroupConfig[];
    queryLogs?: IDnsQueryLogsConfig;
    rules?: IResolverRuleConfig[];
}

Properties

(OPTIONAL) An array of Route 53 resolver endpoint configurations.

ResolverEndpointConfig

firewallRuleGroups?: IDnsFirewallRuleGroupConfig[]

(OPTIONAL) An array of Route 53 DNS firewall rule group configurations.

DnsFirewallRuleGroupConfig

(OPTIONAL) A Route 53 resolver DNS query logging configuration.

DnsQueryLogsConfig

(OPTIONAL) An array of Route 53 resolver rules.

This rules property should only be used for rules of type SYSTEM. For rules of type FORWARD, define under the ResolverEndpointConfig configuration object.