Class DnsFirewallRuleGroupConfig

NetworkConfig / CentralNetworkServicesConfig / ResolverConfig / DnsFirewallRuleGroupConfig

Route 53 DNS firewall rule group configuration. Use this configuration to define a group of rules for your DNS firewall. Rule groups contain one to many rules that can be associated with VPCs in your environment. These rules allow you to define the behavior of your DNS firewall.

The following example creates a rule group that contains one rule entry. The rule blocks a list of custom domains contained in a file in the accelerator configuration repository. The rule group is shared to the entire organization.

Example

- name: accelerator-rule-group
  regions:
    - us-east-1
  rules:
    - name: accelerator-dns-rule
      action: BLOCK
      priority: 100
      blockResponse: NXDOMAIN
      customDomainList: path/to/domains.txt
  shareTargets:
    organizationalUnits:
      - Root
  tags: []