NetworkConfig / CentralNetworkServicesConfig / ResolverConfig / DnsFirewallRuleGroupConfig / DnsFirewallRulesConfig

Route 53 DNS firewall rule configuration. Used to define DNS firewall rules.

Example

- name: accelerator-dns-rule
action: BLOCK
priority: 100
blockResponse: NXDOMAIN
customDomainList: path/to/domains.txt

Hierarchy

  • DnsFirewallRulesConfig

Implements

Constructors

Properties

action: "BLOCK" | "ALLOW" | "ALERT" = 'ALERT'

An action for the DNS firewall rule to take on matching requests.

See

dnsFirewallRuleActionTypeEnum

blockOverrideDomain: undefined | string = undefined

Configure an override domain for BLOCK actions.

blockOverrideTtl: undefined | number = undefined

Configure a time-to-live (TTL) for the override domain.

blockResponse: undefined | "OVERRIDE" | "NODATA" | "NXDOMAIN" = undefined

Configure a specific response type for BLOCK actions.

See

dnsFirewallBlockResponseTypeEnum

customDomainList: undefined | string = undefined

A file containing a custom domain list in TXT format.

managedDomainList: undefined | "AWSManagedDomainsBotnetCommandandControl" | "AWSManagedDomainsMalwareDomainList" = undefined

Configure a rule that uses an AWS-managed domain list.

See

dnsFirewallManagedDomainListEnum

name: string = ''

A friendly name for the DNS firewall rule.

priority: number = 100

The priority of the DNS firewall rule.

Remarks

Rules are evaluated in order from low to high number.

Generated using TypeDoc