Copyright	(c) 2013-2023 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	Safe-Inferred
Language	Haskell2010

Amazonka.Route53Resolver.Types.FirewallConfig

Description

Documentation

data FirewallConfig Source #

Configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC).

See: newFirewallConfig smart constructor.

Constructors

FirewallConfig'

Fields

firewallFailOpen :: Maybe FirewallFailOpenStatus
Determines how DNS Firewall operates during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.
- By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
- If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.
This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.
id :: Maybe Text
The ID of the firewall configuration.
ownerId :: Maybe Text
The Amazon Web Services account ID of the owner of the VPC that this firewall configuration applies to.
resourceId :: Maybe Text
The ID of the VPC that this firewall configuration applies to.

Instances

Instances details

FromJSON FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods parseJSON :: Value -> Parser FirewallConfig # parseJSONList :: Value -> Parser [FirewallConfig] #
Generic FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Associated Types type Rep FirewallConfig :: Type -> Type # Methods from :: FirewallConfig -> Rep FirewallConfig x # to :: Rep FirewallConfig x -> FirewallConfig #
Read FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods readsPrec :: Int -> ReadS FirewallConfig # readList :: ReadS [FirewallConfig] # readPrec :: ReadPrec FirewallConfig # readListPrec :: ReadPrec [FirewallConfig] #
Show FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods showsPrec :: Int -> FirewallConfig -> ShowS # show :: FirewallConfig -> String # showList :: [FirewallConfig] -> ShowS #
NFData FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods rnf :: FirewallConfig -> () #
Eq FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods (==) :: FirewallConfig -> FirewallConfig -> Bool # (/=) :: FirewallConfig -> FirewallConfig -> Bool #
Hashable FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig Methods hashWithSalt :: Int -> FirewallConfig -> Int # hash :: FirewallConfig -> Int #
type Rep FirewallConfig Source #
Instance details Defined in Amazonka.Route53Resolver.Types.FirewallConfig type Rep FirewallConfig = D1 ('MetaData "FirewallConfig" "Amazonka.Route53Resolver.Types.FirewallConfig" "amazonka-route53resolver-2.0-GFukx1WIgCPEXMh1BiYlp6" 'False) (C1 ('MetaCons "FirewallConfig'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "firewallFailOpen") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe FirewallFailOpenStatus)) :: S1 ('MetaSel ('Just "id") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "ownerId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "resourceId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))

newFirewallConfig :: FirewallConfig Source #

Create a value of FirewallConfig with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:firewallFailOpen:FirewallConfig', firewallConfig_firewallFailOpen - Determines how DNS Firewall operates during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

$sel:id:FirewallConfig', firewallConfig_id - The ID of the firewall configuration.

$sel:ownerId:FirewallConfig', firewallConfig_ownerId - The Amazon Web Services account ID of the owner of the VPC that this firewall configuration applies to.

$sel:resourceId:FirewallConfig', firewallConfig_resourceId - The ID of the VPC that this firewall configuration applies to.

firewallConfig_firewallFailOpen :: Lens' FirewallConfig (Maybe FirewallFailOpenStatus) Source #

Determines how DNS Firewall operates during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall returns a failure error when it is unable to properly evaluate a query.
If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

firewallConfig_id :: Lens' FirewallConfig (Maybe Text) Source #

The ID of the firewall configuration.

firewallConfig_ownerId :: Lens' FirewallConfig (Maybe Text) Source #

The Amazon Web Services account ID of the owner of the VPC that this firewall configuration applies to.

firewallConfig_resourceId :: Lens' FirewallConfig (Maybe Text) Source #

The ID of the VPC that this firewall configuration applies to.