amazonka-route53resolver-2.0: Amazon Route 53 Resolver SDK.
Copyright(c) 2013-2023 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellSafe-Inferred
LanguageHaskell2010

Amazonka.Route53Resolver.UpdateFirewallConfig

Description

Updates the configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC).

Synopsis

Creating a Request

data UpdateFirewallConfig Source #

See: newUpdateFirewallConfig smart constructor.

Constructors

UpdateFirewallConfig' 

Fields

  • resourceId :: Text

    The ID of the VPC that the configuration is for.

  • firewallFailOpen :: FirewallFailOpenStatus

    Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

    • By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
    • If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

    This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

Instances

Instances details
ToJSON UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

ToHeaders UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

ToPath UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

ToQuery UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

AWSRequest UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Associated Types

type AWSResponse UpdateFirewallConfig #

Generic UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Associated Types

type Rep UpdateFirewallConfig :: Type -> Type #

Read UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Show UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

NFData UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Methods

rnf :: UpdateFirewallConfig -> () #

Eq UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Hashable UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type AWSResponse UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfig Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfig = D1 ('MetaData "UpdateFirewallConfig" "Amazonka.Route53Resolver.UpdateFirewallConfig" "amazonka-route53resolver-2.0-GFukx1WIgCPEXMh1BiYlp6" 'False) (C1 ('MetaCons "UpdateFirewallConfig'" 'PrefixI 'True) (S1 ('MetaSel ('Just "resourceId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "firewallFailOpen") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 FirewallFailOpenStatus)))

newUpdateFirewallConfig Source #

Create a value of UpdateFirewallConfig with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

UpdateFirewallConfig, updateFirewallConfig_resourceId - The ID of the VPC that the configuration is for.

UpdateFirewallConfig, updateFirewallConfig_firewallFailOpen - Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

  • By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
  • If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

Request Lenses

updateFirewallConfig_resourceId :: Lens' UpdateFirewallConfig Text Source #

The ID of the VPC that the configuration is for.

updateFirewallConfig_firewallFailOpen :: Lens' UpdateFirewallConfig FirewallFailOpenStatus Source #

Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

  • By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly.
  • If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them.

This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

Destructuring the Response

data UpdateFirewallConfigResponse Source #

See: newUpdateFirewallConfigResponse smart constructor.

Constructors

UpdateFirewallConfigResponse' 

Fields

Instances

Instances details
Generic UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Associated Types

type Rep UpdateFirewallConfigResponse :: Type -> Type #

Read UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Show UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

NFData UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

Eq UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfigResponse Source # 
Instance details

Defined in Amazonka.Route53Resolver.UpdateFirewallConfig

type Rep UpdateFirewallConfigResponse = D1 ('MetaData "UpdateFirewallConfigResponse" "Amazonka.Route53Resolver.UpdateFirewallConfig" "amazonka-route53resolver-2.0-GFukx1WIgCPEXMh1BiYlp6" 'False) (C1 ('MetaCons "UpdateFirewallConfigResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "firewallConfig") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe FirewallConfig)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newUpdateFirewallConfigResponse Source #

Create a value of UpdateFirewallConfigResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:firewallConfig:UpdateFirewallConfigResponse', updateFirewallConfigResponse_firewallConfig - Configuration of the firewall behavior provided by DNS Firewall for a single VPC.

$sel:httpStatus:UpdateFirewallConfigResponse', updateFirewallConfigResponse_httpStatus - The response's http status code.

Response Lenses

updateFirewallConfigResponse_firewallConfig :: Lens' UpdateFirewallConfigResponse (Maybe FirewallConfig) Source #

Configuration of the firewall behavior provided by DNS Firewall for a single VPC.