aws route53globalresolver create-firewall-rule

Creates a DNS firewall rule. AWS CLI reference

14 options Its page in the AWS CLI reference

Options

14 in the AWS CLI reference

--actionThe action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list: ALLOW - Permit the request to go through.

--block-override-dns-typeThe DNS record's type.

--block-override-domainThe custom DNS record to send back in response to the query.

--block-override-ttlThe recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record.

--block-responseThe response to return when the action is BLOCK.

--client-tokenA unique, case-sensitive identifier to ensure idempotency.

--confidence-thresholdThe confidence threshold for advanced threat detection.

--descriptionAn optional description for the firewall rule.

--dns-advanced-protectionWhether to enable advanced DNS threat protection for this rule.

--dns-view-idThe ID of the DNS view to associate with this firewall rule.

--firewall-domain-list-idThe ID of the firewall domain list to use in this rule.

--nameA descriptive name for the firewall rule.

--priorityThe priority of this rule.

--q-typeThe DNS query type to match for this rule.