aws route53resolver create-firewall-rule

Creates a single DNS Firewall rule in the specified rule group. AWS CLI reference

15 options Its page in the AWS CLI reference

Options

15 in the AWS CLI reference

--actionThe action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advanced rule: ALLOW - Permit the request to go through.

--block-override-dns-typeThe DNS record's type.

--block-override-domainThe custom DNS record to send back in response to the query.

--block-override-ttlThe recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record.

--block-responseThe way that you want DNS Firewall to block the request, used with the rule action setting BLOCK.

--confidence-thresholdThe confidence threshold for DNS Firewall Advanced.

--creator-request-idA unique string that identifies the request and that allows you to retry failed requests without the risk of running the operation twice.

--dns-threat-protectionThe type of the DNS Firewall Advanced rule.

--firewall-domain-list-idThe ID of the domain list that you want to use in the rule.

--firewall-domain-redirection-actionHow you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME.

--firewall-rule-group-idThe unique identifier of the firewall rule group where you want to create the rule.

--firewall-rule-typeThe rule type configuration for the firewall rule.

--nameA name that lets you identify the rule in the rule group.

--priorityThe setting that determines the processing order of the rule in the rule group.

--qtypeThe DNS query type you want the rule to evaluate.