aws route53resolver get-firewall-rule-group-association

Retrieves a firewall rule group association, which enables DNS filtering for a VPC with one rule group. AWS CLI reference

1 example 1 option Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To get a firewall rule group association

The following get-firewall-rule-group-association example retrieves a firewall rule group association.

aws route53resolver get-firewall-rule-group-association --firewall-rule-group-association-id rslvr-frgassoc-57e8873d7example

Identify

--firewall-rule-group-association-idThe identifier of the FirewallRuleGroupAssociation.

Its output

{
    "FirewallRuleGroupAssociation": {
        "Id": "rslvr-frgassoc-57e8873d7example",
        "Arn": "arn:aws:route53resolver:us-west-2:123456789012:firewall-rule-group-association/rslvr-frgassoc-57e8873d7example",
        "FirewallRuleGroupId": "rslvr-frg-47f93271fexample",
        "VpcId": "vpc-31e92222",
        "Name": "test-association",
        "Priority": 101,
        "MutationProtection": "DISABLED",
        "Status": "COMPLETE",
        "StatusMessage": "Finished rule group association update",
        "CreatorRequestId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
        "CreationTime": "2021-05-25T21:47:48.755768Z",
        "ModificationTime": "2021-05-25T21:47:48.755768Z"
    }
}

For more information, see Managing associations between your VPC and Route 53 Resolver DNS Firewall rule groups in the Amazon Route 53 Developer Guide.

Options

1 in the AWS CLI reference

--firewall-rule-group-association-idThe identifier of the FirewallRuleGroupAssociation.