CmdID / aws / aws route53resolver
aws route53resolver get-firewall-rule-group-policy
Returns the Identity and Access Management (Amazon Web Services IAM) policy for sharing the specified rule group. AWS CLI reference
1 example 1 option Its page in the AWS CLI reference
Examples
To get an AWS IAM policy
The following get-firewall-rule-group-policy example gets the AWS Identity and Access Management (AWS IAM) policy for sharing the specified rule group.
aws route53resolver get-firewall-rule-group-policy --arn arn:aws:route53resolver:us-west-2:AWS_ACCOUNT_ID:firewall-rule-group/rslvr-frg-47f93271fexampleIdentify--arnThe ARN (Amazon Resource Name) for the rule group.Its output
{
"FirewallRuleGroupPolicy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"test\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::AWS_ACCOUNT_ID:root\"},\"Action\":[\"route53resolver:GetFirewallRuleGroup\",\"route53resolver:ListFirewallRuleGroups\"],\"Resource\":\"arn:aws:route53resolver:us-west-2:AWS_ACCOUNT_ID:firewall-rule-group/rslvr-frg-47f93271fexample\"}]}"
}For more information, see Managing rule groups and rules in DNS Firewall in the Amazon Route 53 Developer Guide.
Options
--arnThe ARN (Amazon Resource Name) for the rule group.