CmdID

CmdID / aws / aws route53resolver

aws route53resolver put-firewall-rule-group-policy

Attaches an Identity and Access Management (Amazon Web Services IAM) policy for sharing the rule group. AWS CLI reference

1 example 2 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Examples

from aws-cli, each command read by CmdID

To attach an AWS IAM policy to share a Firewall rule group policy

The following put-firewall-rule-group-policy example attaches an AWS Identity and Access Management (AWS IAM) policy for sharing the rule group.

aws route53resolver put-firewall-rule-group-policy --arn arn:aws:route53resolver:us-west-2:AWS_ACCOUNT_ID:firewall-rule-group/rslvr-frg-47f93271fexample --firewall-rule-group-policy "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"test\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::AWS_ACCOUNT_ID:root\"},\"Action\":[\"route53resolver:GetFirewallRuleGroup\",\"route53resolver:ListFirewallRuleGroups\"],\"Resource\":\"arn:aws:route53resolver:us-west-2:AWS_ACCOUNT_ID:firewall-rule-group/rslvr-frg-47f93271fexample\"}]}"Identify
--arnThe ARN (Amazon Resource Name) for the rule group that you want to share.
--firewall-rule-group-policyThe Identity and Access Management (Amazon Web Services IAM) policy to attach to the rule group.
Its output
{
    "ReturnValue": true
}

For more information, see Managing rule groups and rules in DNS Firewall in the Amazon Route 53 Developer Guide.

Options

2 in the AWS CLI reference
--arnThe ARN (Amazon Resource Name) for the rule group that you want to share.
--firewall-rule-group-policyThe Identity and Access Management (Amazon Web Services IAM) policy to attach to the rule group.