aws route53resolver update-firewall-config

Updates the configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC). AWS CLI reference

1 example 2 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To update a firewall config

The following update-firewall-config example updates DNS Firewall configuration.

aws route53resolver update-firewall-config --resource-id vpc-31e92222 --firewall-fail-open DISABLEDIdentify

--resource-idThe ID of the VPC that the configuration is for.

--firewall-fail-openDetermines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

Its output

{
    "FirewallConfig": {
        "Id": "rslvr-fc-86016850cexample",
        "ResourceId": "vpc-31e92222",
        "OwnerId": "123456789012",
        "FirewallFailOpen": "DISABLED"
    }
}

For more information, see DNS Firewall VPC configuration in the Amazon Route 53 Developer Guide.

Options

2 in the AWS CLI reference

--firewall-fail-openDetermines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply.

--resource-idThe ID of the VPC that the configuration is for.