CmdID / aws / aws route53resolver
aws route53resolver update-firewall-rule-group-association
Changes the association of a FirewallRuleGroup with a VPC. AWS CLI reference
1 example 4 options Its page in the AWS CLI reference
Examples
To update a firewall rule group association
The following update-firewall-rule-group-association example updates a firewall rule group association.
aws route53resolver update-firewall-rule-group-association --firewall-rule-group-association-id rslvr-frgassoc-57e8873d7example --priority 103Identify--firewall-rule-group-association-idThe identifier of the FirewallRuleGroupAssociation.--priorityThe setting that determines the processing order of the rule group among the rule groups that you associate with the specified VPC.Its output
{
"FirewallRuleGroupAssociation": {
"Id": "rslvr-frgassoc-57e8873d7example",
"Arn": "arn:aws:route53resolver:us-west-2:123456789012:firewall-rule-group-association/rslvr-frgassoc-57e8873d7example",
"FirewallRuleGroupId": "rslvr-frg-47f93271fexample",
"VpcId": "vpc-31e92222",
"Name": "test-association",
"Priority": 103,
"MutationProtection": "DISABLED",
"Status": "UPDATING",
"StatusMessage": "Updating the Firewall Rule Group Association Attributes",
"CreatorRequestId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"CreationTime": "2021-05-25T21:47:48.755768Z",
"ModificationTime": "2021-05-25T21:50:09.272569Z"
}
}For more information, see Managing associations between your VPC and Route 53 Resolver DNS Firewall rule group in the Amazon Route 53 Developer Guide.
Options
--firewall-rule-group-association-idThe identifier of the FirewallRuleGroupAssociation.--mutation-protectionIf enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections.--nameThe name of the rule group association.--priorityThe setting that determines the processing order of the rule group among the rule groups that you associate with the specified VPC.