CmdID / aws / aws route53resolver
aws route53resolver update-firewall-rule
Updates the specified firewall rule. AWS CLI reference
15 options Its page in the AWS CLI reference
Options
--actionThe action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advanced rule: ALLOW - Permit the request to go through.--block-override-dns-typeThe DNS record's type.--block-override-domainThe custom DNS record to send back in response to the query.--block-override-ttlThe recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record.--block-responseThe way that you want DNS Firewall to block the request.--confidence-thresholdThe confidence threshold for DNS Firewall Advanced.--dns-threat-protectionThe type of the DNS Firewall Advanced rule.--firewall-domain-list-idThe ID of the domain list to use in the rule.--firewall-domain-redirection-actionHow you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME.--firewall-rule-group-idThe unique identifier of the firewall rule group for the rule.--firewall-rule-typeThe rule type configuration for the firewall rule.--firewall-threat-protection-idThe DNS Firewall Advanced rule ID.--nameThe name of the rule.--priorityThe setting that determines the processing order of the rule in the rule group.--qtypeThe DNS query type you want the rule to evaluate.