ResolverFirewallConfigArgs

data class ResolverFirewallConfigArgs(val firewallFailOpen: Output<String>? = null, val resourceId: Output<String>? = null) : ConvertibleToJava<ResolverFirewallConfigArgs>

Provides a Route 53 Resolver DNS Firewall config resource.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ec2.Vpc;
import com.pulumi.aws.ec2.VpcArgs;
import com.pulumi.aws.route53.ResolverFirewallConfig;
import com.pulumi.aws.route53.ResolverFirewallConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleVpc = new Vpc("exampleVpc", VpcArgs.builder()
.cidrBlock("10.0.0.0/16")
.enableDnsSupport(true)
.enableDnsHostnames(true)
.build());
var exampleResolverFirewallConfig = new ResolverFirewallConfig("exampleResolverFirewallConfig", ResolverFirewallConfigArgs.builder()
.resourceId(exampleVpc.id())
.firewallFailOpen("ENABLED")
.build());
}
}

Import

In TODO v1.5.0 and later, use an import block to import Route 53 Resolver DNS Firewall configs using the Route 53 Resolver DNS Firewall config ID. For exampleterraform import { to = aws_route53_resolver_firewall_config.example id = "rdsc-be1866ecc1683e95" } Using TODO import, import Route 53 Resolver DNS Firewall configs using the Route 53 Resolver DNS Firewall config ID. For exampleconsole % TODO import aws_route53_resolver_firewall_config.example rdsc-be1866ecc1683e95

Constructors

Link copied to clipboard
fun ResolverFirewallConfigArgs(firewallFailOpen: Output<String>? = null, resourceId: Output<String>? = null)

Functions

Link copied to clipboard
open override fun toJava(): ResolverFirewallConfigArgs

Properties

Link copied to clipboard
val firewallFailOpen: Output<String>? = null

Determines how Route 53 Resolver handles queries during failures, for example when all traffic that is sent to DNS Firewall fails to receive a reply. By default, fail open is disabled, which means the failure mode is closed. This approach favors security over availability. DNS Firewall blocks queries that it is unable to evaluate properly. If you enable this option, the failure mode is open. This approach favors availability over security. DNS Firewall allows queries to proceed if it is unable to properly evaluate them. Valid values: ENABLED, DISABLED.

Link copied to clipboard
val resourceId: Output<String>? = null

The ID of the VPC that the configuration is for.