interface FirewallRuleGroupAssociationOptions
| Language | Type name |
|---|---|
 .NET | Amazon.CDK.AWS.Route53Resolver.Alpha.FirewallRuleGroupAssociationOptions |
 Go | github.com/aws/aws-cdk-go/awscdkroute53resolveralpha/v2#FirewallRuleGroupAssociationOptions |
 Java | software.amazon.awscdk.services.route53resolver.alpha.FirewallRuleGroupAssociationOptions |
 Python | aws_cdk.aws_route53resolver_alpha.FirewallRuleGroupAssociationOptions |
 TypeScript (source) | @aws-cdk/aws-route53resolver-alpha » FirewallRuleGroupAssociationOptions |
Options for a Firewall Rule Group Association.
Example
import * as ec2 from 'aws-cdk-lib/aws-ec2';
declare const ruleGroup: route53resolver.FirewallRuleGroup;
declare const myVpc: ec2.Vpc;
ruleGroup.associate('Association', {
priority: 101,
vpc: myVpc,
})
Properties
| Name | Type | Description |
|---|---|---|
| priority | number | The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC. |
| vpc | IVpc | The VPC that to associate with the rule group. |
| mutation | boolean | If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections. |
| name? | string | The name of the association. |
priority
Type:
number
The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC.
DNS Firewall filters VPC traffic starting from rule group with the lowest numeric priority setting.
This value must be greater than 100 and less than 9,000
vpc
Type:
IVpc
The VPC that to associate with the rule group.
mutationProtection?
Type:
boolean
(optional, default: mutation protection is disabled; the association can be modified or removed)
If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections.
Note that mutation protection also blocks CloudFormation from updating or deleting the association, so leave it disabled for associations whose lifecycle is managed by this stack.
name?
Type:
string
(optional, default: a CloudFormation generated name)
The name of the association.