interface FirewallRuleGroupAssociationProps
| Language | Type name |
|---|---|
 .NET | Amazon.CDK.AWS.Route53Resolver.Alpha.FirewallRuleGroupAssociationProps |
 Go | github.com/aws/aws-cdk-go/awscdkroute53resolveralpha/v2#FirewallRuleGroupAssociationProps |
 Java | software.amazon.awscdk.services.route53resolver.alpha.FirewallRuleGroupAssociationProps |
 Python | aws_cdk.aws_route53resolver_alpha.FirewallRuleGroupAssociationProps |
 TypeScript (source) | @aws-cdk/aws-route53resolver-alpha » FirewallRuleGroupAssociationProps |
Implements
Firewall
Properties for a Firewall Rule Group Association.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';
import { aws_ec2 as ec2 } from 'aws-cdk-lib';
declare const firewallRuleGroup: route53resolver_alpha.FirewallRuleGroup;
declare const vpc: ec2.Vpc;
const firewallRuleGroupAssociationProps: route53resolver_alpha.FirewallRuleGroupAssociationProps = {
firewallRuleGroup: firewallRuleGroup,
priority: 123,
vpc: vpc,
// the properties below are optional
mutationProtection: false,
name: 'name',
};
Properties
| Name | Type | Description |
|---|---|---|
| firewall | IFirewall | The firewall rule group which must be associated. |
| priority | number | The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC. |
| vpc | IVpc | The VPC that to associate with the rule group. |
| mutation | boolean | If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections. |
| name? | string | The name of the association. |
firewallRuleGroup
Type:
IFirewall
The firewall rule group which must be associated.
priority
Type:
number
The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC.
DNS Firewall filters VPC traffic starting from rule group with the lowest numeric priority setting.
This value must be greater than 100 and less than 9,000
vpc
Type:
IVpc
The VPC that to associate with the rule group.
mutationProtection?
Type:
boolean
(optional, default: mutation protection is disabled; the association can be modified or removed)
If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections.
Note that mutation protection also blocks CloudFormation from updating or deleting the association, so leave it disabled for associations whose lifecycle is managed by this stack.
name?
Type:
string
(optional, default: a CloudFormation generated name)
The name of the association.