aws-sdk-route53resolver 1.104.0 → 1.105.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-route53resolver/client.rb +68 -22
- data/lib/aws-sdk-route53resolver/types.rb +118 -56
- data/lib/aws-sdk-route53resolver.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 98b89abeb865a640f7086f0320cdddc8d0f83e9ba3cd4e3df672c7ba3a725806
|
|
4
|
+
data.tar.gz: 5c1f622f399b6104e018f3dbb412733ac955b4678bbc5a4dbe94916543a2372a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: aa99290ebfc5175ba62d1df928503755b890bb214cf902a5dab7f63708c95916ba6da0a53baff8ad54720a0f525d16e1cfe8f1fe278caa5707f64de362353b45
|
|
7
|
+
data.tar.gz: acb619337a9f3af60087b0c9192c075bc22687e6a5a49f2e3d21cfe574b8f6f713c0bae5fbd68251daf5c51c95dd3ac9a887101860a120fd480adfb1d73a4cc1
|
data/CHANGELOG.md
CHANGED
|
@@ -1,6 +1,11 @@
|
|
|
1
1
|
Unreleased Changes
|
|
2
2
|
------------------
|
|
3
3
|
|
|
4
|
+
1.105.0 (2026-09-24)
|
|
5
|
+
------------------
|
|
6
|
+
|
|
7
|
+
* Feature - Documentation updates for Route 53 Resolver. Clarifies which Outpost Resolver operations apply to first-generation AWS Outposts and that Resolver is managed automatically on second-generation Outposts. Adds Local Network Interface subnet compatibility notes for Resolver endpoints.
|
|
8
|
+
|
|
4
9
|
1.104.0 (2026-09-11)
|
|
5
10
|
------------------
|
|
6
11
|
|
data/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.105.0
|
|
@@ -486,8 +486,9 @@ module Aws::Route53Resolver
|
|
|
486
486
|
#
|
|
487
487
|
# If the rule group contains any rule configured with the
|
|
488
488
|
# `PartnerThreatProtection` rule type, the calling account must hold an
|
|
489
|
-
# active
|
|
490
|
-
# subscription is missing, the association request is
|
|
489
|
+
# active Amazon Web Services Marketplace subscription to the named
|
|
490
|
+
# partner. If the subscription is missing, the association request is
|
|
491
|
+
# rejected.
|
|
491
492
|
#
|
|
492
493
|
# @option params [required, String] :creator_request_id
|
|
493
494
|
# A unique string that identifies the request and that allows failed
|
|
@@ -1117,8 +1118,8 @@ module Aws::Route53Resolver
|
|
|
1117
1118
|
# source must be supplied through the matching request field — they are
|
|
1118
1119
|
# mutually exclusive:
|
|
1119
1120
|
#
|
|
1120
|
-
# * `FirewallDomainListId` — match a customer-managed or
|
|
1121
|
-
# domain list.
|
|
1121
|
+
# * `FirewallDomainListId` — match a customer-managed or Amazon Web
|
|
1122
|
+
# Services-managed domain list.
|
|
1122
1123
|
#
|
|
1123
1124
|
# * `DnsThreatProtection` — match a built-in DNS Firewall Advanced
|
|
1124
1125
|
# threat detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
@@ -1127,8 +1128,8 @@ module Aws::Route53Resolver
|
|
|
1127
1128
|
# ListFirewallRuleTypes: `FirewallAdvancedContentCategory`,
|
|
1128
1129
|
# `FirewallAdvancedThreatCategory`, `DnsThreatProtection`, or
|
|
1129
1130
|
# `PartnerThreatProtection`. The `PartnerThreatProtection` variant
|
|
1130
|
-
# requires an active
|
|
1131
|
-
# product.
|
|
1131
|
+
# requires an active Amazon Web Services Marketplace subscription to
|
|
1132
|
+
# the named partner product.
|
|
1132
1133
|
#
|
|
1133
1134
|
# For rules that require asynchronous provisioning (today, the
|
|
1134
1135
|
# `PartnerThreatProtection` rule type), the rule's `Status` begins at
|
|
@@ -1308,18 +1309,19 @@ module Aws::Route53Resolver
|
|
|
1308
1309
|
# exclusive with the top-level `FirewallDomainListId` and
|
|
1309
1310
|
# `DnsThreatProtection` fields. Use one of:
|
|
1310
1311
|
#
|
|
1311
|
-
# * `FirewallAdvancedContentCategory` — match an
|
|
1312
|
-
# category (for example,
|
|
1312
|
+
# * `FirewallAdvancedContentCategory` — match an Amazon Web
|
|
1313
|
+
# Services-managed content category (for example,
|
|
1314
|
+
# `VIOLENCE_AND_HATE_SPEECH`).
|
|
1313
1315
|
#
|
|
1314
|
-
# * `FirewallAdvancedThreatCategory` — match an
|
|
1315
|
-
# threat category (for example, `PHISHING`).
|
|
1316
|
+
# * `FirewallAdvancedThreatCategory` — match an Amazon Web
|
|
1317
|
+
# Services-managed advanced threat category (for example, `PHISHING`).
|
|
1316
1318
|
#
|
|
1317
1319
|
# * `DnsThreatProtection` — match a built-in DNS Firewall Advanced
|
|
1318
1320
|
# threat detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
1319
1321
|
#
|
|
1320
1322
|
# * `PartnerThreatProtection` — match a third-party threat feed
|
|
1321
|
-
# delivered through
|
|
1322
|
-
# active subscription on the calling account.
|
|
1323
|
+
# delivered through Amazon Web Services Marketplace. The selected
|
|
1324
|
+
# partner must be an active subscription on the calling account.
|
|
1323
1325
|
#
|
|
1324
1326
|
# To enumerate the values supported in your account, call
|
|
1325
1327
|
# ListFirewallRuleTypes.
|
|
@@ -1459,6 +1461,12 @@ module Aws::Route53Resolver
|
|
|
1459
1461
|
|
|
1460
1462
|
# Creates a Route 53 Resolver on an Outpost.
|
|
1461
1463
|
#
|
|
1464
|
+
# <note markdown="1"> This operation applies to first-generation Outposts only. On
|
|
1465
|
+
# second-generation Outposts, Resolver is enabled by default and managed
|
|
1466
|
+
# automatically by Amazon Web Services, so you don't need to create it.
|
|
1467
|
+
#
|
|
1468
|
+
# </note>
|
|
1469
|
+
#
|
|
1462
1470
|
# @option params [required, String] :creator_request_id
|
|
1463
1471
|
# A unique string that identifies the request and that allows failed
|
|
1464
1472
|
# requests to be retried without the risk of running the operation
|
|
@@ -1591,10 +1599,32 @@ module Aws::Route53Resolver
|
|
|
1591
1599
|
#
|
|
1592
1600
|
# </note>
|
|
1593
1601
|
#
|
|
1602
|
+
# We recommend using [VPC Resolver on Outposts][1] to create endpoints
|
|
1603
|
+
# on Outposts Racks.
|
|
1604
|
+
#
|
|
1605
|
+
# Outposts subnets with [Local Network Interface (LNI)][2] enabled are
|
|
1606
|
+
# not compatible with Route 53 Resolver endpoints. If you enable LNI on
|
|
1607
|
+
# a subnet that contains Route 53 Resolver endpoint elastic network
|
|
1608
|
+
# interfaces (ENIs), those ENIs will stop functioning. For more
|
|
1609
|
+
# information, see [Subnet compatibility for Resolver endpoints][3] in
|
|
1610
|
+
# the *Amazon Route 53 Developer Guide*.
|
|
1611
|
+
#
|
|
1612
|
+
#
|
|
1613
|
+
#
|
|
1614
|
+
# [1]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/outpost-resolver-getting-started.html
|
|
1615
|
+
# [2]: https://docs.aws.amazon.com/outposts/latest/server-userguide/local-network-interface.html
|
|
1616
|
+
# [3]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/best-practices-resolver.html#best-practices-resolver-subnet-compatibility
|
|
1617
|
+
#
|
|
1594
1618
|
# @option params [String] :outpost_arn
|
|
1595
1619
|
# The Amazon Resource Name (ARN) of the Outpost. If you specify this,
|
|
1596
1620
|
# you must also specify a value for the `PreferredInstanceType`.
|
|
1597
1621
|
#
|
|
1622
|
+
# <note markdown="1"> Resolver endpoints on Outposts are supported on first-generation
|
|
1623
|
+
# Outposts only. Inbound and outbound Resolver endpoints aren't
|
|
1624
|
+
# supported on second-generation Outposts.
|
|
1625
|
+
#
|
|
1626
|
+
# </note>
|
|
1627
|
+
#
|
|
1598
1628
|
# @option params [String] :preferred_instance_type
|
|
1599
1629
|
# The instance type. If you specify this, you must also specify a value
|
|
1600
1630
|
# for the `OutpostArn`.
|
|
@@ -2185,6 +2215,14 @@ module Aws::Route53Resolver
|
|
|
2185
2215
|
|
|
2186
2216
|
# Deletes a Resolver on the Outpost.
|
|
2187
2217
|
#
|
|
2218
|
+
# <note markdown="1"> This operation applies to first-generation Outposts only. On
|
|
2219
|
+
# second-generation Outposts, Resolver is managed automatically by
|
|
2220
|
+
# Amazon Web Services and can't be deleted directly. To opt out of
|
|
2221
|
+
# Resolver on second-generation Outposts, contact Amazon Web Services
|
|
2222
|
+
# Support.
|
|
2223
|
+
#
|
|
2224
|
+
# </note>
|
|
2225
|
+
#
|
|
2188
2226
|
# @option params [required, String] :id
|
|
2189
2227
|
# A unique string that identifies the Resolver on the Outpost.
|
|
2190
2228
|
#
|
|
@@ -3561,9 +3599,10 @@ module Aws::Route53Resolver
|
|
|
3561
3599
|
# `DnsThreatProtection`, and `PartnerThreatProtection`. When a returned
|
|
3562
3600
|
# definition's variant requires an external subscription (currently
|
|
3563
3601
|
# only `PartnerThreatProtection`), the response also includes a
|
|
3564
|
-
# SubscriptionInfo identifying the
|
|
3565
|
-
# it; absence of `SubscriptionInfo` means the variant
|
|
3566
|
-
# by
|
|
3602
|
+
# SubscriptionInfo identifying the Amazon Web Services Marketplace
|
|
3603
|
+
# product that backs it; absence of `SubscriptionInfo` means the variant
|
|
3604
|
+
# is fully managed by Amazon Web Services and requires no separate
|
|
3605
|
+
# subscription.
|
|
3567
3606
|
#
|
|
3568
3607
|
# @option params [String] :rule_type
|
|
3569
3608
|
# An optional filter that restricts the response to a single
|
|
@@ -5058,18 +5097,19 @@ module Aws::Route53Resolver
|
|
|
5058
5097
|
# exclusive with the top-level `FirewallDomainListId` and
|
|
5059
5098
|
# `DnsThreatProtection` fields. Use one of:
|
|
5060
5099
|
#
|
|
5061
|
-
# * `FirewallAdvancedContentCategory` — match an
|
|
5062
|
-
# category (for example,
|
|
5100
|
+
# * `FirewallAdvancedContentCategory` — match an Amazon Web
|
|
5101
|
+
# Services-managed content category (for example,
|
|
5102
|
+
# `VIOLENCE_AND_HATE_SPEECH`).
|
|
5063
5103
|
#
|
|
5064
|
-
# * `FirewallAdvancedThreatCategory` — match an
|
|
5065
|
-
# threat category (for example, `PHISHING`).
|
|
5104
|
+
# * `FirewallAdvancedThreatCategory` — match an Amazon Web
|
|
5105
|
+
# Services-managed advanced threat category (for example, `PHISHING`).
|
|
5066
5106
|
#
|
|
5067
5107
|
# * `DnsThreatProtection` — match a built-in DNS Firewall Advanced
|
|
5068
5108
|
# threat detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
5069
5109
|
#
|
|
5070
5110
|
# * `PartnerThreatProtection` — match a third-party threat feed
|
|
5071
|
-
# delivered through
|
|
5072
|
-
# active subscription on the calling account.
|
|
5111
|
+
# delivered through Amazon Web Services Marketplace. The selected
|
|
5112
|
+
# partner must be an active subscription on the calling account.
|
|
5073
5113
|
#
|
|
5074
5114
|
# To enumerate the values supported in your account, call
|
|
5075
5115
|
# ListFirewallRuleTypes.
|
|
@@ -5215,6 +5255,12 @@ module Aws::Route53Resolver
|
|
|
5215
5255
|
# You can use `UpdateOutpostResolver` to update the instance count,
|
|
5216
5256
|
# type, or name of a Resolver on an Outpost.
|
|
5217
5257
|
#
|
|
5258
|
+
# <note markdown="1"> This operation applies to first-generation Outposts only. On
|
|
5259
|
+
# second-generation Outposts, Resolver is managed automatically by
|
|
5260
|
+
# Amazon Web Services and can't be updated directly.
|
|
5261
|
+
#
|
|
5262
|
+
# </note>
|
|
5263
|
+
#
|
|
5218
5264
|
# @option params [required, String] :id
|
|
5219
5265
|
# A unique string that identifies Resolver on an Outpost.
|
|
5220
5266
|
#
|
|
@@ -5618,7 +5664,7 @@ module Aws::Route53Resolver
|
|
|
5618
5664
|
tracer: tracer
|
|
5619
5665
|
)
|
|
5620
5666
|
context[:gem_name] = 'aws-sdk-route53resolver'
|
|
5621
|
-
context[:gem_version] = '1.
|
|
5667
|
+
context[:gem_version] = '1.105.0'
|
|
5622
5668
|
Seahorse::Client::Request.new(handlers, context)
|
|
5623
5669
|
end
|
|
5624
5670
|
|
|
@@ -614,18 +614,20 @@ module Aws::Route53Resolver
|
|
|
614
614
|
# exclusive with the top-level `FirewallDomainListId` and
|
|
615
615
|
# `DnsThreatProtection` fields. Use one of:
|
|
616
616
|
#
|
|
617
|
-
# * `FirewallAdvancedContentCategory` — match an
|
|
618
|
-
# category (for example,
|
|
617
|
+
# * `FirewallAdvancedContentCategory` — match an Amazon Web
|
|
618
|
+
# Services-managed content category (for example,
|
|
619
|
+
# `VIOLENCE_AND_HATE_SPEECH`).
|
|
619
620
|
#
|
|
620
|
-
# * `FirewallAdvancedThreatCategory` — match an
|
|
621
|
-
# threat category (for example,
|
|
621
|
+
# * `FirewallAdvancedThreatCategory` — match an Amazon Web
|
|
622
|
+
# Services-managed advanced threat category (for example,
|
|
623
|
+
# `PHISHING`).
|
|
622
624
|
#
|
|
623
625
|
# * `DnsThreatProtection` — match a built-in DNS Firewall Advanced
|
|
624
626
|
# threat detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
625
627
|
#
|
|
626
628
|
# * `PartnerThreatProtection` — match a third-party threat feed
|
|
627
|
-
# delivered through
|
|
628
|
-
# active subscription on the calling account.
|
|
629
|
+
# delivered through Amazon Web Services Marketplace. The selected
|
|
630
|
+
# partner must be an active subscription on the calling account.
|
|
629
631
|
#
|
|
630
632
|
# To enumerate the values supported in your account, call
|
|
631
633
|
# ListFirewallRuleTypes.
|
|
@@ -883,18 +885,20 @@ module Aws::Route53Resolver
|
|
|
883
885
|
# exclusive with the top-level `FirewallDomainListId` and
|
|
884
886
|
# `DnsThreatProtection` fields. Use one of:
|
|
885
887
|
#
|
|
886
|
-
# * `FirewallAdvancedContentCategory` — match an
|
|
887
|
-
# category (for example,
|
|
888
|
+
# * `FirewallAdvancedContentCategory` — match an Amazon Web
|
|
889
|
+
# Services-managed content category (for example,
|
|
890
|
+
# `VIOLENCE_AND_HATE_SPEECH`).
|
|
888
891
|
#
|
|
889
|
-
# * `FirewallAdvancedThreatCategory` — match an
|
|
890
|
-
# threat category (for example,
|
|
892
|
+
# * `FirewallAdvancedThreatCategory` — match an Amazon Web
|
|
893
|
+
# Services-managed advanced threat category (for example,
|
|
894
|
+
# `PHISHING`).
|
|
891
895
|
#
|
|
892
896
|
# * `DnsThreatProtection` — match a built-in DNS Firewall Advanced
|
|
893
897
|
# threat detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
894
898
|
#
|
|
895
899
|
# * `PartnerThreatProtection` — match a third-party threat feed
|
|
896
|
-
# delivered through
|
|
897
|
-
# active subscription on the calling account.
|
|
900
|
+
# delivered through Amazon Web Services Marketplace. The selected
|
|
901
|
+
# partner must be an active subscription on the calling account.
|
|
898
902
|
#
|
|
899
903
|
# To enumerate the values supported in your account, call
|
|
900
904
|
# ListFirewallRuleTypes.
|
|
@@ -1049,11 +1053,33 @@ module Aws::Route53Resolver
|
|
|
1049
1053
|
# least two.
|
|
1050
1054
|
#
|
|
1051
1055
|
# </note>
|
|
1056
|
+
#
|
|
1057
|
+
# We recommend using [VPC Resolver on Outposts][1] to create endpoints
|
|
1058
|
+
# on Outposts Racks.
|
|
1059
|
+
#
|
|
1060
|
+
# Outposts subnets with [Local Network Interface (LNI)][2] enabled are
|
|
1061
|
+
# not compatible with Route 53 Resolver endpoints. If you enable LNI
|
|
1062
|
+
# on a subnet that contains Route 53 Resolver endpoint elastic network
|
|
1063
|
+
# interfaces (ENIs), those ENIs will stop functioning. For more
|
|
1064
|
+
# information, see [Subnet compatibility for Resolver endpoints][3] in
|
|
1065
|
+
# the *Amazon Route 53 Developer Guide*.
|
|
1066
|
+
#
|
|
1067
|
+
#
|
|
1068
|
+
#
|
|
1069
|
+
# [1]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/outpost-resolver-getting-started.html
|
|
1070
|
+
# [2]: https://docs.aws.amazon.com/outposts/latest/server-userguide/local-network-interface.html
|
|
1071
|
+
# [3]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/best-practices-resolver.html#best-practices-resolver-subnet-compatibility
|
|
1052
1072
|
# @return [Array<Types::IpAddressRequest>]
|
|
1053
1073
|
#
|
|
1054
1074
|
# @!attribute [rw] outpost_arn
|
|
1055
1075
|
# The Amazon Resource Name (ARN) of the Outpost. If you specify this,
|
|
1056
1076
|
# you must also specify a value for the `PreferredInstanceType`.
|
|
1077
|
+
#
|
|
1078
|
+
# <note markdown="1"> Resolver endpoints on Outposts are supported on first-generation
|
|
1079
|
+
# Outposts only. Inbound and outbound Resolver endpoints aren't
|
|
1080
|
+
# supported on second-generation Outposts.
|
|
1081
|
+
#
|
|
1082
|
+
# </note>
|
|
1057
1083
|
# @return [String]
|
|
1058
1084
|
#
|
|
1059
1085
|
# @!attribute [rw] preferred_instance_type
|
|
@@ -2409,17 +2435,17 @@ module Aws::Route53Resolver
|
|
|
2409
2435
|
# union — exactly one of its members will be populated. Possible
|
|
2410
2436
|
# members are:
|
|
2411
2437
|
#
|
|
2412
|
-
# * `FirewallAdvancedContentCategory` — an
|
|
2413
|
-
# category (for example, `VIOLENCE_AND_HATE_SPEECH`).
|
|
2438
|
+
# * `FirewallAdvancedContentCategory` — an Amazon Web Services-managed
|
|
2439
|
+
# content category (for example, `VIOLENCE_AND_HATE_SPEECH`).
|
|
2414
2440
|
#
|
|
2415
|
-
# * `FirewallAdvancedThreatCategory` — an
|
|
2416
|
-
# category (for example, `PHISHING`).
|
|
2441
|
+
# * `FirewallAdvancedThreatCategory` — an Amazon Web Services-managed
|
|
2442
|
+
# advanced threat category (for example, `PHISHING`).
|
|
2417
2443
|
#
|
|
2418
2444
|
# * `DnsThreatProtection` — a built-in DNS Firewall Advanced threat
|
|
2419
2445
|
# detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
2420
2446
|
#
|
|
2421
2447
|
# * `PartnerThreatProtection` — a third-party threat feed delivered
|
|
2422
|
-
# through
|
|
2448
|
+
# through Amazon Web Services Marketplace.
|
|
2423
2449
|
#
|
|
2424
2450
|
# To enumerate the values supported in your account, call
|
|
2425
2451
|
# ListFirewallRuleTypes.
|
|
@@ -2430,8 +2456,8 @@ module Aws::Route53Resolver
|
|
|
2430
2456
|
#
|
|
2431
2457
|
# * `CREATING` — DNS Firewall is provisioning the rule. Rules created
|
|
2432
2458
|
# with the `PartnerThreatProtection` rule type begin in this state
|
|
2433
|
-
# while DNS Firewall verifies the calling account's
|
|
2434
|
-
# entitlement.
|
|
2459
|
+
# while DNS Firewall verifies the calling account's Amazon Web
|
|
2460
|
+
# Services Marketplace entitlement.
|
|
2435
2461
|
#
|
|
2436
2462
|
# * `COMPLETE` — The rule is provisioned and enforcing matches.
|
|
2437
2463
|
#
|
|
@@ -2709,22 +2735,23 @@ module Aws::Route53Resolver
|
|
|
2709
2735
|
#
|
|
2710
2736
|
# @!attribute [rw] partner_threat_protection
|
|
2711
2737
|
# Configures the rule to match a third-party threat feed delivered
|
|
2712
|
-
# through
|
|
2713
|
-
# subscription to the partner product named in
|
|
2714
|
-
# subscription is missing or revoked, the rule is
|
|
2715
|
-
# `Status` `CREATION_FAILED` and cannot be modified —
|
|
2716
|
-
# See PartnerThreatProtectionConfig.
|
|
2738
|
+
# through Amazon Web Services Marketplace. The calling account must
|
|
2739
|
+
# hold an active subscription to the partner product named in
|
|
2740
|
+
# `Partner`; if the subscription is missing or revoked, the rule is
|
|
2741
|
+
# created with `Status` `CREATION_FAILED` and cannot be modified —
|
|
2742
|
+
# only deleted. See PartnerThreatProtectionConfig.
|
|
2717
2743
|
# @return [Types::PartnerThreatProtectionConfig]
|
|
2718
2744
|
#
|
|
2719
2745
|
# @!attribute [rw] firewall_advanced_content_category
|
|
2720
|
-
# Configures the rule to match an
|
|
2721
|
-
# example, `VIOLENCE_AND_HATE_SPEECH`). See
|
|
2746
|
+
# Configures the rule to match an Amazon Web Services-managed content
|
|
2747
|
+
# category (for example, `VIOLENCE_AND_HATE_SPEECH`). See
|
|
2722
2748
|
# FirewallAdvancedContentCategoryConfig.
|
|
2723
2749
|
# @return [Types::FirewallAdvancedContentCategoryConfig]
|
|
2724
2750
|
#
|
|
2725
2751
|
# @!attribute [rw] firewall_advanced_threat_category
|
|
2726
|
-
# Configures the rule to match an
|
|
2727
|
-
# (for example, `PHISHING`). See
|
|
2752
|
+
# Configures the rule to match an Amazon Web Services-managed advanced
|
|
2753
|
+
# threat category (for example, `PHISHING`). See
|
|
2754
|
+
# FirewallAdvancedThreatCategoryConfig.
|
|
2728
2755
|
# @return [Types::FirewallAdvancedThreatCategoryConfig]
|
|
2729
2756
|
#
|
|
2730
2757
|
# @!attribute [rw] dns_threat_protection
|
|
@@ -2768,10 +2795,10 @@ module Aws::Route53Resolver
|
|
|
2768
2795
|
#
|
|
2769
2796
|
# @!attribute [rw] subscription_info
|
|
2770
2797
|
# For rule types that require an external subscription (today, only
|
|
2771
|
-
# the `PartnerThreatProtection` variant), describes the
|
|
2772
|
-
# Marketplace product that backs the rule type. Absent for
|
|
2773
|
-
# that are managed by
|
|
2774
|
-
# See SubscriptionInfo.
|
|
2798
|
+
# the `PartnerThreatProtection` variant), describes the Amazon Web
|
|
2799
|
+
# Services Marketplace product that backs the rule type. Absent for
|
|
2800
|
+
# rule types that are managed by Amazon Web Services and do not
|
|
2801
|
+
# require a separate subscription. See SubscriptionInfo.
|
|
2775
2802
|
# @return [Types::SubscriptionInfo]
|
|
2776
2803
|
#
|
|
2777
2804
|
# @see http://docs.aws.amazon.com/goto/WebAPI/route53resolver-2018-04-01/FirewallRuleTypeDefinition AWS API Documentation
|
|
@@ -3323,6 +3350,22 @@ module Aws::Route53Resolver
|
|
|
3323
3350
|
#
|
|
3324
3351
|
# @!attribute [rw] subnet_id
|
|
3325
3352
|
# The ID of the subnet that contains the IP address.
|
|
3353
|
+
#
|
|
3354
|
+
# We recommend using [VPC Resolver on Outposts][1] to create endpoints
|
|
3355
|
+
# on Outposts Racks.
|
|
3356
|
+
#
|
|
3357
|
+
# Outposts subnets with [Local Network Interface (LNI)][2] enabled are
|
|
3358
|
+
# not compatible with Route 53 Resolver endpoints. If you enable LNI
|
|
3359
|
+
# on a subnet that contains Route 53 Resolver endpoint elastic network
|
|
3360
|
+
# interfaces (ENIs), those ENIs will stop functioning. For more
|
|
3361
|
+
# information, see [Subnet compatibility for Resolver endpoints][3] in
|
|
3362
|
+
# the *Amazon Route 53 Developer Guide*.
|
|
3363
|
+
#
|
|
3364
|
+
#
|
|
3365
|
+
#
|
|
3366
|
+
# [1]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/outpost-resolver-getting-started.html
|
|
3367
|
+
# [2]: https://docs.aws.amazon.com/outposts/latest/server-userguide/local-network-interface.html
|
|
3368
|
+
# [3]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/best-practices-resolver.html#best-practices-resolver-subnet-compatibility
|
|
3326
3369
|
# @return [String]
|
|
3327
3370
|
#
|
|
3328
3371
|
# @!attribute [rw] ip
|
|
@@ -3422,9 +3465,22 @@ module Aws::Route53Resolver
|
|
|
3422
3465
|
# The ID of the subnet that includes the IP address that you want to
|
|
3423
3466
|
# update. To get this ID, use [GetResolverEndpoint][1].
|
|
3424
3467
|
#
|
|
3468
|
+
# We recommend using [VPC Resolver on Outposts][2] to create endpoints
|
|
3469
|
+
# on Outposts Racks.
|
|
3470
|
+
#
|
|
3471
|
+
# Outposts subnets with [Local Network Interface (LNI)][3] enabled are
|
|
3472
|
+
# not compatible with Route 53 Resolver endpoints. If you enable LNI
|
|
3473
|
+
# on a subnet that contains Route 53 Resolver endpoint elastic network
|
|
3474
|
+
# interfaces (ENIs), those ENIs will stop functioning. For more
|
|
3475
|
+
# information, see [Subnet compatibility for Resolver endpoints][4] in
|
|
3476
|
+
# the *Amazon Route 53 Developer Guide*.
|
|
3477
|
+
#
|
|
3425
3478
|
#
|
|
3426
3479
|
#
|
|
3427
3480
|
# [1]: https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_GetResolverEndpoint.html
|
|
3481
|
+
# [2]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/outpost-resolver-getting-started.html
|
|
3482
|
+
# [3]: https://docs.aws.amazon.com/outposts/latest/server-userguide/local-network-interface.html
|
|
3483
|
+
# [4]: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/best-practices-resolver.html#best-practices-resolver-subnet-compatibility
|
|
3428
3484
|
# @return [String]
|
|
3429
3485
|
#
|
|
3430
3486
|
# @!attribute [rw] ip
|
|
@@ -4736,13 +4792,14 @@ module Aws::Route53Resolver
|
|
|
4736
4792
|
# the partners available in your account, call ListFirewallRuleTypes
|
|
4737
4793
|
# with `RuleType` set to `PartnerThreatProtection` — each returned
|
|
4738
4794
|
# FirewallRuleTypeDefinition includes a SubscriptionInfo identifying the
|
|
4739
|
-
#
|
|
4795
|
+
# Amazon Web Services Marketplace product that backs it.
|
|
4740
4796
|
#
|
|
4741
4797
|
# @!attribute [rw] partner
|
|
4742
4798
|
# The identifier of the partner threat-protection product, exactly as
|
|
4743
4799
|
# returned in the `Value` field of a FirewallRuleTypeDefinition with
|
|
4744
4800
|
# `RuleType` set to `PartnerThreatProtection`. The calling account
|
|
4745
|
-
# must hold an active
|
|
4801
|
+
# must hold an active Amazon Web Services Marketplace subscription to
|
|
4802
|
+
# this product.
|
|
4746
4803
|
# @return [String]
|
|
4747
4804
|
#
|
|
4748
4805
|
# @see http://docs.aws.amazon.com/goto/WebAPI/route53resolver-2018-04-01/PartnerThreatProtectionConfig AWS API Documentation
|
|
@@ -5696,21 +5753,22 @@ module Aws::Route53Resolver
|
|
|
5696
5753
|
include Aws::Structure
|
|
5697
5754
|
end
|
|
5698
5755
|
|
|
5699
|
-
# Identifies the
|
|
5700
|
-
# rule type. Returned as part of
|
|
5701
|
-
# rule type variant requires an
|
|
5702
|
-
# named product.
|
|
5756
|
+
# Identifies the Amazon Web Services Marketplace product that backs a
|
|
5757
|
+
# partner-managed rule type. Returned as part of
|
|
5758
|
+
# FirewallRuleTypeDefinition when the rule type variant requires an
|
|
5759
|
+
# active customer subscription to the named product.
|
|
5703
5760
|
#
|
|
5704
5761
|
# @!attribute [rw] vendor_name
|
|
5705
|
-
# The name of the
|
|
5706
|
-
# partner threat-protection product (for example, `Palo
|
|
5707
|
-
# Networks`).
|
|
5762
|
+
# The name of the Amazon Web Services Marketplace seller (vendor) that
|
|
5763
|
+
# publishes the partner threat-protection product (for example, `Palo
|
|
5764
|
+
# Alto Networks`).
|
|
5708
5765
|
# @return [String]
|
|
5709
5766
|
#
|
|
5710
5767
|
# @!attribute [rw] product_id
|
|
5711
|
-
# The
|
|
5712
|
-
# threat-protection product. Use this value to verify or
|
|
5713
|
-
# calling account's subscription in
|
|
5768
|
+
# The Amazon Web Services Marketplace product identifier of the
|
|
5769
|
+
# partner threat-protection product. Use this value to verify or
|
|
5770
|
+
# manage the calling account's subscription in Amazon Web Services
|
|
5771
|
+
# Marketplace.
|
|
5714
5772
|
# @return [String]
|
|
5715
5773
|
#
|
|
5716
5774
|
# @see http://docs.aws.amazon.com/goto/WebAPI/route53resolver-2018-04-01/SubscriptionInfo AWS API Documentation
|
|
@@ -6189,18 +6247,20 @@ module Aws::Route53Resolver
|
|
|
6189
6247
|
# exclusive with the top-level `FirewallDomainListId` and
|
|
6190
6248
|
# `DnsThreatProtection` fields. Use one of:
|
|
6191
6249
|
#
|
|
6192
|
-
# * `FirewallAdvancedContentCategory` — match an
|
|
6193
|
-
# category (for example,
|
|
6250
|
+
# * `FirewallAdvancedContentCategory` — match an Amazon Web
|
|
6251
|
+
# Services-managed content category (for example,
|
|
6252
|
+
# `VIOLENCE_AND_HATE_SPEECH`).
|
|
6194
6253
|
#
|
|
6195
|
-
# * `FirewallAdvancedThreatCategory` — match an
|
|
6196
|
-
# threat category (for example,
|
|
6254
|
+
# * `FirewallAdvancedThreatCategory` — match an Amazon Web
|
|
6255
|
+
# Services-managed advanced threat category (for example,
|
|
6256
|
+
# `PHISHING`).
|
|
6197
6257
|
#
|
|
6198
6258
|
# * `DnsThreatProtection` — match a built-in DNS Firewall Advanced
|
|
6199
6259
|
# threat detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
6200
6260
|
#
|
|
6201
6261
|
# * `PartnerThreatProtection` — match a third-party threat feed
|
|
6202
|
-
# delivered through
|
|
6203
|
-
# active subscription on the calling account.
|
|
6262
|
+
# delivered through Amazon Web Services Marketplace. The selected
|
|
6263
|
+
# partner must be an active subscription on the calling account.
|
|
6204
6264
|
#
|
|
6205
6265
|
# To enumerate the values supported in your account, call
|
|
6206
6266
|
# ListFirewallRuleTypes.
|
|
@@ -6454,18 +6514,20 @@ module Aws::Route53Resolver
|
|
|
6454
6514
|
# exclusive with the top-level `FirewallDomainListId` and
|
|
6455
6515
|
# `DnsThreatProtection` fields. Use one of:
|
|
6456
6516
|
#
|
|
6457
|
-
# * `FirewallAdvancedContentCategory` — match an
|
|
6458
|
-
# category (for example,
|
|
6517
|
+
# * `FirewallAdvancedContentCategory` — match an Amazon Web
|
|
6518
|
+
# Services-managed content category (for example,
|
|
6519
|
+
# `VIOLENCE_AND_HATE_SPEECH`).
|
|
6459
6520
|
#
|
|
6460
|
-
# * `FirewallAdvancedThreatCategory` — match an
|
|
6461
|
-
# threat category (for example,
|
|
6521
|
+
# * `FirewallAdvancedThreatCategory` — match an Amazon Web
|
|
6522
|
+
# Services-managed advanced threat category (for example,
|
|
6523
|
+
# `PHISHING`).
|
|
6462
6524
|
#
|
|
6463
6525
|
# * `DnsThreatProtection` — match a built-in DNS Firewall Advanced
|
|
6464
6526
|
# threat detector (`DGA`, `DNS_TUNNELING`, or `DICTIONARY_DGA`).
|
|
6465
6527
|
#
|
|
6466
6528
|
# * `PartnerThreatProtection` — match a third-party threat feed
|
|
6467
|
-
# delivered through
|
|
6468
|
-
# active subscription on the calling account.
|
|
6529
|
+
# delivered through Amazon Web Services Marketplace. The selected
|
|
6530
|
+
# partner must be an active subscription on the calling account.
|
|
6469
6531
|
#
|
|
6470
6532
|
# To enumerate the values supported in your account, call
|
|
6471
6533
|
# ListFirewallRuleTypes.
|