@aws-cdk/aws-route53resolver-alpha 2.3.0-alpha.0 → 2.7.0-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.3.0",
+    "aws-cdk-lib": "^2.7.0",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -2855,7 +2855,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/aws/aws-cdk",
-  "jsiiVersion": "1.47.0 (build 86d2c33)",
+  "jsiiVersion": "1.50.0 (build d1830a4)",
   "keywords": [
     "aws",
     "cdk",
@@ -2868,12 +2868,15 @@
       "compiledWithDeprecationWarnings": true,
       "pacmak": {
         "hasDefaultInterfaces": true
+      },
+      "rosetta": {
+        "strict": true
       }
     }
   },
   "name": "@aws-cdk/aws-route53resolver-alpha",
   "readme": {
-    "markdown": "# Amazon Route53 Resolver Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## DNS Firewall\n\nWith Route 53 Resolver DNS Firewall, you can filter and regulate outbound DNS traffic for your\nvirtual private connections (VPCs). To do this, you create reusable collections of filtering rules\nin DNS Firewall rule groups and associate the rule groups to your VPC.\n\nDNS Firewall provides protection for outbound DNS requests from your VPCs. These requests route\nthrough Resolver for domain name resolution. A primary use of DNS Firewall protections is to help\nprevent DNS exfiltration of your data. DNS exfiltration can happen when a bad actor compromises\nan application instance in your VPC and then uses DNS lookup to send data out of the VPC to a domain\nthat they control. With DNS Firewall, you can monitor and control the domains that your applications\ncan query. You can deny access to the domains that you know to be bad and allow all other queries\nto pass through. Alternately, you can deny access to all domains except for the ones that you\nexplicitly trust.\n\n### Domain lists\n\nDomain lists can be created using a list of strings, a text file stored in Amazon S3 or a local\ntext file:\n\n```ts\nconst blockList = new route53resolver.FirewallDomainList(this, 'BlockList', {\n  domains: route53resolver.FirewallDomains.fromList(['bad-domain.com', 'bot-domain.net']),\n});\n\nconst s3List = new route53resolver.FirewallDomainList(this, 'S3List', {\n  domains: route53resolver.FirewallDomains.fromS3Url('s3://bucket/prefix/object'),\n});\n\nconst assetList = new route53resolver.FirewallDomainList(this, 'AssetList', {\n  domains: route53resolver.FirewallDomains.fromAsset('/path/to/domains.txt'),\n});\n```\n\nThe file must be a text file and must contain a single domain per line.\n\nUse `FirewallDomainList.fromFirewallDomainListId()` to import an existing or [AWS managed domain list](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-dns-firewall-managed-domain-lists.html):\n\n```ts\n// AWSManagedDomainsMalwareDomainList in us-east-1\nconst malwareList = route53resolver.FirewallDomainList.fromFirewallDomainListId(this, 'Malware', 'rslvr-fdl-2c46f2ecbfec4dcc');\n```\n\n### Rule group\n\nCreate a rule group:\n\n```ts\nnew route53resolver.FirewallRuleGroup(this, 'RuleGroup', {\n  rules: [\n    {\n      priority: 10,\n      firewallDomainList: myBlockList,\n      // block and reply with NODATA\n      action: route53resolver.FirewallRuleAction.block(),\n    },\n  ],\n});\n```\n\nRules can be added at construction time or using `addRule()`:\n\n```ts\nruleGroup.addRule({\n  priority: 10,\n  firewallDomainList: blockList,\n  // block and reply with NXDOMAIN\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.nxDomain()),\n});\n\nruleGroup.addRule({\n  priority: 20,\n  firewallDomainList: blockList,\n  // block and override DNS response with a custom domain\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.override('amazon.com')),\n});\n```\n\nUse `associate()` to associate a rule group with a VPC:\n\n```ts\nruleGroup.associate({\n  priority: 101,\n  vpc: myVpc,\n})\n```\n"
+    "markdown": "# Amazon Route53 Resolver Construct Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n## DNS Firewall\n\nWith Route 53 Resolver DNS Firewall, you can filter and regulate outbound DNS traffic for your\nvirtual private connections (VPCs). To do this, you create reusable collections of filtering rules\nin DNS Firewall rule groups and associate the rule groups to your VPC.\n\nDNS Firewall provides protection for outbound DNS requests from your VPCs. These requests route\nthrough Resolver for domain name resolution. A primary use of DNS Firewall protections is to help\nprevent DNS exfiltration of your data. DNS exfiltration can happen when a bad actor compromises\nan application instance in your VPC and then uses DNS lookup to send data out of the VPC to a domain\nthat they control. With DNS Firewall, you can monitor and control the domains that your applications\ncan query. You can deny access to the domains that you know to be bad and allow all other queries\nto pass through. Alternately, you can deny access to all domains except for the ones that you\nexplicitly trust.\n\n### Domain lists\n\nDomain lists can be created using a list of strings, a text file stored in Amazon S3 or a local\ntext file:\n\n```ts\nconst blockList = new route53resolver.FirewallDomainList(this, 'BlockList', {\n  domains: route53resolver.FirewallDomains.fromList(['bad-domain.com', 'bot-domain.net']),\n});\n\nconst s3List = new route53resolver.FirewallDomainList(this, 'S3List', {\n  domains: route53resolver.FirewallDomains.fromS3Url('s3://bucket/prefix/object'),\n});\n\nconst assetList = new route53resolver.FirewallDomainList(this, 'AssetList', {\n  domains: route53resolver.FirewallDomains.fromAsset('/path/to/domains.txt'),\n});\n```\n\nThe file must be a text file and must contain a single domain per line.\n\nUse `FirewallDomainList.fromFirewallDomainListId()` to import an existing or [AWS managed domain list](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-dns-firewall-managed-domain-lists.html):\n\n```ts\n// AWSManagedDomainsMalwareDomainList in us-east-1\nconst malwareList = route53resolver.FirewallDomainList.fromFirewallDomainListId(\n  this,\n  'Malware',\n  'rslvr-fdl-2c46f2ecbfec4dcc',\n);\n```\n\n### Rule group\n\nCreate a rule group:\n\n```ts\ndeclare const myBlockList: route53resolver.FirewallDomainList;\nnew route53resolver.FirewallRuleGroup(this, 'RuleGroup', {\n  rules: [\n    {\n      priority: 10,\n      firewallDomainList: myBlockList,\n      // block and reply with NODATA\n      action: route53resolver.FirewallRuleAction.block(),\n    },\n  ],\n});\n```\n\nRules can be added at construction time or using `addRule()`:\n\n```ts\ndeclare const myBlockList: route53resolver.FirewallDomainList;\ndeclare const ruleGroup: route53resolver.FirewallRuleGroup;\n\nruleGroup.addRule({\n  priority: 10,\n  firewallDomainList: myBlockList,\n  // block and reply with NXDOMAIN\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.nxDomain()),\n});\n\nruleGroup.addRule({\n  priority: 20,\n  firewallDomainList: myBlockList,\n  // block and override DNS response with a custom domain\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.override('amazon.com')),\n});\n```\n\nUse `associate()` to associate a rule group with a VPC:\n\n```ts\nimport * as ec2 from 'aws-cdk-lib/aws-ec2';\n\ndeclare const ruleGroup: route53resolver.FirewallRuleGroup;\ndeclare const myVpc: ec2.Vpc;\n\nruleGroup.associate('Association', {\n  priority: 101,\n  vpc: myVpc,\n})\n```\n"
   },
   "repository": {
     "directory": "packages/individual-packages/aws-route53resolver",
@@ -2915,12 +2918,12 @@
       "abstract": true,
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "docs": {
-        "stability": "experimental",
-        "summary": "The way that you want DNS Firewall to block the request.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\nconst dnsBlockResponse = route53resolver_alpha.DnsBlockResponse.noData();",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "declare const myBlockList: route53resolver.FirewallDomainList;\ndeclare const ruleGroup: route53resolver.FirewallRuleGroup;\n\nruleGroup.addRule({\n  priority: 10,\n  firewallDomainList: myBlockList,\n  // block and reply with NXDOMAIN\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.nxDomain()),\n});\n\nruleGroup.addRule({\n  priority: 20,\n  firewallDomainList: myBlockList,\n  // block and override DNS response with a custom domain\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.override('amazon.com')),\n});",
+        "stability": "experimental",
+        "summary": "The way that you want DNS Firewall to block the request."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.DnsBlockResponse",
       "initializer": {
@@ -3086,7 +3089,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Domains configuration.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\nconst domainsConfig: route53resolver_alpha.DomainsConfig = {\n  domainFileUrl: 'domainFileUrl',\n  domains: ['domains'],\n};",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\nconst domainsConfig: route53resolver_alpha.DomainsConfig = {\n  domainFileUrl: 'domainFileUrl',\n  domains: ['domains'],\n};",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
@@ -3148,12 +3151,12 @@
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "base": "aws-cdk-lib.Resource",
       "docs": {
-        "stability": "experimental",
-        "summary": "A Firewall Domain List.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\ndeclare const firewallDomains: route53resolver_alpha.FirewallDomains;\n\nconst firewallDomainList = new route53resolver_alpha.FirewallDomainList(this, 'MyFirewallDomainList', {\n  domains: firewallDomains,\n\n  // the properties below are optional\n  name: 'name',\n});",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "const blockList = new route53resolver.FirewallDomainList(this, 'BlockList', {\n  domains: route53resolver.FirewallDomains.fromList(['bad-domain.com', 'bot-domain.net']),\n});\n\nconst s3List = new route53resolver.FirewallDomainList(this, 'S3List', {\n  domains: route53resolver.FirewallDomains.fromS3Url('s3://bucket/prefix/object'),\n});\n\nconst assetList = new route53resolver.FirewallDomainList(this, 'AssetList', {\n  domains: route53resolver.FirewallDomains.fromAsset('/path/to/domains.txt'),\n});",
+        "stability": "experimental",
+        "summary": "A Firewall Domain List."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallDomainList",
       "initializer": {
@@ -3402,12 +3405,12 @@
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "datatype": true,
       "docs": {
-        "stability": "experimental",
-        "summary": "Properties for a Firewall Domain List.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\ndeclare const firewallDomains: route53resolver_alpha.FirewallDomains;\n\nconst firewallDomainListProps: route53resolver_alpha.FirewallDomainListProps = {\n  domains: firewallDomains,\n\n  // the properties below are optional\n  name: 'name',\n};",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "const blockList = new route53resolver.FirewallDomainList(this, 'BlockList', {\n  domains: route53resolver.FirewallDomains.fromList(['bad-domain.com', 'bot-domain.net']),\n});\n\nconst s3List = new route53resolver.FirewallDomainList(this, 'S3List', {\n  domains: route53resolver.FirewallDomains.fromS3Url('s3://bucket/prefix/object'),\n});\n\nconst assetList = new route53resolver.FirewallDomainList(this, 'AssetList', {\n  domains: route53resolver.FirewallDomains.fromAsset('/path/to/domains.txt'),\n});",
+        "stability": "experimental",
+        "summary": "Properties for a Firewall Domain List."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallDomainListProps",
       "kind": "interface",
@@ -3458,12 +3461,12 @@
       "abstract": true,
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "docs": {
-        "stability": "experimental",
-        "summary": "A list of domains.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\nconst firewallDomains = route53resolver_alpha.FirewallDomains.fromAsset('assetPath');",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "const blockList = new route53resolver.FirewallDomainList(this, 'BlockList', {\n  domains: route53resolver.FirewallDomains.fromList(['bad-domain.com', 'bot-domain.net']),\n});\n\nconst s3List = new route53resolver.FirewallDomainList(this, 'S3List', {\n  domains: route53resolver.FirewallDomains.fromS3Url('s3://bucket/prefix/object'),\n});\n\nconst assetList = new route53resolver.FirewallDomainList(this, 'AssetList', {\n  domains: route53resolver.FirewallDomains.fromAsset('/path/to/domains.txt'),\n});",
+        "stability": "experimental",
+        "summary": "A list of domains."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallDomains",
       "initializer": {
@@ -3477,31 +3480,6 @@
         "line": 40
       },
       "methods": [
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental",
-            "summary": "Binds the domains to a domain list."
-          },
-          "locationInModule": {
-            "filename": "lib/firewall-domain-list.ts",
-            "line": 120
-          },
-          "name": "bind",
-          "parameters": [
-            {
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-route53resolver-alpha.DomainsConfig"
-            }
-          }
-        },
         {
           "docs": {
             "remarks": "The file must be a text file (`.txt` extension) and must contain a single\ndomain per line. It will be uploaded to S3.",
@@ -3630,6 +3608,31 @@
             }
           },
           "static": true
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Binds the domains to a domain list."
+          },
+          "locationInModule": {
+            "filename": "lib/firewall-domain-list.ts",
+            "line": 120
+          },
+          "name": "bind",
+          "parameters": [
+            {
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-route53resolver-alpha.DomainsConfig"
+            }
+          }
         }
       ],
       "name": "FirewallDomains",
@@ -3639,12 +3642,12 @@
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "datatype": true,
       "docs": {
-        "stability": "experimental",
-        "summary": "A Firewall Rule.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\ndeclare const firewallDomainList: route53resolver_alpha.FirewallDomainList;\ndeclare const firewallRuleAction: route53resolver_alpha.FirewallRuleAction;\n\nconst firewallRule: route53resolver_alpha.FirewallRule = {\n  action: firewallRuleAction,\n  firewallDomainList: firewallDomainList,\n  priority: 123,\n};",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "declare const myBlockList: route53resolver.FirewallDomainList;\ndeclare const ruleGroup: route53resolver.FirewallRuleGroup;\n\nruleGroup.addRule({\n  priority: 10,\n  firewallDomainList: myBlockList,\n  // block and reply with NXDOMAIN\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.nxDomain()),\n});\n\nruleGroup.addRule({\n  priority: 20,\n  firewallDomainList: myBlockList,\n  // block and override DNS response with a custom domain\n  action: route53resolver.FirewallRuleAction.block(route53resolver.DnsBlockResponse.override('amazon.com')),\n});",
+        "stability": "experimental",
+        "summary": "A Firewall Rule."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRule",
       "kind": "interface",
@@ -3710,12 +3713,12 @@
       "abstract": true,
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "docs": {
-        "stability": "experimental",
-        "summary": "A Firewall Rule.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\nconst firewallRuleAction = route53resolver_alpha.FirewallRuleAction.alert();",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "declare const myBlockList: route53resolver.FirewallDomainList;\nnew route53resolver.FirewallRuleGroup(this, 'RuleGroup', {\n  rules: [\n    {\n      priority: 10,\n      firewallDomainList: myBlockList,\n      // block and reply with NODATA\n      action: route53resolver.FirewallRuleAction.block(),\n    },\n  ],\n});",
+        "stability": "experimental",
+        "summary": "A Firewall Rule."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleAction",
       "initializer": {
@@ -3835,12 +3838,12 @@
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "base": "aws-cdk-lib.Resource",
       "docs": {
-        "stability": "experimental",
-        "summary": "A Firewall Rule Group.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\ndeclare const firewallDomainList: route53resolver_alpha.FirewallDomainList;\ndeclare const firewallRuleAction: route53resolver_alpha.FirewallRuleAction;\n\nconst firewallRuleGroup = new route53resolver_alpha.FirewallRuleGroup(this, 'MyFirewallRuleGroup', /* all optional props */ {\n  name: 'name',\n  rules: [{\n    action: firewallRuleAction,\n    firewallDomainList: firewallDomainList,\n    priority: 123,\n  }],\n});",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "declare const myBlockList: route53resolver.FirewallDomainList;\nnew route53resolver.FirewallRuleGroup(this, 'RuleGroup', {\n  rules: [\n    {\n      priority: 10,\n      firewallDomainList: myBlockList,\n      // block and reply with NODATA\n      action: route53resolver.FirewallRuleAction.block(),\n    },\n  ],\n});",
+        "stability": "experimental",
+        "summary": "A Firewall Rule Group."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroup",
       "initializer": {
@@ -3885,74 +3888,75 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Adds a rule to this group."
+            "summary": "Import an existing Firewall Rule Group."
           },
           "locationInModule": {
             "filename": "lib/firewall-rule-group.ts",
-            "line": 251
+            "line": 160
           },
-          "name": "addRule",
+          "name": "fromFirewallRuleGroupId",
           "parameters": [
             {
-              "name": "rule",
+              "name": "scope",
               "type": {
-                "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRule"
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "firewallRuleGroupId",
+              "type": {
+                "primitive": "string"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroup"
+              "fqn": "@aws-cdk/aws-route53resolver-alpha.IFirewallRuleGroup"
             }
-          }
+          },
+          "static": true
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Associates this Firewall Rule Group with a VPC."
+            "summary": "Adds a rule to this group."
           },
           "locationInModule": {
             "filename": "lib/firewall-rule-group.ts",
-            "line": 259
+            "line": 251
           },
-          "name": "associate",
+          "name": "addRule",
           "parameters": [
             {
-              "name": "id",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "name": "props",
+              "name": "rule",
               "type": {
-                "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroupAssociationOptions"
+                "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRule"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroupAssociation"
+              "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroup"
             }
           }
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Import an existing Firewall Rule Group."
+            "summary": "Associates this Firewall Rule Group with a VPC."
           },
           "locationInModule": {
             "filename": "lib/firewall-rule-group.ts",
-            "line": 160
+            "line": 259
           },
-          "name": "fromFirewallRuleGroupId",
+          "name": "associate",
           "parameters": [
-            {
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
             {
               "name": "id",
               "type": {
@@ -3960,18 +3964,17 @@
               }
             },
             {
-              "name": "firewallRuleGroupId",
+              "name": "props",
               "type": {
-                "primitive": "string"
+                "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroupAssociationOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-route53resolver-alpha.IFirewallRuleGroup"
+              "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroupAssociation"
             }
-          },
-          "static": true
+          }
         }
       ],
       "name": "FirewallRuleGroup",
@@ -4163,7 +4166,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "A Firewall Rule Group Association.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\nimport { aws_ec2 as ec2 } from 'aws-cdk-lib';\n\ndeclare const firewallRuleGroup: route53resolver_alpha.FirewallRuleGroup;\ndeclare const vpc: ec2.Vpc;\n\nconst firewallRuleGroupAssociation = new route53resolver_alpha.FirewallRuleGroupAssociation(this, 'MyFirewallRuleGroupAssociation', {\n  firewallRuleGroup: firewallRuleGroup,\n  priority: 123,\n  vpc: vpc,\n\n  // the properties below are optional\n  mutationProtection: false,\n  name: 'name',\n});",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\nimport { aws_ec2 as ec2 } from 'aws-cdk-lib';\n\ndeclare const firewallRuleGroup: route53resolver_alpha.FirewallRuleGroup;\ndeclare const vpc: ec2.Vpc;\nconst firewallRuleGroupAssociation = new route53resolver_alpha.FirewallRuleGroupAssociation(this, 'MyFirewallRuleGroupAssociation', {\n  firewallRuleGroup: firewallRuleGroup,\n  priority: 123,\n  vpc: vpc,\n\n  // the properties below are optional\n  mutationProtection: false,\n  name: 'name',\n});",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
@@ -4357,12 +4360,12 @@
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "datatype": true,
       "docs": {
-        "stability": "experimental",
-        "summary": "Options for a Firewall Rule Group Association.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\nimport { aws_ec2 as ec2 } from 'aws-cdk-lib';\n\ndeclare const vpc: ec2.Vpc;\n\nconst firewallRuleGroupAssociationOptions: route53resolver_alpha.FirewallRuleGroupAssociationOptions = {\n  priority: 123,\n  vpc: vpc,\n\n  // the properties below are optional\n  mutationProtection: false,\n  name: 'name',\n};",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "import * as ec2 from 'aws-cdk-lib/aws-ec2';\n\ndeclare const ruleGroup: route53resolver.FirewallRuleGroup;\ndeclare const myVpc: ec2.Vpc;\n\nruleGroup.associate('Association', {\n  priority: 101,\n  vpc: myVpc,\n})",
+        "stability": "experimental",
+        "summary": "Options for a Firewall Rule Group Association."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroupAssociationOptions",
       "kind": "interface",
@@ -4375,70 +4378,70 @@
         {
           "abstract": true,
           "docs": {
-            "default": "true",
+            "remarks": "DNS Firewall filters VPC\ntraffic starting from rule group with the lowest numeric priority setting.\n\nThis value must be greater than 100 and less than 9,000",
             "stability": "experimental",
-            "summary": "If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections."
+            "summary": "The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/firewall-rule-group-association.ts",
-            "line": 18
+            "line": 34
           },
-          "name": "mutationProtection",
-          "optional": true,
+          "name": "priority",
           "type": {
-            "primitive": "boolean"
+            "primitive": "number"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "- a CloudFormation generated name",
             "stability": "experimental",
-            "summary": "The name of the association."
+            "summary": "The VPC that to associate with the rule group."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/firewall-rule-group-association.ts",
-            "line": 25
+            "line": 39
           },
-          "name": "name",
-          "optional": true,
+          "name": "vpc",
           "type": {
-            "primitive": "string"
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "DNS Firewall filters VPC\ntraffic starting from rule group with the lowest numeric priority setting.\n\nThis value must be greater than 100 and less than 9,000",
+            "default": "true",
             "stability": "experimental",
-            "summary": "The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC."
+            "summary": "If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/firewall-rule-group-association.ts",
-            "line": 34
+            "line": 18
           },
-          "name": "priority",
+          "name": "mutationProtection",
+          "optional": true,
           "type": {
-            "primitive": "number"
+            "primitive": "boolean"
           }
         },
         {
           "abstract": true,
           "docs": {
+            "default": "- a CloudFormation generated name",
             "stability": "experimental",
-            "summary": "The VPC that to associate with the rule group."
+            "summary": "The name of the association."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/firewall-rule-group-association.ts",
-            "line": 39
+            "line": 25
           },
-          "name": "vpc",
+          "name": "name",
+          "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+            "primitive": "string"
           }
         }
       ],
@@ -4450,7 +4453,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for a Firewall Rule Group Association.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\nimport { aws_ec2 as ec2 } from 'aws-cdk-lib';\n\ndeclare const firewallRuleGroup: route53resolver_alpha.FirewallRuleGroup;\ndeclare const vpc: ec2.Vpc;\n\nconst firewallRuleGroupAssociationProps: route53resolver_alpha.FirewallRuleGroupAssociationProps = {\n  firewallRuleGroup: firewallRuleGroup,\n  priority: 123,\n  vpc: vpc,\n\n  // the properties below are optional\n  mutationProtection: false,\n  name: 'name',\n};",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\nimport { aws_ec2 as ec2 } from 'aws-cdk-lib';\n\ndeclare const firewallRuleGroup: route53resolver_alpha.FirewallRuleGroup;\ndeclare const vpc: ec2.Vpc;\nconst firewallRuleGroupAssociationProps: route53resolver_alpha.FirewallRuleGroupAssociationProps = {\n  firewallRuleGroup: firewallRuleGroup,\n  priority: 123,\n  vpc: vpc,\n\n  // the properties below are optional\n  mutationProtection: false,\n  name: 'name',\n};",
         "custom": {
           "exampleMetadata": "fixture=_generated"
         }
@@ -4489,12 +4492,12 @@
       "assembly": "@aws-cdk/aws-route53resolver-alpha",
       "datatype": true,
       "docs": {
-        "stability": "experimental",
-        "summary": "Properties for a Firewall Rule Group.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as route53resolver_alpha from '@aws-cdk/aws-route53resolver-alpha';\n\ndeclare const firewallDomainList: route53resolver_alpha.FirewallDomainList;\ndeclare const firewallRuleAction: route53resolver_alpha.FirewallRuleAction;\n\nconst firewallRuleGroupProps: route53resolver_alpha.FirewallRuleGroupProps = {\n  name: 'name',\n  rules: [{\n    action: firewallRuleAction,\n    firewallDomainList: firewallDomainList,\n    priority: 123,\n  }],\n};",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
-        }
+          "exampleMetadata": "infused"
+        },
+        "example": "declare const myBlockList: route53resolver.FirewallDomainList;\nnew route53resolver.FirewallRuleGroup(this, 'RuleGroup', {\n  rules: [\n    {\n      priority: 10,\n      firewallDomainList: myBlockList,\n      // block and reply with NODATA\n      action: route53resolver.FirewallRuleAction.block(),\n    },\n  ],\n});",
+        "stability": "experimental",
+        "summary": "Properties for a Firewall Rule Group."
       },
       "fqn": "@aws-cdk/aws-route53resolver-alpha.FirewallRuleGroupProps",
       "kind": "interface",
@@ -4627,6 +4630,6 @@
       "symbolId": "lib/firewall-rule-group:IFirewallRuleGroup"
     }
   },
-  "version": "2.3.0-alpha.0",
+  "version": "2.7.0-alpha.0",
   "fingerprint": "**********"
 }