@aws-cdk/cfn-property-mixins 2.243.0

package/lib/services/aws-route53resolver/cfn-props-mixins.generated.d.ts

@@ -0,0 +1,975 @@
+import * as cdk from "aws-cdk-lib/core";
+import * as constructs from "constructs";
+import * as mixins from "../../mixins";
+import * as service from "aws-cdk-lib/aws-route53resolver";
+import { aws_ec2 as ec2Refs, aws_logs as logsRefs, aws_route53resolver as route53ResolverRefs, aws_s3 as s3Refs } from "aws-cdk-lib/interfaces";
+/**
+ * High-level information about a list of firewall domains for use in a [AWS::Route53Resolver::FirewallRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-rule.html) . This is returned by [GetFirewallDomainList](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_GetFirewallDomainList.html) .
+ *
+ * To retrieve the domains that are defined for this domain list, call [ListFirewallDomains](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_ListFirewallDomains.html) .
+ *
+ * @cloudformationResource AWS::Route53Resolver::FirewallDomainList
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewalldomainlist.html
+ */
+export declare class CfnFirewallDomainListPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnFirewallDomainListMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::FirewallDomainList`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnFirewallDomainListMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnFirewallDomainList;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnFirewallDomainListPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewalldomainlist.html
+ */
+export interface CfnFirewallDomainListMixinProps {
+    /**
+     * The fully qualified URL or URI of the file stored in Amazon Simple Storage Service (Amazon S3) that contains the list of domains to import.
+     *
+     * The file must be in an S3 bucket that's in the same Region as your DNS Firewall. The file must be a text file and must contain a single domain per line.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewalldomainlist.html#cfn-route53resolver-firewalldomainlist-domainfileurl
+     */
+    readonly domainFileUrl?: string;
+    /**
+     * A list of the domain lists that you have defined.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewalldomainlist.html#cfn-route53resolver-firewalldomainlist-domains
+     */
+    readonly domains?: Array<string>;
+    /**
+     * The name of the domain list.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewalldomainlist.html#cfn-route53resolver-firewalldomainlist-name
+     */
+    readonly name?: string;
+    /**
+     * A list of the tag keys and values that you want to associate with the domain list.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewalldomainlist.html#cfn-route53resolver-firewalldomainlist-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
+/**
+ * High-level information for a firewall rule group.
+ *
+ * A firewall rule group is a collection of rules that DNS Firewall uses to filter DNS network traffic for a VPC. To retrieve the rules for the rule group, call [ListFirewallRules](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_ListFirewallRules.html) .
+ *
+ * @cloudformationResource AWS::Route53Resolver::FirewallRuleGroup
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroup.html
+ */
+export declare class CfnFirewallRuleGroupPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnFirewallRuleGroupMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::FirewallRuleGroup`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnFirewallRuleGroupMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnFirewallRuleGroup;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnFirewallRuleGroupPropsMixin {
+    /**
+     * A single firewall rule in a rule group.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html
+     */
+    interface FirewallRuleProperty {
+        /**
+         * The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advvanced rule:  - `ALLOW` - Permit the request to go through.
+         *
+         * Not available for DNS Firewall Advanced rules.
+         * - `ALERT` - Permit the request to go through but send an alert to the logs.
+         * - `BLOCK` - Disallow the request. If this is specified,then `BlockResponse` must also be specified.
+         *
+         * if `BlockResponse` is `OVERRIDE` , then all of the following `OVERRIDE` attributes must be specified:
+         *
+         * - `BlockOverrideDnsType`
+         * - `BlockOverrideDomain`
+         * - `BlockOverrideTtl`
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-action
+         */
+        readonly action?: string;
+        /**
+         * The DNS record's type.
+         *
+         * This determines the format of the record value that you provided in `BlockOverrideDomain` . Used for the rule action `BLOCK` with a `BlockResponse` setting of `OVERRIDE` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-blockoverridednstype
+         */
+        readonly blockOverrideDnsType?: string;
+        /**
+         * The custom DNS record to send back in response to the query.
+         *
+         * Used for the rule action `BLOCK` with a `BlockResponse` setting of `OVERRIDE` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-blockoverridedomain
+         */
+        readonly blockOverrideDomain?: string;
+        /**
+         * The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record.
+         *
+         * Used for the rule action `BLOCK` with a `BlockResponse` setting of `OVERRIDE` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-blockoverridettl
+         */
+        readonly blockOverrideTtl?: number;
+        /**
+         * The way that you want DNS Firewall to block the request. Used for the rule action setting `BLOCK` .
+         *
+         * - `NODATA` - Respond indicating that the query was successful, but no response is available for it.
+         * - `NXDOMAIN` - Respond indicating that the domain name that's in the query doesn't exist.
+         * - `OVERRIDE` - Provide a custom override in the response. This option requires custom handling details in the rule's `BlockOverride*` settings.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-blockresponse
+         */
+        readonly blockResponse?: string;
+        /**
+         * The confidence threshold for DNS Firewall Advanced.
+         *
+         * You must provide this value when you create a DNS Firewall Advanced rule. The confidence level values mean:
+         *
+         * - `LOW` : Provides the highest detection rate for threats, but also increases false positives.
+         * - `MEDIUM` : Provides a balance between detecting threats and false positives.
+         * - `HIGH` : Detects only the most well corroborated threats with a low rate of false positives.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-confidencethreshold
+         */
+        readonly confidenceThreshold?: string;
+        /**
+         * The type of the DNS Firewall Advanced rule. Valid values are:.
+         *
+         * - `DGA` : Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to to launch malware attacks.
+         * - `DNS_TUNNELING` : DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-dnsthreatprotection
+         */
+        readonly dnsThreatProtection?: string;
+        /**
+         * The ID of the domain list that's used in the rule.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-firewalldomainlistid
+         */
+        readonly firewallDomainListId?: route53ResolverRefs.IFirewallDomainListRef | string;
+        /**
+         * How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, or DNAME.
+         *
+         * `Inspect_Redirection_Domain` (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list.
+         *
+         * `Trust_Redirection_Domain` inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain list.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-firewalldomainredirectionaction
+         */
+        readonly firewallDomainRedirectionAction?: string;
+        /**
+         * ID of the DNS Firewall Advanced rule.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-firewallthreatprotectionid
+         */
+        readonly firewallThreatProtectionId?: string;
+        /**
+         * The priority of the rule in the rule group.
+         *
+         * This value must be unique within the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-priority
+         */
+        readonly priority?: number;
+        /**
+         * The DNS query type you want the rule to evaluate. Allowed values are;
+         *
+         * - A: Returns an IPv4 address.
+         * - AAAA: Returns an Ipv6 address.
+         * - CAA: Restricts CAs that can create SSL/TLS certifications for the domain.
+         * - CNAME: Returns another domain name.
+         * - DS: Record that identifies the DNSSEC signing key of a delegated zone.
+         * - MX: Specifies mail servers.
+         * - NAPTR: Regular-expression-based rewriting of domain names.
+         * - NS: Authoritative name servers.
+         * - PTR: Maps an IP address to a domain name.
+         * - SOA: Start of authority record for the zone.
+         * - SPF: Lists the servers authorized to send emails from a domain.
+         * - SRV: Application specific values that identify servers.
+         * - TXT: Verifies email senders and application-specific values.
+         * - A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPE NUMBER , where the NUMBER can be 1-65334, for example, TYPE28. For more information, see [List of DNS record types](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/List_of_DNS_record_types) .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-qtype
+         */
+        readonly qtype?: string;
+    }
+}
+/**
+ * Properties for CfnFirewallRuleGroupPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroup.html
+ */
+export interface CfnFirewallRuleGroupMixinProps {
+    /**
+     * A list of the rules that you have defined.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroup.html#cfn-route53resolver-firewallrulegroup-firewallrules
+     */
+    readonly firewallRules?: Array<CfnFirewallRuleGroupPropsMixin.FirewallRuleProperty | cdk.IResolvable> | cdk.IResolvable;
+    /**
+     * The name of the rule group.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroup.html#cfn-route53resolver-firewallrulegroup-name
+     */
+    readonly name?: string;
+    /**
+     * A list of the tag keys and values that you want to associate with the rule group.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroup.html#cfn-route53resolver-firewallrulegroup-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
+/**
+ * An association between a firewall rule group and a VPC, which enables DNS filtering for the VPC.
+ *
+ * @cloudformationResource AWS::Route53Resolver::FirewallRuleGroupAssociation
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html
+ */
+export declare class CfnFirewallRuleGroupAssociationPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnFirewallRuleGroupAssociationMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::FirewallRuleGroupAssociation`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnFirewallRuleGroupAssociationMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnFirewallRuleGroupAssociation;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnFirewallRuleGroupAssociationPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html
+ */
+export interface CfnFirewallRuleGroupAssociationMixinProps {
+    /**
+     * The unique identifier of the firewall rule group.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html#cfn-route53resolver-firewallrulegroupassociation-firewallrulegroupid
+     */
+    readonly firewallRuleGroupId?: route53ResolverRefs.IFirewallRuleGroupRef | string;
+    /**
+     * If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html#cfn-route53resolver-firewallrulegroupassociation-mutationprotection
+     */
+    readonly mutationProtection?: string;
+    /**
+     * The name of the association.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html#cfn-route53resolver-firewallrulegroupassociation-name
+     */
+    readonly name?: string;
+    /**
+     * The setting that determines the processing order of the rule group among the rule groups that are associated with a single VPC.
+     *
+     * DNS Firewall filters VPC traffic starting from rule group with the lowest numeric priority setting.
+     *
+     * You must specify a unique priority for each rule group that you associate with a single VPC. To make it easier to insert rule groups later, leave space between the numbers, for example, use 101, 200, and so on. You can change the priority setting for a rule group association after you create it.
+     *
+     * The allowed values for `Priority` are between 100 and 9900 (excluding 100 and 9900).
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html#cfn-route53resolver-firewallrulegroupassociation-priority
+     */
+    readonly priority?: number;
+    /**
+     * A list of the tag keys and values that you want to associate with the rule group.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html#cfn-route53resolver-firewallrulegroupassociation-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+    /**
+     * The unique identifier of the VPC that is associated with the rule group.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html#cfn-route53resolver-firewallrulegroupassociation-vpcid
+     */
+    readonly vpcId?: ec2Refs.IVPCRef | string;
+}
+/**
+ * Creates a Amazon Route 53 Resolver on an Outpost.
+ *
+ * @cloudformationResource AWS::Route53Resolver::OutpostResolver
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html
+ */
+export declare class CfnOutpostResolverPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnOutpostResolverMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::OutpostResolver`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnOutpostResolverMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnOutpostResolver;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnOutpostResolverPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html
+ */
+export interface CfnOutpostResolverMixinProps {
+    /**
+     * Amazon EC2 instance count for the Resolver on the Outpost.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html#cfn-route53resolver-outpostresolver-instancecount
+     */
+    readonly instanceCount?: number;
+    /**
+     * Name of the Resolver.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html#cfn-route53resolver-outpostresolver-name
+     */
+    readonly name?: string;
+    /**
+     * The ARN (Amazon Resource Name) for the Outpost.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html#cfn-route53resolver-outpostresolver-outpostarn
+     */
+    readonly outpostArn?: string;
+    /**
+     * The Amazon EC2 instance type.
+     *
+     * If you specify this, you must also specify a value for the `OutpostArn` .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html#cfn-route53resolver-outpostresolver-preferredinstancetype
+     */
+    readonly preferredInstanceType?: string;
+    /**
+     * A key value pair that helps you identify a Route 53 Resolver .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html#cfn-route53resolver-outpostresolver-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
+/**
+ * A complex type that contains information about a Resolver configuration for a VPC.
+ *
+ * @cloudformationResource AWS::Route53Resolver::ResolverConfig
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverconfig.html
+ */
+export declare class CfnResolverConfigPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResolverConfigMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::ResolverConfig`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResolverConfigMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResolverConfig;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnResolverConfigPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverconfig.html
+ */
+export interface CfnResolverConfigMixinProps {
+    /**
+     * Represents the desired status of `AutodefinedReverse` .
+     *
+     * The only supported value on creation is `DISABLE` . Deletion of this resource will return `AutodefinedReverse` to its default value of `ENABLED` .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverconfig.html#cfn-route53resolver-resolverconfig-autodefinedreverseflag
+     */
+    readonly autodefinedReverseFlag?: string;
+    /**
+     * The ID of the Amazon Virtual Private Cloud VPC or a Route 53 Profile that you're configuring Resolver for.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverconfig.html#cfn-route53resolver-resolverconfig-resourceid
+     */
+    readonly resourceId?: string;
+}
+/**
+ * The `AWS::Route53Resolver::ResolverDNSSECConfig` resource is a complex type that contains information about a configuration for DNSSEC validation.
+ *
+ * @cloudformationResource AWS::Route53Resolver::ResolverDNSSECConfig
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverdnssecconfig.html
+ */
+export declare class CfnResolverDNSSECConfigPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResolverDNSSECConfigMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::ResolverDNSSECConfig`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResolverDNSSECConfigMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResolverDNSSECConfig;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnResolverDNSSECConfigPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverdnssecconfig.html
+ */
+export interface CfnResolverDNSSECConfigMixinProps {
+    /**
+     * The ID of the virtual private cloud (VPC) that you're configuring the DNSSEC validation status for.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverdnssecconfig.html#cfn-route53resolver-resolverdnssecconfig-resourceid
+     */
+    readonly resourceId?: string;
+}
+/**
+ * Creates a Resolver endpoint. There are two types of Resolver endpoints, inbound and outbound:.
+ *
+ * - An *inbound Resolver endpoint* forwards DNS queries to the DNS service for a VPC from your network.
+ * - An *outbound Resolver endpoint* forwards DNS queries from the DNS service for a VPC to your network.
+ *
+ * > - You cannot update `ResolverEndpointType` and `IpAddresses` in the same request.
+ * > - When you update a dual-stack IP address, you must update both IP addresses. You can’t update only an IPv4 or IPv6 and keep an existing IP address.
+ *
+ * @cloudformationResource AWS::Route53Resolver::ResolverEndpoint
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html
+ */
+export declare class CfnResolverEndpointPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResolverEndpointMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::ResolverEndpoint`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResolverEndpointMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResolverEndpoint;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnResolverEndpointPropsMixin {
+    /**
+     * In a [CreateResolverEndpoint](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_CreateResolverEndpoint.html) request, the IP address that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). `IpAddressRequest` also includes the ID of the subnet that contains the IP address.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverendpoint-ipaddressrequest.html
+     */
+    interface IpAddressRequestProperty {
+        /**
+         * The IPv4 address that you want to use for DNS queries.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverendpoint-ipaddressrequest.html#cfn-route53resolver-resolverendpoint-ipaddressrequest-ip
+         */
+        readonly ip?: string;
+        /**
+         * The IPv6 address that you want to use for DNS queries.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverendpoint-ipaddressrequest.html#cfn-route53resolver-resolverendpoint-ipaddressrequest-ipv6
+         */
+        readonly ipv6?: string;
+        /**
+         * The ID of the subnet that contains the IP address.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverendpoint-ipaddressrequest.html#cfn-route53resolver-resolverendpoint-ipaddressrequest-subnetid
+         */
+        readonly subnetId?: string;
+    }
+}
+/**
+ * Properties for CfnResolverEndpointPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html
+ */
+export interface CfnResolverEndpointMixinProps {
+    /**
+     * Indicates whether the Resolver endpoint allows inbound or outbound DNS queries:.
+     *
+     * - `INBOUND` : allows DNS queries to your VPC from your network
+     * - `OUTBOUND` : allows DNS queries from your VPC to your network
+     * - `INBOUND_DELEGATION` : Resolver delegates queries to Route 53 private hosted zones from your network.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-direction
+     */
+    readonly direction?: string;
+    /**
+     * The subnets and IP addresses in your VPC that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints).
+     *
+     * The subnet ID uniquely identifies a VPC.
+     *
+     * > Even though the minimum is 1, Route 53 requires that you create at least two.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-ipaddresses
+     */
+    readonly ipAddresses?: Array<CfnResolverEndpointPropsMixin.IpAddressRequestProperty | cdk.IResolvable> | cdk.IResolvable;
+    /**
+     * A friendly name that lets you easily find a configuration in the Resolver dashboard in the Route 53 console.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-name
+     */
+    readonly name?: string;
+    /**
+     * The ARN (Amazon Resource Name) for the Outpost.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-outpostarn
+     */
+    readonly outpostArn?: string;
+    /**
+     * The Amazon EC2 instance type.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-preferredinstancetype
+     */
+    readonly preferredInstanceType?: string;
+    /**
+     * Protocols used for the endpoint. DoH-FIPS is applicable for a default inbound endpoints only.
+     *
+     * For an inbound endpoint you can apply the protocols as follows:
+     *
+     * - Do53 and DoH in combination.
+     * - Do53 and DoH-FIPS in combination.
+     * - Do53 alone.
+     * - DoH alone.
+     * - DoH-FIPS alone.
+     * - None, which is treated as Do53.
+     *
+     * For a delegation inbound endpoint you can use Do53 only.
+     *
+     * For an outbound endpoint you can apply the protocols as follows:
+     *
+     * - Do53 and DoH in combination.
+     * - Do53 alone.
+     * - DoH alone.
+     * - None, which is treated as Do53.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-protocols
+     */
+    readonly protocols?: Array<string>;
+    /**
+     * The Resolver endpoint IP address type.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-resolverendpointtype
+     */
+    readonly resolverEndpointType?: string;
+    /**
+     * Indicates whether RNI enhanced metrics are enabled for the Resolver endpoint.
+     *
+     * When enabled, one-minute granular metrics are published in CloudWatch for each RNI associated with this endpoint. When disabled, these metrics are not published.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-rnienhancedmetricsenabled
+     */
+    readonly rniEnhancedMetricsEnabled?: boolean | cdk.IResolvable;
+    /**
+     * The ID of one or more security groups that control access to this VPC.
+     *
+     * The security group must include one or more inbound rules (for inbound endpoints) or outbound rules (for outbound endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-securitygroupids
+     */
+    readonly securityGroupIds?: Array<string>;
+    /**
+     * Route 53 Resolver doesn't support updating tags through CloudFormation.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+    /**
+     * Indicates whether target name server metrics are enabled for the outbound Resolver endpoint.
+     *
+     * When enabled, one-minute granular metrics are published in CloudWatch for each target name server associated with this endpoint. When disabled, these metrics are not published. This feature is not supported for inbound Resolver endpoint.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-targetnameservermetricsenabled
+     */
+    readonly targetNameServerMetricsEnabled?: boolean | cdk.IResolvable;
+}
+/**
+ * The AWS::Route53Resolver::ResolverQueryLoggingConfig resource is a complex type that contains settings for one query logging configuration.
+ *
+ * @cloudformationResource AWS::Route53Resolver::ResolverQueryLoggingConfig
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfig.html
+ */
+export declare class CfnResolverQueryLoggingConfigPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResolverQueryLoggingConfigMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::ResolverQueryLoggingConfig`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResolverQueryLoggingConfigMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResolverQueryLoggingConfig;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnResolverQueryLoggingConfigPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfig.html
+ */
+export interface CfnResolverQueryLoggingConfigMixinProps {
+    /**
+     * The ARN of the resource that you want Resolver to send query logs: an Amazon S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfig.html#cfn-route53resolver-resolverqueryloggingconfig-destinationarn
+     */
+    readonly destinationArn?: logsRefs.ILogGroupRef | s3Refs.IBucketRef | string;
+    /**
+     * The name of the query logging configuration.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfig.html#cfn-route53resolver-resolverqueryloggingconfig-name
+     */
+    readonly name?: string;
+    /**
+     * An array of key-value pairs to apply to this resource.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfig.html#cfn-route53resolver-resolverqueryloggingconfig-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
+/**
+ * The AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation resource is a configuration for DNS query logging.
+ *
+ * After you create a query logging configuration, Amazon Route 53 begins to publish log data to an Amazon CloudWatch Logs log group.
+ *
+ * @cloudformationResource AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfigassociation.html
+ */
+export declare class CfnResolverQueryLoggingConfigAssociationPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResolverQueryLoggingConfigAssociationMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResolverQueryLoggingConfigAssociationMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResolverQueryLoggingConfigAssociation;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnResolverQueryLoggingConfigAssociationPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfigassociation.html
+ */
+export interface CfnResolverQueryLoggingConfigAssociationMixinProps {
+    /**
+     * The ID of the query logging configuration that a VPC is associated with.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfigassociation.html#cfn-route53resolver-resolverqueryloggingconfigassociation-resolverquerylogconfigid
+     */
+    readonly resolverQueryLogConfigId?: route53ResolverRefs.IResolverQueryLoggingConfigRef | string;
+    /**
+     * The ID of the Amazon VPC that is associated with the query logging configuration.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfigassociation.html#cfn-route53resolver-resolverqueryloggingconfigassociation-resourceid
+     */
+    readonly resourceId?: ec2Refs.IVPCRef | string;
+}
+/**
+ * For DNS queries that originate in your VPCs, specifies which Resolver endpoint the queries pass through, one domain name that you want to forward to your network, and the IP addresses of the DNS resolvers in your network.
+ *
+ * @cloudformationResource AWS::Route53Resolver::ResolverRule
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html
+ */
+export declare class CfnResolverRulePropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResolverRuleMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::ResolverRule`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResolverRuleMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResolverRule;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnResolverRulePropsMixin {
+    /**
+     * In a [CreateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_CreateResolverRule.html) request, an array of the IPs that you want to forward DNS queries to.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html
+     */
+    interface TargetAddressProperty {
+        /**
+         * One IPv4 address that you want to forward DNS queries to.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html#cfn-route53resolver-resolverrule-targetaddress-ip
+         */
+        readonly ip?: string;
+        /**
+         * One IPv6 address that you want to forward DNS queries to.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html#cfn-route53resolver-resolverrule-targetaddress-ipv6
+         */
+        readonly ipv6?: string;
+        /**
+         * The port at `Ip` that you want to forward DNS queries to.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html#cfn-route53resolver-resolverrule-targetaddress-port
+         */
+        readonly port?: string;
+        /**
+         * The protocols for the target address.
+         *
+         * The protocol you choose needs to be supported by the outbound endpoint of the Resolver rule.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html#cfn-route53resolver-resolverrule-targetaddress-protocol
+         */
+        readonly protocol?: string;
+        /**
+         * The Server Name Indication of the DoH server that you want to forward queries to.
+         *
+         * This is only used if the Protocol of the `TargetAddress` is `DoH` .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html#cfn-route53resolver-resolverrule-targetaddress-servernameindication
+         */
+        readonly serverNameIndication?: string;
+    }
+}
+/**
+ * Properties for CfnResolverRulePropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html
+ */
+export interface CfnResolverRuleMixinProps {
+    /**
+     * DNS queries with delegation records that point to this domain name are forwarded to resolvers on your network.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-delegationrecord
+     */
+    readonly delegationRecord?: string;
+    /**
+     * DNS queries for this domain name are forwarded to the IP addresses that are specified in `TargetIps` .
+     *
+     * If a query matches multiple Resolver rules (example.com and www.example.com), the query is routed using the Resolver rule that contains the most specific domain name (www.example.com).
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-domainname
+     */
+    readonly domainName?: string;
+    /**
+     * The name for the Resolver rule, which you specified when you created the Resolver rule.
+     *
+     * The name can be up to 64 characters long and can contain letters (a-z, A-Z), numbers (0-9), hyphens (-), underscores (_), and spaces. The name cannot consist of only numbers.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-name
+     */
+    readonly name?: string;
+    /**
+     * The ID of the endpoint that the rule is associated with.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-resolverendpointid
+     */
+    readonly resolverEndpointId?: string;
+    /**
+     * When you want to forward DNS queries for specified domain name to resolvers on your network, specify `FORWARD` or `DELEGATE` .
+     *
+     * If a query matches multiple Resolver rules (example.com and www.example.com), outbound DNS queries are routed using the Resolver rule that contains the most specific domain name (www.example.com).
+     *
+     * When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify `SYSTEM` .
+     *
+     * For example, to forward DNS queries for example.com to resolvers on your network, you create a rule and specify `FORWARD` for `RuleType` . To then have Resolver process queries for apex.example.com, you create a rule and specify `SYSTEM` for `RuleType` .
+     *
+     * Currently, only Resolver can create rules that have a value of `RECURSIVE` for `RuleType` .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-ruletype
+     */
+    readonly ruleType?: string;
+    /**
+     * Tags help organize and categorize your Resolver rules.
+     *
+     * Each tag consists of a key and an optional value, both of which you define.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+    /**
+     * An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to.
+     *
+     * Typically, these are the IP addresses of DNS resolvers on your network.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-targetips
+     */
+    readonly targetIps?: Array<cdk.IResolvable | CfnResolverRulePropsMixin.TargetAddressProperty> | cdk.IResolvable;
+}
+/**
+ * In the response to an [AssociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_AssociateResolverRule.html) , [DisassociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_DisassociateResolverRule.html) , or [ListResolverRuleAssociations](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_ListResolverRuleAssociations.html) request, provides information about an association between a resolver rule and a VPC. The association determines which DNS queries that originate in the VPC are forwarded to your network.
+ *
+ * @cloudformationResource AWS::Route53Resolver::ResolverRuleAssociation
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverruleassociation.html
+ */
+export declare class CfnResolverRuleAssociationPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResolverRuleAssociationMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::Route53Resolver::ResolverRuleAssociation`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResolverRuleAssociationMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResolverRuleAssociation;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnResolverRuleAssociationPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverruleassociation.html
+ */
+export interface CfnResolverRuleAssociationMixinProps {
+    /**
+     * The name of an association between a Resolver rule and a VPC.
+     *
+     * The name can be up to 64 characters long and can contain letters (a-z, A-Z), numbers (0-9), hyphens (-), underscores (_), and spaces. The name cannot consist of only numbers.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverruleassociation.html#cfn-route53resolver-resolverruleassociation-name
+     */
+    readonly name?: string;
+    /**
+     * The ID of the Resolver rule that you associated with the VPC that is specified by `VPCId` .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverruleassociation.html#cfn-route53resolver-resolverruleassociation-resolverruleid
+     */
+    readonly resolverRuleId?: route53ResolverRefs.IResolverRuleRef | string;
+    /**
+     * The ID of the VPC that you associated the Resolver rule with.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverruleassociation.html#cfn-route53resolver-resolverruleassociation-vpcid
+     */
+    readonly vpcId?: ec2Refs.IVPCRef | string;
+}