@aws-sdk/client-route53resolver 3.1069.0 → 3.1070.0

package/dist-cjs/index.js

@@ -1275,6 +1275,7 @@ const IpAddressStatus = {
     Deleting: "DELETING",
     Detaching: "DETACHING",
     FailedCreation: "FAILED_CREATION",
+    FailedCreationInsufficientEC2CapacityInOutpost: "FAILED_CREATION_INSUFFICIENT_EC2_CAPACITY_IN_OUTPOST",
     FailedResourceGone: "FAILED_RESOURCE_GONE",
     Isolated: "ISOLATED",
     RemapAttaching: "REMAP_ATTACHING",

package/dist-cjs/schemas/schemas_0.js

@@ -291,6 +291,7 @@ const _P = "Priority";
 const _PFRGP = "PutFirewallRuleGroupPolicy";
 const _PFRGPR = "PutFirewallRuleGroupPolicyRequest";
 const _PFRGPRu = "PutFirewallRuleGroupPolicyResponse";
+const _PI = "ProductId";
 const _PIT = "PreferredInstanceType";
 const _PRQLCP = "PutResolverQueryLogConfigPolicy";
 const _PRQLCPR = "PutResolverQueryLogConfigPolicyRequest";
@@ -298,6 +299,9 @@ const _PRQLCPRu = "PutResolverQueryLogConfigPolicyResponse";
 const _PRRP = "PutResolverRulePolicy";
 const _PRRPR = "PutResolverRulePolicyRequest";
 const _PRRPRu = "PutResolverRulePolicyResponse";
+const _PTP = "PartnerThreatProtection";
+const _PTPC = "PartnerThreatProtectionConfig";
+const _Pa = "Partner";
 const _Po = "Port";
 const _Pr = "Protocols";
 const _Pro = "Protocol";
@@ -344,7 +348,8 @@ const _RV = "ReturnValue";
 const _S = "Status";
 const _SB = "SortBy";
 const _SGI = "SecurityGroupIds";
-const _SI = "SubnetId";
+const _SI = "SubscriptionInfo";
+const _SIu = "SubnetId";
 const _SM = "StatusMessage";
 const _SNI = "ServerNameIndication";
 const _SO = "SortOrder";
@@ -404,6 +409,7 @@ const _URRp = "UpdateResolverRule";
 const _V = "Value";
 const _VE = "ValidationException";
 const _VI = "VpcId";
+const _VN = "VendorName";
 const _VPCI = "VPCId";
 const _VS = "ValidationStatus";
 const _Va = "Values";
@@ -917,8 +923,8 @@ const FirewallDomainListMetadata$ = [3, n0, _FDLM,
 exports.FirewallDomainListMetadata$ = FirewallDomainListMetadata$;
 const FirewallRule$ = [3, n0, _FR,
     0,
-    [_FRGI, _FDLI, _FTPI, _N, _P, _A, _BR, _BOD, _BODT, _BOT, _CRI, _CTr, _MT, _FDRA, _Q, _DTP, _CT, _FRT],
-    [0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, () => FirewallRuleType$]
+    [_FRGI, _FDLI, _FTPI, _N, _P, _A, _BR, _BOD, _BODT, _BOT, _CRI, _CTr, _MT, _FDRA, _Q, _DTP, _CT, _FRT, _S, _SM],
+    [0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, () => FirewallRuleType$, 0, 0]
 ];
 exports.FirewallRule$ = FirewallRule$;
 const FirewallRuleGroup$ = [3, n0, _FRG,
@@ -941,14 +947,14 @@ const FirewallRuleGroupMetadata$ = [3, n0, _FRGM,
 exports.FirewallRuleGroupMetadata$ = FirewallRuleGroupMetadata$;
 const FirewallRuleType$ = [3, n0, _FRT,
     0,
-    [_FACC, _FATC, _DTP],
-    [() => FirewallAdvancedContentCategoryConfig$, () => FirewallAdvancedThreatCategoryConfig$, () => DnsThreatProtectionRuleTypeConfig$]
+    [_PTP, _FACC, _FATC, _DTP],
+    [() => PartnerThreatProtectionConfig$, () => FirewallAdvancedContentCategoryConfig$, () => FirewallAdvancedThreatCategoryConfig$, () => DnsThreatProtectionRuleTypeConfig$]
 ];
 exports.FirewallRuleType$ = FirewallRuleType$;
 const FirewallRuleTypeDefinition$ = [3, n0, _FRTD,
     0,
-    [_RTu, _V, _DNi, _De],
-    [0, 0, 0, 0]
+    [_RTu, _V, _DNi, _De, _SI],
+    [0, 0, 0, 0, () => SubscriptionInfo$]
 ];
 exports.FirewallRuleTypeDefinition$ = FirewallRuleTypeDefinition$;
 const GetFirewallConfigRequest$ = [3, n0, _GFCR,
@@ -1145,19 +1151,19 @@ const ImportFirewallDomainsResponse$ = [3, n0, _IFDRm,
 exports.ImportFirewallDomainsResponse$ = ImportFirewallDomainsResponse$;
 const IpAddressRequest$ = [3, n0, _IAR,
     0,
-    [_SI, _Ip, _Ipv],
+    [_SIu, _Ip, _Ipv],
     [0, 0, 0], 1
 ];
 exports.IpAddressRequest$ = IpAddressRequest$;
 const IpAddressResponse$ = [3, n0, _IARp,
     0,
-    [_II, _SI, _Ip, _Ipv, _S, _SM, _CTr, _MT],
+    [_II, _SIu, _Ip, _Ipv, _S, _SM, _CTr, _MT],
     [0, 0, 0, 0, 0, 0, 0, 0]
 ];
 exports.IpAddressResponse$ = IpAddressResponse$;
 const IpAddressUpdate$ = [3, n0, _IAU,
     0,
-    [_II, _SI, _Ip, _Ipv],
+    [_II, _SIu, _Ip, _Ipv],
     [0, 0, 0, 0]
 ];
 exports.IpAddressUpdate$ = IpAddressUpdate$;
@@ -1371,6 +1377,12 @@ const OutpostResolver$ = [3, n0, _OR,
     [0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0]
 ];
 exports.OutpostResolver$ = OutpostResolver$;
+const PartnerThreatProtectionConfig$ = [3, n0, _PTPC,
+    0,
+    [_Pa],
+    [0], 1
+];
+exports.PartnerThreatProtectionConfig$ = PartnerThreatProtectionConfig$;
 const PutFirewallRuleGroupPolicyRequest$ = [3, n0, _PFRGPR,
     0,
     [_Ar, _FRGP],
@@ -1455,6 +1467,12 @@ const ResolverRuleConfig$ = [3, n0, _RRC,
     [0, () => TargetList, 0]
 ];
 exports.ResolverRuleConfig$ = ResolverRuleConfig$;
+const SubscriptionInfo$ = [3, n0, _SI,
+    0,
+    [_VN, _PI],
+    [0, 0]
+];
+exports.SubscriptionInfo$ = SubscriptionInfo$;
 const Tag$ = [3, n0, _Ta,
     0,
     [_K, _V],

package/dist-es/models/enums.js

@@ -167,6 +167,7 @@ export const IpAddressStatus = {
     Deleting: "DELETING",
     Detaching: "DETACHING",
     FailedCreation: "FAILED_CREATION",
+    FailedCreationInsufficientEC2CapacityInOutpost: "FAILED_CREATION_INSUFFICIENT_EC2_CAPACITY_IN_OUTPOST",
     FailedResourceGone: "FAILED_RESOURCE_GONE",
     Isolated: "ISOLATED",
     RemapAttaching: "REMAP_ATTACHING",

package/dist-es/schemas/schemas_0.js

@@ -291,6 +291,7 @@ const _P = "Priority";
 const _PFRGP = "PutFirewallRuleGroupPolicy";
 const _PFRGPR = "PutFirewallRuleGroupPolicyRequest";
 const _PFRGPRu = "PutFirewallRuleGroupPolicyResponse";
+const _PI = "ProductId";
 const _PIT = "PreferredInstanceType";
 const _PRQLCP = "PutResolverQueryLogConfigPolicy";
 const _PRQLCPR = "PutResolverQueryLogConfigPolicyRequest";
@@ -298,6 +299,9 @@ const _PRQLCPRu = "PutResolverQueryLogConfigPolicyResponse";
 const _PRRP = "PutResolverRulePolicy";
 const _PRRPR = "PutResolverRulePolicyRequest";
 const _PRRPRu = "PutResolverRulePolicyResponse";
+const _PTP = "PartnerThreatProtection";
+const _PTPC = "PartnerThreatProtectionConfig";
+const _Pa = "Partner";
 const _Po = "Port";
 const _Pr = "Protocols";
 const _Pro = "Protocol";
@@ -344,7 +348,8 @@ const _RV = "ReturnValue";
 const _S = "Status";
 const _SB = "SortBy";
 const _SGI = "SecurityGroupIds";
-const _SI = "SubnetId";
+const _SI = "SubscriptionInfo";
+const _SIu = "SubnetId";
 const _SM = "StatusMessage";
 const _SNI = "ServerNameIndication";
 const _SO = "SortOrder";
@@ -404,6 +409,7 @@ const _URRp = "UpdateResolverRule";
 const _V = "Value";
 const _VE = "ValidationException";
 const _VI = "VpcId";
+const _VN = "VendorName";
 const _VPCI = "VPCId";
 const _VS = "ValidationStatus";
 const _Va = "Values";
@@ -837,8 +843,8 @@ export var FirewallDomainListMetadata$ = [3, n0, _FDLM,
 ];
 export var FirewallRule$ = [3, n0, _FR,
     0,
-    [_FRGI, _FDLI, _FTPI, _N, _P, _A, _BR, _BOD, _BODT, _BOT, _CRI, _CTr, _MT, _FDRA, _Q, _DTP, _CT, _FRT],
-    [0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, () => FirewallRuleType$]
+    [_FRGI, _FDLI, _FTPI, _N, _P, _A, _BR, _BOD, _BODT, _BOT, _CRI, _CTr, _MT, _FDRA, _Q, _DTP, _CT, _FRT, _S, _SM],
+    [0, 0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, () => FirewallRuleType$, 0, 0]
 ];
 export var FirewallRuleGroup$ = [3, n0, _FRG,
     0,
@@ -857,13 +863,13 @@ export var FirewallRuleGroupMetadata$ = [3, n0, _FRGM,
 ];
 export var FirewallRuleType$ = [3, n0, _FRT,
     0,
-    [_FACC, _FATC, _DTP],
-    [() => FirewallAdvancedContentCategoryConfig$, () => FirewallAdvancedThreatCategoryConfig$, () => DnsThreatProtectionRuleTypeConfig$]
+    [_PTP, _FACC, _FATC, _DTP],
+    [() => PartnerThreatProtectionConfig$, () => FirewallAdvancedContentCategoryConfig$, () => FirewallAdvancedThreatCategoryConfig$, () => DnsThreatProtectionRuleTypeConfig$]
 ];
 export var FirewallRuleTypeDefinition$ = [3, n0, _FRTD,
     0,
-    [_RTu, _V, _DNi, _De],
-    [0, 0, 0, 0]
+    [_RTu, _V, _DNi, _De, _SI],
+    [0, 0, 0, 0, () => SubscriptionInfo$]
 ];
 export var GetFirewallConfigRequest$ = [3, n0, _GFCR,
     0,
@@ -1027,17 +1033,17 @@ export var ImportFirewallDomainsResponse$ = [3, n0, _IFDRm,
 ];
 export var IpAddressRequest$ = [3, n0, _IAR,
     0,
-    [_SI, _Ip, _Ipv],
+    [_SIu, _Ip, _Ipv],
     [0, 0, 0], 1
 ];
 export var IpAddressResponse$ = [3, n0, _IARp,
     0,
-    [_II, _SI, _Ip, _Ipv, _S, _SM, _CTr, _MT],
+    [_II, _SIu, _Ip, _Ipv, _S, _SM, _CTr, _MT],
     [0, 0, 0, 0, 0, 0, 0, 0]
 ];
 export var IpAddressUpdate$ = [3, n0, _IAU,
     0,
-    [_II, _SI, _Ip, _Ipv],
+    [_II, _SIu, _Ip, _Ipv],
     [0, 0, 0, 0]
 ];
 export var ListFirewallConfigsRequest$ = [3, n0, _LFCR,
@@ -1215,6 +1221,11 @@ export var OutpostResolver$ = [3, n0, _OR,
     [_Ar, _CTr, _MT, _CRI, _I, _IC, _PIT, _N, _S, _SM, _OA],
     [0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0]
 ];
+export var PartnerThreatProtectionConfig$ = [3, n0, _PTPC,
+    0,
+    [_Pa],
+    [0], 1
+];
 export var PutFirewallRuleGroupPolicyRequest$ = [3, n0, _PFRGPR,
     0,
     [_Ar, _FRGP],
@@ -1285,6 +1296,11 @@ export var ResolverRuleConfig$ = [3, n0, _RRC,
     [_N, _TI, _REI],
     [0, () => TargetList, 0]
 ];
+export var SubscriptionInfo$ = [3, n0, _SI,
+    0,
+    [_VN, _PI],
+    [0, 0]
+];
 export var Tag$ = [3, n0, _Ta,
     0,
     [_K, _V],

package/dist-types/commands/AssociateFirewallRuleGroupCommand.d.ts

@@ -29,7 +29,8 @@ declare const AssociateFirewallRuleGroupCommand_base: {
     };
 };
 /**
- * <p>Associates a <a>FirewallRuleGroup</a> with a VPC, to provide DNS filtering for the VPC. </p>
+ * <p>Associates a <a>FirewallRuleGroup</a> with a VPC, to provide DNS filtering for the VPC.</p>
+ *          <p>If the rule group contains any rule configured with the <code>PartnerThreatProtection</code> rule type, the calling account must hold an active AWS Marketplace subscription to the named partner. If the subscription is missing, the association request is rejected.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/BatchCreateFirewallRuleCommand.d.ts

@@ -56,6 +56,9 @@ declare const BatchCreateFirewallRuleCommand_base: {
  *       DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  *       ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  *       FirewallRuleType: { // FirewallRuleType
+ *         PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ *           Partner: "STRING_VALUE", // required
+ *         },
  *         FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  *           Category: "STRING_VALUE", // required
  *         },
@@ -93,6 +96,9 @@ declare const BatchCreateFirewallRuleCommand_base: {
  * //       DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //       ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //       FirewallRuleType: { // FirewallRuleType
+ * //         PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ * //           Partner: "STRING_VALUE", // required
+ * //         },
  * //         FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  * //           Category: "STRING_VALUE", // required
  * //         },
@@ -104,6 +110,8 @@ declare const BatchCreateFirewallRuleCommand_base: {
  * //           ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH", // required
  * //         },
  * //       },
+ * //       Status: "STRING_VALUE",
+ * //       StatusMessage: "STRING_VALUE",
  * //     },
  * //   ],
  * //   CreateErrors: [ // BatchCreateFirewallRuleErrors
@@ -124,6 +132,9 @@ declare const BatchCreateFirewallRuleCommand_base: {
  * //         DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //         ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //         FirewallRuleType: {
+ * //           PartnerThreatProtection: {
+ * //             Partner: "STRING_VALUE", // required
+ * //           },
  * //           FirewallAdvancedContentCategory: {
  * //             Category: "STRING_VALUE", // required
  * //           },

package/dist-types/commands/BatchDeleteFirewallRuleCommand.d.ts

@@ -71,6 +71,9 @@ declare const BatchDeleteFirewallRuleCommand_base: {
  * //       DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //       ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //       FirewallRuleType: { // FirewallRuleType
+ * //         PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ * //           Partner: "STRING_VALUE", // required
+ * //         },
  * //         FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  * //           Category: "STRING_VALUE", // required
  * //         },
@@ -82,6 +85,8 @@ declare const BatchDeleteFirewallRuleCommand_base: {
  * //           ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH", // required
  * //         },
  * //       },
+ * //       Status: "STRING_VALUE",
+ * //       StatusMessage: "STRING_VALUE",
  * //     },
  * //   ],
  * //   DeleteErrors: [ // BatchDeleteFirewallRuleErrors

package/dist-types/commands/BatchUpdateFirewallRuleCommand.d.ts

@@ -56,6 +56,9 @@ declare const BatchUpdateFirewallRuleCommand_base: {
  *       DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  *       ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  *       FirewallRuleType: { // FirewallRuleType
+ *         PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ *           Partner: "STRING_VALUE", // required
+ *         },
  *         FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  *           Category: "STRING_VALUE", // required
  *         },
@@ -93,6 +96,9 @@ declare const BatchUpdateFirewallRuleCommand_base: {
  * //       DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //       ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //       FirewallRuleType: { // FirewallRuleType
+ * //         PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ * //           Partner: "STRING_VALUE", // required
+ * //         },
  * //         FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  * //           Category: "STRING_VALUE", // required
  * //         },
@@ -104,6 +110,8 @@ declare const BatchUpdateFirewallRuleCommand_base: {
  * //           ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH", // required
  * //         },
  * //       },
+ * //       Status: "STRING_VALUE",
+ * //       StatusMessage: "STRING_VALUE",
  * //     },
  * //   ],
  * //   UpdateErrors: [ // BatchUpdateFirewallRuleErrors
@@ -124,6 +132,9 @@ declare const BatchUpdateFirewallRuleCommand_base: {
  * //         DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //         ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //         FirewallRuleType: {
+ * //           PartnerThreatProtection: {
+ * //             Partner: "STRING_VALUE", // required
+ * //           },
  * //           FirewallAdvancedContentCategory: {
  * //             Category: "STRING_VALUE", // required
  * //           },

package/dist-types/commands/CreateFirewallRuleCommand.d.ts

@@ -29,7 +29,22 @@ declare const CreateFirewallRuleCommand_base: {
     };
 };
 /**
- * <p>Creates a single DNS Firewall rule in the specified rule group, using the specified domain list.</p>
+ * <p>Creates a single DNS Firewall rule in the specified rule group. The rule can use any one of the following match sources, and the chosen source must be supplied through the matching request field — they are mutually exclusive:</p>
+ *          <ul>
+ *             <li>
+ *                <p>
+ *                   <code>FirewallDomainListId</code> — match a customer-managed or AWS-managed domain list.</p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>DnsThreatProtection</code> — match a built-in DNS Firewall Advanced threat detector (<code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>).</p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>FirewallRuleType</code> — match one of the rule-type variants returned by <a>ListFirewallRuleTypes</a>: <code>FirewallAdvancedContentCategory</code>, <code>FirewallAdvancedThreatCategory</code>, <code>DnsThreatProtection</code>, or <code>PartnerThreatProtection</code>. The <code>PartnerThreatProtection</code> variant requires an active AWS Marketplace subscription to the named partner product.</p>
+ *             </li>
+ *          </ul>
+ *          <p>For rules that require asynchronous provisioning (today, the <code>PartnerThreatProtection</code> rule type), the rule's <code>Status</code> begins at <code>CREATING</code> and transitions to <code>COMPLETE</code> once the rule is provisioned and the marketplace entitlement is verified. If provisioning fails, <code>Status</code> becomes <code>CREATION_FAILED</code> and <code>StatusMessage</code> contains a human-readable reason; the rule is then immutable and must be removed with <a>DeleteFirewallRule</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -54,6 +69,9 @@ declare const CreateFirewallRuleCommand_base: {
  *   DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  *   ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  *   FirewallRuleType: { // FirewallRuleType
+ *     PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ *       Partner: "STRING_VALUE", // required
+ *     },
  *     FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  *       Category: "STRING_VALUE", // required
  *     },
@@ -88,6 +106,9 @@ declare const CreateFirewallRuleCommand_base: {
  * //     DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //     ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //     FirewallRuleType: { // FirewallRuleType
+ * //       PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ * //         Partner: "STRING_VALUE", // required
+ * //       },
  * //       FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  * //         Category: "STRING_VALUE", // required
  * //       },
@@ -99,6 +120,8 @@ declare const CreateFirewallRuleCommand_base: {
  * //         ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH", // required
  * //       },
  * //     },
+ * //     Status: "STRING_VALUE",
+ * //     StatusMessage: "STRING_VALUE",
  * //   },
  * // };
  *

package/dist-types/commands/DeleteFirewallRuleCommand.d.ts

@@ -29,7 +29,9 @@ declare const DeleteFirewallRuleCommand_base: {
     };
 };
 /**
- * <p>Deletes the specified firewall rule.</p>
+ * <p>Deletes the specified firewall rule. Identify the rule using either <code>FirewallDomainListId</code> (for domain-list and DNS Firewall Advanced rules) or <code>FirewallThreatProtectionId</code> (for partner-managed and DNS Firewall Advanced rules) — together with <code>FirewallRuleGroupId</code>.</p>
+ *          <p>
+ *             <code>DeleteFirewallRule</code> is the only operation that succeeds against a rule whose <code>Status</code> is <code>CREATION_FAILED</code>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -66,6 +68,9 @@ declare const DeleteFirewallRuleCommand_base: {
  * //     DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //     ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //     FirewallRuleType: { // FirewallRuleType
+ * //       PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ * //         Partner: "STRING_VALUE", // required
+ * //       },
  * //       FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  * //         Category: "STRING_VALUE", // required
  * //       },
@@ -77,6 +82,8 @@ declare const DeleteFirewallRuleCommand_base: {
  * //         ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH", // required
  * //       },
  * //     },
+ * //     Status: "STRING_VALUE",
+ * //     StatusMessage: "STRING_VALUE",
  * //   },
  * // };
  *

package/dist-types/commands/ListFirewallRuleTypesCommand.d.ts

@@ -29,7 +29,8 @@ declare const ListFirewallRuleTypesCommand_base: {
     };
 };
 /**
- * <p>Retrieves the available rule types that can be used in DNS Firewall rules.</p>
+ * <p>Retrieves the rule-type variants that can be used in the <code>FirewallRuleType</code> field of <a>CreateFirewallRule</a> and <a>UpdateFirewallRule</a>. Each returned <a>FirewallRuleTypeDefinition</a> identifies one variant + value combination — for example, <code>FirewallAdvancedContentCategory</code> + <code>VIOLENCE_AND_HATE_SPEECH</code>, or <code>PartnerThreatProtection</code> + a partner-managed feed.</p>
+ *          <p>The supported <code>RuleType</code> filter values are <code>FirewallAdvancedContentCategory</code>, <code>FirewallAdvancedThreatCategory</code>, <code>DnsThreatProtection</code>, and <code>PartnerThreatProtection</code>. When a returned definition's variant requires an external subscription (currently only <code>PartnerThreatProtection</code>), the response also includes a <a>SubscriptionInfo</a> identifying the AWS Marketplace product that backs it; absence of <code>SubscriptionInfo</code> means the variant is fully managed by AWS and requires no separate subscription.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -52,6 +53,10 @@ declare const ListFirewallRuleTypesCommand_base: {
  * //       Value: "STRING_VALUE",
  * //       DisplayName: "STRING_VALUE",
  * //       Description: "STRING_VALUE",
+ * //       SubscriptionInfo: { // SubscriptionInfo
+ * //         VendorName: "STRING_VALUE",
+ * //         ProductId: "STRING_VALUE",
+ * //       },
  * //     },
  * //   ],
  * //   NextToken: "STRING_VALUE",

package/dist-types/commands/ListFirewallRulesCommand.d.ts

@@ -29,8 +29,9 @@ declare const ListFirewallRulesCommand_base: {
     };
 };
 /**
- * <p>Retrieves the firewall rules that you have defined for the specified firewall rule group. DNS Firewall uses the rules in a rule group to filter DNS network traffic for a VPC. </p>
- *          <p>A single call might return only a partial list of the rules. For information, see <code>MaxResults</code>. </p>
+ * <p>Retrieves the firewall rules that you have defined for the specified firewall rule group. DNS Firewall uses the rules in a rule group to filter DNS network traffic for a VPC.</p>
+ *          <p>A single call might return only a partial list of the rules. For information, see <code>MaxResults</code>.</p>
+ *          <p>For rules that require asynchronous provisioning, the response includes <code>Status</code> (see <a>FirewallRuleStatus</a>) and, on failure, <code>StatusMessage</code> with the reason.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -70,6 +71,9 @@ declare const ListFirewallRulesCommand_base: {
  * //       DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //       ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //       FirewallRuleType: { // FirewallRuleType
+ * //         PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ * //           Partner: "STRING_VALUE", // required
+ * //         },
  * //         FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  * //           Category: "STRING_VALUE", // required
  * //         },
@@ -81,6 +85,8 @@ declare const ListFirewallRulesCommand_base: {
  * //           ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH", // required
  * //         },
  * //       },
+ * //       Status: "STRING_VALUE",
+ * //       StatusMessage: "STRING_VALUE",
  * //     },
  * //   ],
  * // };

package/dist-types/commands/ListResolverEndpointIpAddressesCommand.d.ts

@@ -54,7 +54,7 @@ declare const ListResolverEndpointIpAddressesCommand_base: {
  * //       SubnetId: "STRING_VALUE",
  * //       Ip: "STRING_VALUE",
  * //       Ipv6: "STRING_VALUE",
- * //       Status: "CREATING" || "FAILED_CREATION" || "ATTACHING" || "ATTACHED" || "REMAP_DETACHING" || "REMAP_ATTACHING" || "DETACHING" || "FAILED_RESOURCE_GONE" || "DELETING" || "DELETE_FAILED_FAS_EXPIRED" || "UPDATING" || "UPDATE_FAILED" || "ISOLATED",
+ * //       Status: "CREATING" || "FAILED_CREATION" || "FAILED_CREATION_INSUFFICIENT_EC2_CAPACITY_IN_OUTPOST" || "ATTACHING" || "ATTACHED" || "REMAP_DETACHING" || "REMAP_ATTACHING" || "DETACHING" || "FAILED_RESOURCE_GONE" || "DELETING" || "DELETE_FAILED_FAS_EXPIRED" || "UPDATING" || "UPDATE_FAILED" || "ISOLATED",
  * //       StatusMessage: "STRING_VALUE",
  * //       CreationTime: "STRING_VALUE",
  * //       ModificationTime: "STRING_VALUE",

package/dist-types/commands/UpdateFirewallRuleCommand.d.ts

@@ -29,7 +29,7 @@ declare const UpdateFirewallRuleCommand_base: {
     };
 };
 /**
- * <p>Updates the specified firewall rule. </p>
+ * <p>Updates the specified firewall rule. The rule's <code>FirewallRuleType</code>, <code>FirewallDomainListId</code>, and top-level <code>DnsThreatProtection</code> match source cannot be changed after creation. Rules whose <code>Status</code> is <code>CREATING</code> or <code>CREATION_FAILED</code> cannot be updated; remove a failed rule with <a>DeleteFirewallRule</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -54,6 +54,9 @@ declare const UpdateFirewallRuleCommand_base: {
  *   DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  *   ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  *   FirewallRuleType: { // FirewallRuleType
+ *     PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ *       Partner: "STRING_VALUE", // required
+ *     },
  *     FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  *       Category: "STRING_VALUE", // required
  *     },
@@ -88,6 +91,9 @@ declare const UpdateFirewallRuleCommand_base: {
  * //     DnsThreatProtection: "DGA" || "DNS_TUNNELING" || "DICTIONARY_DGA",
  * //     ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH",
  * //     FirewallRuleType: { // FirewallRuleType
+ * //       PartnerThreatProtection: { // PartnerThreatProtectionConfig
+ * //         Partner: "STRING_VALUE", // required
+ * //       },
  * //       FirewallAdvancedContentCategory: { // FirewallAdvancedContentCategoryConfig
  * //         Category: "STRING_VALUE", // required
  * //       },
@@ -99,6 +105,8 @@ declare const UpdateFirewallRuleCommand_base: {
  * //         ConfidenceThreshold: "LOW" || "MEDIUM" || "HIGH", // required
  * //       },
  * //     },
+ * //     Status: "STRING_VALUE",
+ * //     StatusMessage: "STRING_VALUE",
  * //   },
  * // };
  *

package/dist-types/models/enums.d.ts

@@ -403,6 +403,7 @@ export declare const IpAddressStatus: {
     readonly Deleting: "DELETING";
     readonly Detaching: "DETACHING";
     readonly FailedCreation: "FAILED_CREATION";
+    readonly FailedCreationInsufficientEC2CapacityInOutpost: "FAILED_CREATION_INSUFFICIENT_EC2_CAPACITY_IN_OUTPOST";
     readonly FailedResourceGone: "FAILED_RESOURCE_GONE";
     readonly Isolated: "ISOLATED";
     readonly RemapAttaching: "REMAP_ATTACHING";

package/dist-types/models/models_0.d.ts

@@ -638,7 +638,7 @@ export interface DnsThreatProtectionRuleTypeConfig {
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>DICT_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
+     *                   <code>DICTIONARY_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
      *             </li>
      *          </ul>
      * @public
@@ -687,22 +687,40 @@ export interface FirewallAdvancedThreatCategoryConfig {
     Category: string | undefined;
 }
 /**
- * <p>The configuration for a rule type in a DNS Firewall rule. This is a union type — exactly one member should be set.</p>
+ * <p>The configuration for a partner threat-protection rule. To enumerate the partners available in your account, call <a>ListFirewallRuleTypes</a> with <code>RuleType</code> set to <code>PartnerThreatProtection</code> — each returned <a>FirewallRuleTypeDefinition</a> includes a <a>SubscriptionInfo</a> identifying the AWS Marketplace product that backs it.</p>
+ * @public
+ */
+export interface PartnerThreatProtectionConfig {
+    /**
+     * <p>The identifier of the partner threat-protection product, exactly as returned in the <code>Value</code> field of a <a>FirewallRuleTypeDefinition</a> with <code>RuleType</code> set to <code>PartnerThreatProtection</code>. The calling account must hold an active AWS Marketplace subscription to this product.</p>
+     * @public
+     */
+    Partner: string | undefined;
+}
+/**
+ * <p>The rule-type configuration for a DNS Firewall rule. <code>FirewallRuleType</code> is a tagged union — exactly one member must be set per rule, and the member determines what the rule matches against. This shape is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields on <a>CreateFirewallRule</a> and <a>UpdateFirewallRule</a>.</p>
+ *          <p>Call <a>ListFirewallRuleTypes</a> to discover which rule-type variants and which values within each variant are available in your account and Region.</p>
  * @public
  */
 export interface FirewallRuleType {
     /**
-     * <p>The configuration for a content category-based filtering rule.</p>
+     * <p>Configures the rule to match a third-party threat feed delivered through AWS Marketplace. The calling account must hold an active subscription to the partner product named in <code>Partner</code>; if the subscription is missing or revoked, the rule is created with <code>Status</code>
+     *             <code>CREATION_FAILED</code> and cannot be modified — only deleted. See <a>PartnerThreatProtectionConfig</a>.</p>
+     * @public
+     */
+    PartnerThreatProtection?: PartnerThreatProtectionConfig | undefined;
+    /**
+     * <p>Configures the rule to match an AWS-managed content category (for example, <code>VIOLENCE_AND_HATE_SPEECH</code>). See <a>FirewallAdvancedContentCategoryConfig</a>.</p>
      * @public
      */
     FirewallAdvancedContentCategory?: FirewallAdvancedContentCategoryConfig | undefined;
     /**
-     * <p>The configuration for a threat category-based filtering rule.</p>
+     * <p>Configures the rule to match an AWS-managed advanced threat category (for example, <code>PHISHING</code>). See <a>FirewallAdvancedThreatCategoryConfig</a>.</p>
      * @public
      */
     FirewallAdvancedThreatCategory?: FirewallAdvancedThreatCategoryConfig | undefined;
     /**
-     * <p>The configuration for a DNS threat protection rule type, such as DGA or DNS tunneling detection.</p>
+     * <p>Configures the rule to match a built-in DNS Firewall Advanced threat detector — <code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>. See <a>DnsThreatProtectionRuleTypeConfig</a>.</p>
      * @public
      */
     DnsThreatProtection?: DnsThreatProtectionRuleTypeConfig | undefined;
@@ -862,7 +880,7 @@ export interface CreateFirewallRuleEntry {
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>DICT_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
+     *                   <code>DICTIONARY_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
      *             </li>
      *          </ul>
      * @public
@@ -888,7 +906,26 @@ export interface CreateFirewallRuleEntry {
      */
     ConfidenceThreshold?: ConfidenceThreshold | undefined;
     /**
-     * <p>The rule type configuration for the firewall rule. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields.</p>
+     * <p>The rule type configuration for the firewall rule. This is a tagged union — set exactly one of its members. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields. Use one of:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedContentCategory</code> — match an AWS-managed content category (for example, <code>VIOLENCE_AND_HATE_SPEECH</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedThreatCategory</code> — match an AWS-managed advanced threat category (for example, <code>PHISHING</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DnsThreatProtection</code> — match a built-in DNS Firewall Advanced threat detector (<code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>PartnerThreatProtection</code> — match a third-party threat feed delivered through AWS Marketplace. The selected partner must be an active subscription on the calling account.</p>
+     *             </li>
+     *          </ul>
+     *          <p>To enumerate the values supported in your account, call <a>ListFirewallRuleTypes</a>.</p>
      * @public
      */
     FirewallRuleType?: FirewallRuleType | undefined;
@@ -1081,13 +1118,17 @@ export interface FirewallRule {
      *             <li>
      *                <p>
      *                   <code>DGA</code>: Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains
-     * 				to to launch malware attacks.</p>
+     * 				to launch malware attacks.</p>
      *             </li>
      *             <li>
      *                <p>
      *                   <code>DNS_TUNNELING</code>: DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without
      * 				making a network connection to the client.</p>
      *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DICTIONARY_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
+     *             </li>
      *          </ul>
      * @public
      */
@@ -1115,10 +1156,54 @@ export interface FirewallRule {
      */
     ConfidenceThreshold?: ConfidenceThreshold | undefined;
     /**
-     * <p>The rule type configuration for the firewall rule. Exactly one member of this union should be set.</p>
+     * <p>The rule type configuration for the firewall rule. This is a tagged union — exactly one of its members will be populated. Possible members are:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedContentCategory</code> — an AWS-managed content category (for example, <code>VIOLENCE_AND_HATE_SPEECH</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedThreatCategory</code> — an AWS-managed advanced threat category (for example, <code>PHISHING</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DnsThreatProtection</code> — a built-in DNS Firewall Advanced threat detector (<code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>PartnerThreatProtection</code> — a third-party threat feed delivered through AWS Marketplace.</p>
+     *             </li>
+     *          </ul>
+     *          <p>To enumerate the values supported in your account, call <a>ListFirewallRuleTypes</a>.</p>
      * @public
      */
     FirewallRuleType?: FirewallRuleType | undefined;
+    /**
+     * <p>The lifecycle state of the firewall rule. Possible values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>CREATING</code> — DNS Firewall is provisioning the rule. Rules created with the <code>PartnerThreatProtection</code> rule type begin in this state while DNS Firewall verifies the calling account's AWS Marketplace entitlement.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>COMPLETE</code> — The rule is provisioned and enforcing matches.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>CREATION_FAILED</code> — Provisioning failed. <code>StatusMessage</code> contains a human-readable reason. A rule in this state is immutable: <a>UpdateFirewallRule</a> rejects the request, and the rule must be removed with <a>DeleteFirewallRule</a>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>For rules that do not require asynchronous provisioning, this field may be absent.</p>
+     * @public
+     */
+    Status?: string | undefined;
+    /**
+     * <p>An additional message about the rule's lifecycle state. Populated when <code>Status</code> is <code>CREATION_FAILED</code> to describe why provisioning failed.</p>
+     * @public
+     */
+    StatusMessage?: string | undefined;
 }
 /**
  * <p>An error that occurred while creating a firewall rule in a batch operation.</p>
@@ -1383,7 +1468,7 @@ export interface UpdateFirewallRuleEntry {
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>DICT_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
+     *                   <code>DICTIONARY_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
      *             </li>
      *          </ul>
      * @public
@@ -1409,7 +1494,26 @@ export interface UpdateFirewallRuleEntry {
      */
     ConfidenceThreshold?: ConfidenceThreshold | undefined;
     /**
-     * <p>The rule type configuration for the firewall rule. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields.</p>
+     * <p>The rule type configuration for the firewall rule. This is a tagged union — set exactly one of its members. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields. Use one of:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedContentCategory</code> — match an AWS-managed content category (for example, <code>VIOLENCE_AND_HATE_SPEECH</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedThreatCategory</code> — match an AWS-managed advanced threat category (for example, <code>PHISHING</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DnsThreatProtection</code> — match a built-in DNS Firewall Advanced threat detector (<code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>PartnerThreatProtection</code> — match a third-party threat feed delivered through AWS Marketplace. The selected partner must be an active subscription on the calling account.</p>
+     *             </li>
+     *          </ul>
+     *          <p>To enumerate the values supported in your account, call <a>ListFirewallRuleTypes</a>.</p>
      * @public
      */
     FirewallRuleType?: FirewallRuleType | undefined;
@@ -1725,8 +1829,22 @@ export interface CreateFirewallRuleRequest {
     Qtype?: string | undefined;
     /**
      * <p>
-     * 			Use to create a DNS Firewall Advanced rule.
+     * 			The type of the DNS Firewall Advanced rule. This setting is mutually exclusive with <code>FirewallDomainListId</code> and <code>FirewallRuleType</code>. Valid values are:
      * 		</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>DGA</code>: Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to launch malware attacks.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DNS_TUNNELING</code>: DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DICTIONARY_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
+     *             </li>
+     *          </ul>
      * @public
      */
     DnsThreatProtection?: DnsThreatProtection | undefined;
@@ -1753,7 +1871,26 @@ export interface CreateFirewallRuleRequest {
      */
     ConfidenceThreshold?: ConfidenceThreshold | undefined;
     /**
-     * <p>The rule type configuration for the firewall rule. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields.</p>
+     * <p>The rule type configuration for the firewall rule. This is a tagged union — set exactly one of its members. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields. Use one of:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedContentCategory</code> — match an AWS-managed content category (for example, <code>VIOLENCE_AND_HATE_SPEECH</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedThreatCategory</code> — match an AWS-managed advanced threat category (for example, <code>PHISHING</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DnsThreatProtection</code> — match a built-in DNS Firewall Advanced threat detector (<code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>PartnerThreatProtection</code> — match a third-party threat feed delivered through AWS Marketplace. The selected partner must be an active subscription on the calling account.</p>
+     *             </li>
+     *          </ul>
+     *          <p>To enumerate the values supported in your account, call <a>ListFirewallRuleTypes</a>.</p>
      * @public
      */
     FirewallRuleType?: FirewallRuleType | undefined;
@@ -3260,6 +3397,22 @@ export interface FirewallRuleGroupMetadata {
      */
     ShareStatus?: ShareStatus | undefined;
 }
+/**
+ * <p>Identifies the AWS Marketplace product that backs a partner-managed rule type. Returned as part of <a>FirewallRuleTypeDefinition</a> when the rule type variant requires an active customer subscription to the named product.</p>
+ * @public
+ */
+export interface SubscriptionInfo {
+    /**
+     * <p>The name of the AWS Marketplace seller (vendor) that publishes the partner threat-protection product (for example, <code>Palo Alto Networks</code>).</p>
+     * @public
+     */
+    VendorName?: string | undefined;
+    /**
+     * <p>The AWS Marketplace product identifier of the partner threat-protection product. Use this value to verify or manage the calling account's subscription in AWS Marketplace.</p>
+     * @public
+     */
+    ProductId?: string | undefined;
+}
 /**
  * <p>The definition of an available rule type that can be used in DNS Firewall rules. This is returned by <a>ListFirewallRuleTypes</a>.</p>
  * @public
@@ -3285,6 +3438,11 @@ export interface FirewallRuleTypeDefinition {
      * @public
      */
     Description?: string | undefined;
+    /**
+     * <p>For rule types that require an external subscription (today, only the <code>PartnerThreatProtection</code> variant), describes the AWS Marketplace product that backs the rule type. Absent for rule types that are managed by AWS and do not require a separate subscription. See <a>SubscriptionInfo</a>.</p>
+     * @public
+     */
+    SubscriptionInfo?: SubscriptionInfo | undefined;
 }
 /**
  * @public
@@ -4086,7 +4244,7 @@ export interface ListFirewallRulesResponse {
  */
 export interface ListFirewallRuleTypesRequest {
     /**
-     * <p>The rule type to filter by. If specified, only rule types matching this value are returned.</p>
+     * <p>An optional filter that restricts the response to a single <a>FirewallRuleType</a> variant. Supported values: <code>FirewallAdvancedContentCategory</code>, <code>FirewallAdvancedThreatCategory</code>, <code>DnsThreatProtection</code>, and <code>PartnerThreatProtection</code>. If omitted, definitions across all variants are returned.</p>
      * @public
      */
     RuleType?: string | undefined;
@@ -5311,19 +5469,23 @@ export interface UpdateFirewallRuleRequest {
     Qtype?: string | undefined;
     /**
      * <p>
-     * 			The type of the DNS Firewall Advanced rule. Valid values are:
+     * 			The type of the DNS Firewall Advanced rule. This setting is mutually exclusive with <code>FirewallDomainListId</code> and <code>FirewallRuleType</code>. Valid values are:
      * 		</p>
      *          <ul>
      *             <li>
      *                <p>
      *                   <code>DGA</code>: Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains
-     * 				to to launch malware attacks.</p>
+     * 				to launch malware attacks.</p>
      *             </li>
      *             <li>
      *                <p>
      *                   <code>DNS_TUNNELING</code>: DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without
      * 				making a network connection to the client.</p>
      *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DICTIONARY_DGA</code>: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.</p>
+     *             </li>
      *          </ul>
      * @public
      */
@@ -5351,7 +5513,26 @@ export interface UpdateFirewallRuleRequest {
      */
     ConfidenceThreshold?: ConfidenceThreshold | undefined;
     /**
-     * <p>The rule type configuration for the firewall rule. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields.</p>
+     * <p>The rule type configuration for the firewall rule. This is a tagged union — set exactly one of its members. This setting is mutually exclusive with the top-level <code>FirewallDomainListId</code> and <code>DnsThreatProtection</code> fields. Use one of:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedContentCategory</code> — match an AWS-managed content category (for example, <code>VIOLENCE_AND_HATE_SPEECH</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FirewallAdvancedThreatCategory</code> — match an AWS-managed advanced threat category (for example, <code>PHISHING</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DnsThreatProtection</code> — match a built-in DNS Firewall Advanced threat detector (<code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>).</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>PartnerThreatProtection</code> — match a third-party threat feed delivered through AWS Marketplace. The selected partner must be an active subscription on the calling account.</p>
+     *             </li>
+     *          </ul>
+     *          <p>To enumerate the values supported in your account, call <a>ListFirewallRuleTypes</a>.</p>
      * @public
      */
     FirewallRuleType?: FirewallRuleType | undefined;

package/dist-types/schemas/schemas_0.d.ts

@@ -162,6 +162,7 @@ export declare var ListResolverRulesResponse$: StaticStructureSchema;
 export declare var ListTagsForResourceRequest$: StaticStructureSchema;
 export declare var ListTagsForResourceResponse$: StaticStructureSchema;
 export declare var OutpostResolver$: StaticStructureSchema;
+export declare var PartnerThreatProtectionConfig$: StaticStructureSchema;
 export declare var PutFirewallRuleGroupPolicyRequest$: StaticStructureSchema;
 export declare var PutFirewallRuleGroupPolicyResponse$: StaticStructureSchema;
 export declare var PutResolverQueryLogConfigPolicyRequest$: StaticStructureSchema;
@@ -176,6 +177,7 @@ export declare var ResolverQueryLogConfigAssociation$: StaticStructureSchema;
 export declare var ResolverRule$: StaticStructureSchema;
 export declare var ResolverRuleAssociation$: StaticStructureSchema;
 export declare var ResolverRuleConfig$: StaticStructureSchema;
+export declare var SubscriptionInfo$: StaticStructureSchema;
 export declare var Tag$: StaticStructureSchema;
 export declare var TagResourceRequest$: StaticStructureSchema;
 export declare var TagResourceResponse$: StaticStructureSchema;

package/dist-types/ts3.4/models/enums.d.ts

@@ -221,6 +221,7 @@ export declare const IpAddressStatus: {
   readonly Deleting: "DELETING";
   readonly Detaching: "DETACHING";
   readonly FailedCreation: "FAILED_CREATION";
+  readonly FailedCreationInsufficientEC2CapacityInOutpost: "FAILED_CREATION_INSUFFICIENT_EC2_CAPACITY_IN_OUTPOST";
   readonly FailedResourceGone: "FAILED_RESOURCE_GONE";
   readonly Isolated: "ISOLATED";
   readonly RemapAttaching: "REMAP_ATTACHING";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -142,7 +142,11 @@ export interface FirewallAdvancedContentCategoryConfig {
 export interface FirewallAdvancedThreatCategoryConfig {
   Category: string | undefined;
 }
+export interface PartnerThreatProtectionConfig {
+  Partner: string | undefined;
+}
 export interface FirewallRuleType {
+  PartnerThreatProtection?: PartnerThreatProtectionConfig | undefined;
   FirewallAdvancedContentCategory?:
     | FirewallAdvancedContentCategoryConfig
     | undefined;
@@ -190,6 +194,8 @@ export interface FirewallRule {
   DnsThreatProtection?: DnsThreatProtection | undefined;
   ConfidenceThreshold?: ConfidenceThreshold | undefined;
   FirewallRuleType?: FirewallRuleType | undefined;
+  Status?: string | undefined;
+  StatusMessage?: string | undefined;
 }
 export interface BatchCreateFirewallRuleError {
   FirewallRule?: CreateFirewallRuleEntry | undefined;
@@ -517,11 +523,16 @@ export interface FirewallRuleGroupMetadata {
   CreatorRequestId?: string | undefined;
   ShareStatus?: ShareStatus | undefined;
 }
+export interface SubscriptionInfo {
+  VendorName?: string | undefined;
+  ProductId?: string | undefined;
+}
 export interface FirewallRuleTypeDefinition {
   RuleType?: string | undefined;
   Value?: string | undefined;
   DisplayName?: string | undefined;
   Description?: string | undefined;
+  SubscriptionInfo?: SubscriptionInfo | undefined;
 }
 export interface GetFirewallConfigRequest {
   ResourceId: string | undefined;

package/dist-types/ts3.4/schemas/schemas_0.d.ts

@@ -161,6 +161,7 @@ export declare var ListResolverRulesResponse$: StaticStructureSchema;
 export declare var ListTagsForResourceRequest$: StaticStructureSchema;
 export declare var ListTagsForResourceResponse$: StaticStructureSchema;
 export declare var OutpostResolver$: StaticStructureSchema;
+export declare var PartnerThreatProtectionConfig$: StaticStructureSchema;
 export declare var PutFirewallRuleGroupPolicyRequest$: StaticStructureSchema;
 export declare var PutFirewallRuleGroupPolicyResponse$: StaticStructureSchema;
 export declare var PutResolverQueryLogConfigPolicyRequest$: StaticStructureSchema;
@@ -175,6 +176,7 @@ export declare var ResolverQueryLogConfigAssociation$: StaticStructureSchema;
 export declare var ResolverRule$: StaticStructureSchema;
 export declare var ResolverRuleAssociation$: StaticStructureSchema;
 export declare var ResolverRuleConfig$: StaticStructureSchema;
+export declare var SubscriptionInfo$: StaticStructureSchema;
 export declare var Tag$: StaticStructureSchema;
 export declare var TagResourceRequest$: StaticStructureSchema;
 export declare var TagResourceResponse$: StaticStructureSchema;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-route53resolver",
   "description": "AWS SDK for JavaScript Route53resolver Client for Node.js, Browser and React Native",
-  "version": "3.1069.0",
+  "version": "3.1070.0",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
     "build:cjs": "node ../../scripts/compilation/inline",