aws-cdk-lib 2.171.1__py3-none-any.whl → 2.172.0__py3-none-any.whl

aws_cdk/aws_resourcegroups/__init__.py

@@ -923,9 +923,300 @@ class CfnGroupProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556)
+class CfnTagSyncTask(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_resourcegroups.CfnTagSyncTask",
+):
+    '''Schema for ResourceGroups::TagSyncTask.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-tagsynctask.html
+    :cloudformationResource: AWS::ResourceGroups::TagSyncTask
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_resourcegroups as resourcegroups
+        
+        cfn_tag_sync_task = resourcegroups.CfnTagSyncTask(self, "MyCfnTagSyncTask",
+            group="group",
+            role_arn="roleArn",
+            tag_key="tagKey",
+            tag_value="tagValue"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        group: builtins.str,
+        role_arn: builtins.str,
+        tag_key: builtins.str,
+        tag_value: builtins.str,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param group: The Amazon resource name (ARN) or name of the application group for which you want to create a tag-sync task.
+        :param role_arn: The Amazon resource name (ARN) of the role assumed by the service to tag and untag resources on your behalf.
+        :param tag_key: The tag key. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.
+        :param tag_value: The tag value. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5cc3fe2babfae90c2893ec2e64dba324eb7f1354bc8586a2157b1e9493be9d2a)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnTagSyncTaskProps(
+            group=group, role_arn=role_arn, tag_key=tag_key, tag_value=tag_value
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fa39f02686575059144fa82b37d1e2e3bbec0b2f0f8b1503d29a8202955b1d71)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f5e39aeb093662e365e0c8f8da41ae7f18912a09e014a840fd4e0a3eea585462)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrGroupArn")
+    def attr_group_arn(self) -> builtins.str:
+        '''The Amazon resource name (ARN) of the ApplicationGroup for which the TagSyncTask is created.
+
+        :cloudformationAttribute: GroupArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrGroupArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrGroupName")
+    def attr_group_name(self) -> builtins.str:
+        '''The Name of the application group for which the TagSyncTask is created.
+
+        :cloudformationAttribute: GroupName
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrGroupName"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrStatus")
+    def attr_status(self) -> builtins.str:
+        '''The status of the TagSyncTask.
+
+        :cloudformationAttribute: Status
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrStatus"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrTaskArn")
+    def attr_task_arn(self) -> builtins.str:
+        '''The ARN of the TagSyncTask resource.
+
+        :cloudformationAttribute: TaskArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrTaskArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="group")
+    def group(self) -> builtins.str:
+        '''The Amazon resource name (ARN) or name of the application group for which you want to create a tag-sync task.'''
+        return typing.cast(builtins.str, jsii.get(self, "group"))
+
+    @group.setter
+    def group(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d133f44d39c629bca40a85ade7619a80aef78c5629c6cdd2f74b840c6b4cd745)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "group", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="roleArn")
+    def role_arn(self) -> builtins.str:
+        '''The Amazon resource name (ARN) of the role assumed by the service to tag and untag resources on your behalf.'''
+        return typing.cast(builtins.str, jsii.get(self, "roleArn"))
+
+    @role_arn.setter
+    def role_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__be46018b4db2c0ed820aeae0051f1b794bdebae8736cd97e2b08cf2bf5d3a673)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "roleArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tagKey")
+    def tag_key(self) -> builtins.str:
+        '''The tag key.'''
+        return typing.cast(builtins.str, jsii.get(self, "tagKey"))
+
+    @tag_key.setter
+    def tag_key(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__36f0fe44c7515735b59ea6297b6cb7c5a2b5bddb1a4da3e9f0910baab1d7d5d9)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tagKey", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tagValue")
+    def tag_value(self) -> builtins.str:
+        '''The tag value.'''
+        return typing.cast(builtins.str, jsii.get(self, "tagValue"))
+
+    @tag_value.setter
+    def tag_value(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__66392dc23dc3e7ed8bf3c5d524bd90c2953712bb7e49a797537fda8d836525c3)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tagValue", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_resourcegroups.CfnTagSyncTaskProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "group": "group",
+        "role_arn": "roleArn",
+        "tag_key": "tagKey",
+        "tag_value": "tagValue",
+    },
+)
+class CfnTagSyncTaskProps:
+    def __init__(
+        self,
+        *,
+        group: builtins.str,
+        role_arn: builtins.str,
+        tag_key: builtins.str,
+        tag_value: builtins.str,
+    ) -> None:
+        '''Properties for defining a ``CfnTagSyncTask``.
+
+        :param group: The Amazon resource name (ARN) or name of the application group for which you want to create a tag-sync task.
+        :param role_arn: The Amazon resource name (ARN) of the role assumed by the service to tag and untag resources on your behalf.
+        :param tag_key: The tag key. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.
+        :param tag_value: The tag value. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-tagsynctask.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_resourcegroups as resourcegroups
+            
+            cfn_tag_sync_task_props = resourcegroups.CfnTagSyncTaskProps(
+                group="group",
+                role_arn="roleArn",
+                tag_key="tagKey",
+                tag_value="tagValue"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__92e2f4c3b48ee7233cae450c356891144695748bdb5f027bc5b13135d8eeea4e)
+            check_type(argname="argument group", value=group, expected_type=type_hints["group"])
+            check_type(argname="argument role_arn", value=role_arn, expected_type=type_hints["role_arn"])
+            check_type(argname="argument tag_key", value=tag_key, expected_type=type_hints["tag_key"])
+            check_type(argname="argument tag_value", value=tag_value, expected_type=type_hints["tag_value"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "group": group,
+            "role_arn": role_arn,
+            "tag_key": tag_key,
+            "tag_value": tag_value,
+        }
+
+    @builtins.property
+    def group(self) -> builtins.str:
+        '''The Amazon resource name (ARN) or name of the application group for which you want to create a tag-sync task.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-tagsynctask.html#cfn-resourcegroups-tagsynctask-group
+        '''
+        result = self._values.get("group")
+        assert result is not None, "Required property 'group' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def role_arn(self) -> builtins.str:
+        '''The Amazon resource name (ARN) of the role assumed by the service to tag and untag resources on your behalf.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-tagsynctask.html#cfn-resourcegroups-tagsynctask-rolearn
+        '''
+        result = self._values.get("role_arn")
+        assert result is not None, "Required property 'role_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def tag_key(self) -> builtins.str:
+        '''The tag key.
+
+        Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-tagsynctask.html#cfn-resourcegroups-tagsynctask-tagkey
+        '''
+        result = self._values.get("tag_key")
+        assert result is not None, "Required property 'tag_key' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def tag_value(self) -> builtins.str:
+        '''The tag value.
+
+        Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-tagsynctask.html#cfn-resourcegroups-tagsynctask-tagvalue
+        '''
+        result = self._values.get("tag_value")
+        assert result is not None, "Required property 'tag_value' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnTagSyncTaskProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 __all__ = [
     "CfnGroup",
     "CfnGroupProps",
+    "CfnTagSyncTask",
+    "CfnTagSyncTaskProps",
 ]
 
 publication.publish()
@@ -1044,3 +1335,61 @@ def _typecheckingstub__fb026100b2da91b258c8101dddf16a77684d48ca689302721dfecf0e2
 ) -> None:
     """Type checking stubs"""
     pass
+
+def _typecheckingstub__5cc3fe2babfae90c2893ec2e64dba324eb7f1354bc8586a2157b1e9493be9d2a(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    group: builtins.str,
+    role_arn: builtins.str,
+    tag_key: builtins.str,
+    tag_value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__fa39f02686575059144fa82b37d1e2e3bbec0b2f0f8b1503d29a8202955b1d71(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f5e39aeb093662e365e0c8f8da41ae7f18912a09e014a840fd4e0a3eea585462(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d133f44d39c629bca40a85ade7619a80aef78c5629c6cdd2f74b840c6b4cd745(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__be46018b4db2c0ed820aeae0051f1b794bdebae8736cd97e2b08cf2bf5d3a673(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__36f0fe44c7515735b59ea6297b6cb7c5a2b5bddb1a4da3e9f0910baab1d7d5d9(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__66392dc23dc3e7ed8bf3c5d524bd90c2953712bb7e49a797537fda8d836525c3(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__92e2f4c3b48ee7233cae450c356891144695748bdb5f027bc5b13135d8eeea4e(
+    *,
+    group: builtins.str,
+    role_arn: builtins.str,
+    tag_key: builtins.str,
+    tag_value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass

aws_cdk/aws_route53_targets/__init__.py

@@ -31,6 +31,20 @@ This library contains Route53 Alias Record targets for:
       target=route53.RecordTarget.from_alias(targets.ApiGatewayv2DomainProperties(domain_name.regional_domain_name, domain_name.regional_hosted_zone_id))
   )
   ```
+* AppSync custom domains
+
+  ```python
+  import aws_cdk.aws_appsync as appsync
+
+  # zone: route53.HostedZone
+  # graphql_api: appsync.GraphqlApi
+
+
+  route53.ARecord(self, "AliasRecord",
+      zone=zone,
+      target=route53.RecordTarget.from_alias(targets.AppSyncTarget(graphql_api))
+  )
+  ```
 * CloudFront distributions
 
   ```python
@@ -217,6 +231,7 @@ import constructs as _constructs_77d1e7e8
 from ..aws_apigateway import (
     IDomainName as _IDomainName_6c4e4c80, RestApiBase as _RestApiBase_0431da32
 )
+from ..aws_appsync import GraphqlApi as _GraphqlApi_3671c3a8
 from ..aws_cloudfront import IDistribution as _IDistribution_7ac752a4
 from ..aws_cognito import UserPoolDomain as _UserPoolDomain_f402e168
 from ..aws_ec2 import InterfaceVpcEndpoint as _InterfaceVpcEndpoint_9b08bb25
@@ -342,6 +357,59 @@ class ApiGatewayv2DomainProperties(
         return typing.cast(_AliasRecordTargetConfig_588f62e9, jsii.invoke(self, "bind", [_record, _zone]))
 
 
+@jsii.implements(_IAliasRecordTarget_aae9327f)
+class AppSyncTarget(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_route53_targets.AppSyncTarget",
+):
+    '''Defines an AppSync Graphql API as the alias target.
+
+    Requires that the domain
+    name will be defined through ``GraphqlApiProps.domainName``.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        import aws_cdk.aws_appsync as appsync
+        
+        # zone: route53.HostedZone
+        # graphql_api: appsync.GraphqlApi
+        
+        
+        route53.ARecord(self, "AliasRecord",
+            zone=zone,
+            target=route53.RecordTarget.from_alias(targets.AppSyncTarget(graphql_api))
+        )
+    '''
+
+    def __init__(self, graphql_api: _GraphqlApi_3671c3a8) -> None:
+        '''
+        :param graphql_api: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__babb157ff28ae7a8790773110c310e6380f27259b43d58ba3491e11acd6362ab)
+            check_type(argname="argument graphql_api", value=graphql_api, expected_type=type_hints["graphql_api"])
+        jsii.create(self.__class__, self, [graphql_api])
+
+    @jsii.member(jsii_name="bind")
+    def bind(
+        self,
+        _record: _IRecordSet_7d446a82,
+        _zone: typing.Optional[_IHostedZone_9a6907ad] = None,
+    ) -> _AliasRecordTargetConfig_588f62e9:
+        '''Return hosted zone ID and DNS name, usable for Route53 alias targets.
+
+        :param _record: -
+        :param _zone: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bb6c1847e1d1aaadc5cdfa732af7d95f520ae163215b4adf60347fc2c8b9a685)
+            check_type(argname="argument _record", value=_record, expected_type=type_hints["_record"])
+            check_type(argname="argument _zone", value=_zone, expected_type=type_hints["_zone"])
+        return typing.cast(_AliasRecordTargetConfig_588f62e9, jsii.invoke(self, "bind", [_record, _zone]))
+
+
 @jsii.implements(_IAliasRecordTarget_aae9327f)
 class BucketWebsiteTarget(
     metaclass=jsii.JSIIMeta,
@@ -898,6 +966,7 @@ __all__ = [
     "ApiGateway",
     "ApiGatewayDomain",
     "ApiGatewayv2DomainProperties",
+    "AppSyncTarget",
     "BucketWebsiteTarget",
     "ClassicLoadBalancerTarget",
     "CloudFrontTarget",
@@ -939,6 +1008,19 @@ def _typecheckingstub__06815ea952926fe8cadd75b92163d9cdaa6382360911ec0411cabfe9a
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__babb157ff28ae7a8790773110c310e6380f27259b43d58ba3491e11acd6362ab(
+    graphql_api: _GraphqlApi_3671c3a8,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__bb6c1847e1d1aaadc5cdfa732af7d95f520ae163215b4adf60347fc2c8b9a685(
+    _record: _IRecordSet_7d446a82,
+    _zone: typing.Optional[_IHostedZone_9a6907ad] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ddbd19de44d0f648d972f99cbd261ae3e9159511037db7c12ae0ebcb70553020(
     bucket: _IBucket_42e086fd,
 ) -> None:

aws_cdk/aws_route53resolver/__init__.py

@@ -719,11 +719,11 @@ class CfnFirewallRuleGroup(
             :param block_override_domain: The custom DNS record to send back in response to the query. Used for the rule action ``BLOCK`` with a ``BlockResponse`` setting of ``OVERRIDE`` .
             :param block_override_ttl: The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action ``BLOCK`` with a ``BlockResponse`` setting of ``OVERRIDE`` .
             :param block_response: The way that you want DNS Firewall to block the request. Used for the rule action setting ``BLOCK`` . - ``NODATA`` - Respond indicating that the query was successful, but no response is available for it. - ``NXDOMAIN`` - Respond indicating that the domain name that's in the query doesn't exist. - ``OVERRIDE`` - Provide a custom override in the response. This option requires custom handling details in the rule's ``BlockOverride*`` settings.
-            :param confidence_threshold: FirewallDomainRedirectionAction.
-            :param dns_threat_protection: FirewallDomainRedirectionAction.
+            :param confidence_threshold: The confidence threshold for DNS Firewall Advanced. You must provide this value when you create a DNS Firewall Advanced rule. The confidence level values mean: - ``LOW`` : Provides the highest detection rate for threats, but also increases false positives. - ``MEDIUM`` : Provides a balance between detecting threats and false positives. - ``HIGH`` : Detects only the most well corroborated threats with a low rate of false positives.
+            :param dns_threat_protection: The type of the DNS Firewall Advanced rule. Valid values are:. - ``DGA`` : Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to to launch malware attacks. - ``DNS_TUNNELING`` : DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client.
             :param firewall_domain_list_id: The ID of the domain list that's used in the rule.
             :param firewall_domain_redirection_action: How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, or DNAME. ``Inspect_Redirection_Domain`` (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list. ``Trust_Redirection_Domain`` inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain list.
-            :param firewall_threat_protection_id: ResourceId.
+            :param firewall_threat_protection_id: ID of the DNS Firewall Advanced rule.
             :param qtype: The DNS query type you want the rule to evaluate. Allowed values are; - A: Returns an IPv4 address. - AAAA: Returns an Ipv6 address. - CAA: Restricts CAs that can create SSL/TLS certifications for the domain. - CNAME: Returns another domain name. - DS: Record that identifies the DNSSEC signing key of a delegated zone. - MX: Specifies mail servers. - NAPTR: Regular-expression-based rewriting of domain names. - NS: Authoritative name servers. - PTR: Maps an IP address to a domain name. - SOA: Start of authority record for the zone. - SPF: Lists the servers authorized to send emails from a domain. - SRV: Application specific values that identify servers. - TXT: Verifies email senders and application-specific values. - A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPE NUMBER , where the NUMBER can be 1-65334, for example, TYPE28. For more information, see `List of DNS record types <https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/List_of_DNS_record_types>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html
@@ -870,7 +870,13 @@ class CfnFirewallRuleGroup(
 
         @builtins.property
         def confidence_threshold(self) -> typing.Optional[builtins.str]:
-            '''FirewallDomainRedirectionAction.
+            '''The confidence threshold for DNS Firewall Advanced.
+
+            You must provide this value when you create a DNS Firewall Advanced rule. The confidence level values mean:
+
+            - ``LOW`` : Provides the highest detection rate for threats, but also increases false positives.
+            - ``MEDIUM`` : Provides a balance between detecting threats and false positives.
+            - ``HIGH`` : Detects only the most well corroborated threats with a low rate of false positives.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-confidencethreshold
             '''
@@ -879,7 +885,10 @@ class CfnFirewallRuleGroup(
 
         @builtins.property
         def dns_threat_protection(self) -> typing.Optional[builtins.str]:
-            '''FirewallDomainRedirectionAction.
+            '''The type of the DNS Firewall Advanced rule. Valid values are:.
+
+            - ``DGA`` : Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to to launch malware attacks.
+            - ``DNS_TUNNELING`` : DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-dnsthreatprotection
             '''
@@ -910,7 +919,7 @@ class CfnFirewallRuleGroup(
 
         @builtins.property
         def firewall_threat_protection_id(self) -> typing.Optional[builtins.str]:
-            '''ResourceId.
+            '''ID of the DNS Firewall Advanced rule.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html#cfn-route53resolver-firewallrulegroup-firewallrule-firewallthreatprotectionid
             '''