Interface CreateFirewallRuleRequest.Builder
- All Superinterfaces:
AwsRequest.Builder,Buildable,CopyableBuilder<CreateFirewallRuleRequest.Builder,,CreateFirewallRuleRequest> Route53GlobalResolverRequest.Builder,SdkBuilder<CreateFirewallRuleRequest.Builder,,CreateFirewallRuleRequest> SdkPojo,SdkRequest.Builder
- Enclosing class:
CreateFirewallRuleRequest
-
Method Summary
Modifier and TypeMethodDescriptionThe action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:action(FirewallRuleAction action) The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:blockOverrideDnsType(String blockOverrideDnsType) The DNS record's type.blockOverrideDnsType(BlockOverrideDnsQueryType blockOverrideDnsType) The DNS record's type.blockOverrideDomain(String blockOverrideDomain) The custom DNS record to send back in response to the query.blockOverrideTtl(Integer blockOverrideTtl) The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record.blockResponse(String blockResponse) The response to return when the action is BLOCK.blockResponse(FirewallBlockResponse blockResponse) The response to return when the action is BLOCK.clientToken(String clientToken) A unique, case-sensitive identifier to ensure idempotency.confidenceThreshold(String confidenceThreshold) The confidence threshold for advanced threat detection.confidenceThreshold(ConfidenceThreshold confidenceThreshold) The confidence threshold for advanced threat detection.description(String description) An optional description for the firewall rule.dnsAdvancedProtection(String dnsAdvancedProtection) Whether to enable advanced DNS threat protection for this rule.dnsAdvancedProtection(DnsAdvancedProtection dnsAdvancedProtection) Whether to enable advanced DNS threat protection for this rule.The ID of the DNS view to associate with this firewall rule.firewallDomainListId(String firewallDomainListId) The ID of the firewall domain list to use in this rule.A descriptive name for the firewall rule.overrideConfiguration(Consumer<AwsRequestOverrideConfiguration.Builder> builderConsumer) Add an optional request override configuration.overrideConfiguration(AwsRequestOverrideConfiguration overrideConfiguration) Add an optional request override configuration.The priority of this rule.The DNS query type to match for this rule.Methods inherited from interface software.amazon.awssdk.awscore.AwsRequest.Builder
overrideConfigurationMethods inherited from interface software.amazon.awssdk.utils.builder.CopyableBuilder
copyMethods inherited from interface software.amazon.awssdk.services.route53globalresolver.model.Route53GlobalResolverRequest.Builder
buildMethods inherited from interface software.amazon.awssdk.utils.builder.SdkBuilder
applyMutation, buildMethods inherited from interface software.amazon.awssdk.core.SdkPojo
equalsBySdkFields, sdkFieldNameToField, sdkFields
-
Method Details
-
action
The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:
-
ALLOW- Permit the request to go through. -
ALERT- Permit the request and send metrics and logs to CloudWatch. -
BLOCK- Disallow the request. This option requires additional details in the rule'sBlockResponse.
- Parameters:
action- The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:-
ALLOW- Permit the request to go through. -
ALERT- Permit the request and send metrics and logs to CloudWatch. -
BLOCK- Disallow the request. This option requires additional details in the rule'sBlockResponse.
-
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
-
action
The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:
-
ALLOW- Permit the request to go through. -
ALERT- Permit the request and send metrics and logs to CloudWatch. -
BLOCK- Disallow the request. This option requires additional details in the rule'sBlockResponse.
- Parameters:
action- The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:-
ALLOW- Permit the request to go through. -
ALERT- Permit the request and send metrics and logs to CloudWatch. -
BLOCK- Disallow the request. This option requires additional details in the rule'sBlockResponse.
-
- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
-
blockOverrideDnsType
The DNS record's type. This determines the format of the record value that you provided in
BlockOverrideDomain. Used for the rule actionBLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Parameters:
blockOverrideDnsType- The DNS record's type. This determines the format of the record value that you provided inBlockOverrideDomain. Used for the rule actionBLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
blockOverrideDnsType
CreateFirewallRuleRequest.Builder blockOverrideDnsType(BlockOverrideDnsQueryType blockOverrideDnsType) The DNS record's type. This determines the format of the record value that you provided in
BlockOverrideDomain. Used for the rule actionBLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Parameters:
blockOverrideDnsType- The DNS record's type. This determines the format of the record value that you provided inBlockOverrideDomain. Used for the rule actionBLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
blockOverrideDomain
The custom DNS record to send back in response to the query. Used for the rule action
BLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Parameters:
blockOverrideDomain- The custom DNS record to send back in response to the query. Used for the rule actionBLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
blockOverrideTtl
The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action
BLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Parameters:
blockOverrideTtl- The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule actionBLOCKwith aBlockResponsesetting ofOVERRIDE.This setting is required if the
BlockResponsesetting isOVERRIDE.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
blockResponse
The response to return when the action is BLOCK. Valid values are NXDOMAIN (domain does not exist), NODATA (domain exists but no records), or OVERRIDE (return custom response).
- Parameters:
blockResponse- The response to return when the action is BLOCK. Valid values are NXDOMAIN (domain does not exist), NODATA (domain exists but no records), or OVERRIDE (return custom response).- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
blockResponse
The response to return when the action is BLOCK. Valid values are NXDOMAIN (domain does not exist), NODATA (domain exists but no records), or OVERRIDE (return custom response).
- Parameters:
blockResponse- The response to return when the action is BLOCK. Valid values are NXDOMAIN (domain does not exist), NODATA (domain exists but no records), or OVERRIDE (return custom response).- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
clientToken
A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the same
clientTokenhas the same result every time.- Parameters:
clientToken- A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the sameclientTokenhas the same result every time.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
confidenceThreshold
The confidence threshold for advanced threat detection. Valid values are HIGH, MEDIUM, or LOW, indicating the accuracy level required for threat detection.
- Parameters:
confidenceThreshold- The confidence threshold for advanced threat detection. Valid values are HIGH, MEDIUM, or LOW, indicating the accuracy level required for threat detection.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
confidenceThreshold
The confidence threshold for advanced threat detection. Valid values are HIGH, MEDIUM, or LOW, indicating the accuracy level required for threat detection.
- Parameters:
confidenceThreshold- The confidence threshold for advanced threat detection. Valid values are HIGH, MEDIUM, or LOW, indicating the accuracy level required for threat detection.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
description
An optional description for the firewall rule.
- Parameters:
description- An optional description for the firewall rule.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
dnsAdvancedProtection
Whether to enable advanced DNS threat protection for this rule. Advanced protection can detect and block DNS tunneling and Domain Generation Algorithm (DGA) threats.
- Parameters:
dnsAdvancedProtection- Whether to enable advanced DNS threat protection for this rule. Advanced protection can detect and block DNS tunneling and Domain Generation Algorithm (DGA) threats.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
dnsAdvancedProtection
CreateFirewallRuleRequest.Builder dnsAdvancedProtection(DnsAdvancedProtection dnsAdvancedProtection) Whether to enable advanced DNS threat protection for this rule. Advanced protection can detect and block DNS tunneling and Domain Generation Algorithm (DGA) threats.
- Parameters:
dnsAdvancedProtection- Whether to enable advanced DNS threat protection for this rule. Advanced protection can detect and block DNS tunneling and Domain Generation Algorithm (DGA) threats.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
firewallDomainListId
The ID of the firewall domain list to use in this rule.
- Parameters:
firewallDomainListId- The ID of the firewall domain list to use in this rule.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
name
A descriptive name for the firewall rule.
- Parameters:
name- A descriptive name for the firewall rule.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
priority
The priority of this rule. Rules are evaluated in priority order, with lower numbers having higher priority. When a DNS query matches multiple rules, the rule with the highest priority (lowest number) is applied.
- Parameters:
priority- The priority of this rule. Rules are evaluated in priority order, with lower numbers having higher priority. When a DNS query matches multiple rules, the rule with the highest priority (lowest number) is applied.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
dnsViewId
The ID of the DNS view to associate with this firewall rule.
- Parameters:
dnsViewId- The ID of the DNS view to associate with this firewall rule.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
qType
The DNS query type to match for this rule. Examples include A (IPv4 address), AAAA (IPv6 address), MX (mail exchange), or TXT (text record).
- Parameters:
qType- The DNS query type to match for this rule. Examples include A (IPv4 address), AAAA (IPv6 address), MX (mail exchange), or TXT (text record).- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
overrideConfiguration
CreateFirewallRuleRequest.Builder overrideConfiguration(AwsRequestOverrideConfiguration overrideConfiguration) Description copied from interface:AwsRequest.BuilderAdd an optional request override configuration.- Specified by:
overrideConfigurationin interfaceAwsRequest.Builder- Parameters:
overrideConfiguration- The override configuration.- Returns:
- This object for method chaining.
-
overrideConfiguration
CreateFirewallRuleRequest.Builder overrideConfiguration(Consumer<AwsRequestOverrideConfiguration.Builder> builderConsumer) Description copied from interface:AwsRequest.BuilderAdd an optional request override configuration.- Specified by:
overrideConfigurationin interfaceAwsRequest.Builder- Parameters:
builderConsumer- AConsumerto which an emptyAwsRequestOverrideConfiguration.Builderwill be given.- Returns:
- This object for method chaining.
-