UpdateFirewallRuleGroupAssociation - Amazon Route 53

UpdateFirewallRuleGroupAssociation

Changes the association of a FirewallRuleGroup with a VPC. The association enables DNS filtering for the VPC.

Request Syntax

{ "FirewallRuleGroupAssociationId": "string", "MutationProtection": "string", "Name": "string", "Priority": number }

Request Parameters

For information about the parameters that are common to all actions, see Common Parameters.

The request accepts the following data in JSON format.

FirewallRuleGroupAssociationId

The identifier of the FirewallRuleGroupAssociation.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Required: Yes

MutationProtection

If enabled, this setting disallows modification or removal of the association, to help prevent against accidentally altering DNS firewall protections.

Type: String

Valid Values: ENABLED | DISABLED

Required: No

Name

The name of the rule group association.

Type: String

Length Constraints: Maximum length of 64.

Pattern: (?!^[0-9]+$)([a-zA-Z0-9\-_' ']+)

Required: No

Priority

The setting that determines the processing order of the rule group among the rule groups that you associate with the specified VPC. DNS Firewall filters VPC traffic starting from the rule group with the lowest numeric priority setting.

You must specify a unique priority for each rule group that you associate with a single VPC. To make it easier to insert rule groups later, leave space between the numbers, for example, use 100, 200, and so on. You can change the priority setting for a rule group association after you create it.

Type: Integer

Required: No

Response Syntax

{ "FirewallRuleGroupAssociation": { "Arn": "string", "CreationTime": "string", "CreatorRequestId": "string", "FirewallRuleGroupId": "string", "Id": "string", "ManagedOwnerName": "string", "ModificationTime": "string", "MutationProtection": "string", "Name": "string", "Priority": number, "Status": "string", "StatusMessage": "string", "VpcId": "string" } }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

FirewallRuleGroupAssociation

The association that you just updated.

Type: FirewallRuleGroupAssociation object

Errors

For information about the errors that are common to all actions, see Common Errors.

AccessDeniedException

The current account doesn't have the IAM permissions required to perform the specified Resolver operation.

HTTP Status Code: 400

ConflictException

HTTP Status Code: 400

InternalServiceErrorException

We encountered an unknown error. Try again in a few minutes.

HTTP Status Code: 400

ResourceNotFoundException

The specified resource doesn't exist.

HTTP Status Code: 400

ThrottlingException

The request was throttled. Try again in a few minutes.

HTTP Status Code: 400

ValidationException

HTTP Status Code: 400

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: