Skip to content

Commit 6f5f3a1

Browse files
author
awstools
committed
feat(client-route53resolver): Release of FirewallDomainRedirectionAction parameter on the Route 53 DNS Firewall Rule. This allows customers to configure a DNS Firewall rule to inspect all the domains in the DNS redirection chain (default) , such as CNAME, ALIAS, DNAME, etc., or just the first domain and trust the rest.
1 parent fd01ffd commit 6f5f3a1

File tree

55 files changed

+243
-6
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

55 files changed

+243
-6
lines changed

clients/client-route53resolver/src/commands/AssociateFirewallRuleGroupCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -78,6 +78,8 @@ export interface AssociateFirewallRuleGroupCommandOutput extends AssociateFirewa
7878
*
7979
* @throws {@link AccessDeniedException} (client fault)
8080
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
81+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
82+
* resource policy for CloudWatch Logs.</p>
8183
*
8284
* @throws {@link ConflictException} (client fault)
8385
* <p>The requested state transition isn't valid. For example, you can't delete a firewall

clients/client-route53resolver/src/commands/AssociateResolverQueryLogConfigCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,8 @@ export interface AssociateResolverQueryLogConfigCommandOutput
7575
*
7676
* @throws {@link AccessDeniedException} (client fault)
7777
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
78+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
79+
* resource policy for CloudWatch Logs.</p>
7880
*
7981
* @throws {@link InternalServiceErrorException} (client fault)
8082
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/CreateFirewallDomainListCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -71,6 +71,8 @@ export interface CreateFirewallDomainListCommandOutput extends CreateFirewallDom
7171
*
7272
* @throws {@link AccessDeniedException} (client fault)
7373
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
74+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
75+
* resource policy for CloudWatch Logs.</p>
7476
*
7577
* @throws {@link InternalServiceErrorException} (client fault)
7678
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/CreateFirewallRuleCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
4545
* BlockOverrideDnsType: "CNAME",
4646
* BlockOverrideTtl: Number("int"),
4747
* Name: "STRING_VALUE", // required
48+
* FirewallDomainRedirectionAction: "INSPECT_REDIRECTION_DOMAIN" || "TRUST_REDIRECTION_DOMAIN",
4849
* Qtype: "STRING_VALUE",
4950
* };
5051
* const command = new CreateFirewallRuleCommand(input);
@@ -63,6 +64,7 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
6364
* // CreatorRequestId: "STRING_VALUE",
6465
* // CreationTime: "STRING_VALUE",
6566
* // ModificationTime: "STRING_VALUE",
67+
* // FirewallDomainRedirectionAction: "INSPECT_REDIRECTION_DOMAIN" || "TRUST_REDIRECTION_DOMAIN",
6668
* // Qtype: "STRING_VALUE",
6769
* // },
6870
* // };
@@ -77,6 +79,8 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
7779
*
7880
* @throws {@link AccessDeniedException} (client fault)
7981
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
82+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
83+
* resource policy for CloudWatch Logs.</p>
8084
*
8185
* @throws {@link InternalServiceErrorException} (client fault)
8286
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/CreateFirewallRuleGroupCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,8 @@ export interface CreateFirewallRuleGroupCommandOutput extends CreateFirewallRule
7373
*
7474
* @throws {@link AccessDeniedException} (client fault)
7575
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
76+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
77+
* resource policy for CloudWatch Logs.</p>
7678
*
7779
* @throws {@link InternalServiceErrorException} (client fault)
7880
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/CreateOutpostResolverCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,8 @@ export interface CreateOutpostResolverCommandOutput extends CreateOutpostResolve
7575
*
7676
* @throws {@link AccessDeniedException} (client fault)
7777
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
78+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
79+
* resource policy for CloudWatch Logs.</p>
7880
*
7981
* @throws {@link InternalServiceErrorException} (client fault)
8082
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/CreateResolverEndpointCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,8 @@ export interface CreateResolverEndpointCommandOutput extends CreateResolverEndpo
108108
*
109109
* @throws {@link AccessDeniedException} (client fault)
110110
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
111+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
112+
* resource policy for CloudWatch Logs.</p>
111113
*
112114
* @throws {@link InternalServiceErrorException} (client fault)
113115
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/CreateResolverQueryLogConfigCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,8 @@ export interface CreateResolverQueryLogConfigCommandOutput
8383
*
8484
* @throws {@link AccessDeniedException} (client fault)
8585
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
86+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
87+
* resource policy for CloudWatch Logs.</p>
8688
*
8789
* @throws {@link InternalServiceErrorException} (client fault)
8890
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/CreateResolverRuleCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -94,6 +94,8 @@ export interface CreateResolverRuleCommandOutput extends CreateResolverRuleRespo
9494
*
9595
* @throws {@link AccessDeniedException} (client fault)
9696
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
97+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
98+
* resource policy for CloudWatch Logs.</p>
9799
*
98100
* @throws {@link InternalServiceErrorException} (client fault)
99101
* <p>We encountered an unknown error. Try again in a few minutes.</p>

clients/client-route53resolver/src/commands/DeleteFirewallDomainListCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,8 @@ export interface DeleteFirewallDomainListCommandOutput extends DeleteFirewallDom
6464
*
6565
* @throws {@link AccessDeniedException} (client fault)
6666
* <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
67+
* <p>This error can also be thrown when a customer has reached the 5120 character limit for a
68+
* resource policy for CloudWatch Logs.</p>
6769
*
6870
* @throws {@link ConflictException} (client fault)
6971
* <p>The requested state transition isn't valid. For example, you can't delete a firewall

0 commit comments

Comments
 (0)