Skip to content

Commit e4f1a11

Browse files
author
awstools
committed
feat(client-route53resolver): This release adds support for query type configuration on firewall rules that enables customers for granular action (ALLOW, ALERT, BLOCK) by DNS query type.
1 parent c62c9b2 commit e4f1a11

File tree

7 files changed

+241
-0
lines changed

7 files changed

+241
-0
lines changed

‎clients/client-route53resolver/src/commands/CreateFirewallRuleCommand.ts‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,7 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
4646
* BlockOverrideDnsType: "CNAME",
4747
* BlockOverrideTtl: Number("int"),
4848
* Name: "STRING_VALUE", // required
49+
* Qtype: "STRING_VALUE",
4950
* };
5051
* const command = new CreateFirewallRuleCommand(input);
5152
* const response = await client.send(command);
@@ -63,6 +64,7 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
6364
* // CreatorRequestId: "STRING_VALUE",
6465
* // CreationTime: "STRING_VALUE",
6566
* // ModificationTime: "STRING_VALUE",
67+
* // Qtype: "STRING_VALUE",
6668
* // },
6769
* // };
6870
*

‎clients/client-route53resolver/src/commands/DeleteFirewallRuleCommand.ts‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,7 @@ export interface DeleteFirewallRuleCommandOutput extends DeleteFirewallRuleRespo
3838
* const input = { // DeleteFirewallRuleRequest
3939
* FirewallRuleGroupId: "STRING_VALUE", // required
4040
* FirewallDomainListId: "STRING_VALUE", // required
41+
* Qtype: "STRING_VALUE",
4142
* };
4243
* const command = new DeleteFirewallRuleCommand(input);
4344
* const response = await client.send(command);
@@ -55,6 +56,7 @@ export interface DeleteFirewallRuleCommandOutput extends DeleteFirewallRuleRespo
5556
* // CreatorRequestId: "STRING_VALUE",
5657
* // CreationTime: "STRING_VALUE",
5758
* // ModificationTime: "STRING_VALUE",
59+
* // Qtype: "STRING_VALUE",
5860
* // },
5961
* // };
6062
*

‎clients/client-route53resolver/src/commands/ListFirewallRulesCommand.ts‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,7 @@ export interface ListFirewallRulesCommandOutput extends ListFirewallRulesRespons
6161
* // CreatorRequestId: "STRING_VALUE",
6262
* // CreationTime: "STRING_VALUE",
6363
* // ModificationTime: "STRING_VALUE",
64+
* // Qtype: "STRING_VALUE",
6465
* // },
6566
* // ],
6667
* // };

‎clients/client-route53resolver/src/commands/UpdateFirewallRuleCommand.ts‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@ export interface UpdateFirewallRuleCommandOutput extends UpdateFirewallRuleRespo
4545
* BlockOverrideDnsType: "CNAME",
4646
* BlockOverrideTtl: Number("int"),
4747
* Name: "STRING_VALUE",
48+
* Qtype: "STRING_VALUE",
4849
* };
4950
* const command = new UpdateFirewallRuleCommand(input);
5051
* const response = await client.send(command);
@@ -62,6 +63,7 @@ export interface UpdateFirewallRuleCommandOutput extends UpdateFirewallRuleRespo
6263
* // CreatorRequestId: "STRING_VALUE",
6364
* // CreationTime: "STRING_VALUE",
6465
* // ModificationTime: "STRING_VALUE",
66+
* // Qtype: "STRING_VALUE",
6567
* // },
6668
* // };
6769
*

‎clients/client-route53resolver/src/models/models_0.ts‎

Lines changed: 200 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1359,6 +1359,56 @@ export interface CreateFirewallRuleRequest {
13591359
* <p>A name that lets you identify the rule in the rule group.</p>
13601360
*/
13611361
Name: string | undefined;
1362+
1363+
/**
1364+
* @public
1365+
* <p>
1366+
* The DNS query type you want the rule to evaluate. Allowed values are;
1367+
* </p>
1368+
* <ul>
1369+
* <li>
1370+
* <p>
1371+
* A: Returns an IPv4 address.</p>
1372+
* </li>
1373+
* <li>
1374+
* <p>AAAA: Returns an Ipv6 address.</p>
1375+
* </li>
1376+
* <li>
1377+
* <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>
1378+
* </li>
1379+
* <li>
1380+
* <p>CNAME: Returns another domain name.</p>
1381+
* </li>
1382+
* <li>
1383+
* <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>
1384+
* </li>
1385+
* <li>
1386+
* <p>MX: Specifies mail servers.</p>
1387+
* </li>
1388+
* <li>
1389+
* <p>NAPTR: Regular-expression-based rewriting of domain names.</p>
1390+
* </li>
1391+
* <li>
1392+
* <p>NS: Authoritative name servers.</p>
1393+
* </li>
1394+
* <li>
1395+
* <p>PTR: Maps an IP address to a domain name.</p>
1396+
* </li>
1397+
* <li>
1398+
* <p>SOA: Start of authority record for the zone.</p>
1399+
* </li>
1400+
* <li>
1401+
* <p>SPF: Lists the servers authorized to send emails from a domain.</p>
1402+
* </li>
1403+
* <li>
1404+
* <p>SRV: Application specific values that identify servers.</p>
1405+
* </li>
1406+
* <li>
1407+
* <p>TXT: Verifies email senders and application-specific values.</p>
1408+
* </li>
1409+
* </ul>
1410+
*/
1411+
Qtype?: string;
13621412
}
13631413

13641414
/**
@@ -1466,6 +1516,56 @@ export interface FirewallRule {
14661516
* <p>The date and time that the rule was last modified, in Unix time format and Coordinated Universal Time (UTC).</p>
14671517
*/
14681518
ModificationTime?: string;
1519+
1520+
/**
1521+
* @public
1522+
* <p>
1523+
* The DNS query type you want the rule to evaluate. Allowed values are;
1524+
* </p>
1525+
* <ul>
1526+
* <li>
1527+
* <p>
1528+
* A: Returns an IPv4 address.</p>
1529+
* </li>
1530+
* <li>
1531+
* <p>AAAA: Returns an Ipv6 address.</p>
1532+
* </li>
1533+
* <li>
1534+
* <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>
1535+
* </li>
1536+
* <li>
1537+
* <p>CNAME: Returns another domain name.</p>
1538+
* </li>
1539+
* <li>
1540+
* <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>
1541+
* </li>
1542+
* <li>
1543+
* <p>MX: Specifies mail servers.</p>
1544+
* </li>
1545+
* <li>
1546+
* <p>NAPTR: Regular-expression-based rewriting of domain names.</p>
1547+
* </li>
1548+
* <li>
1549+
* <p>NS: Authoritative name servers.</p>
1550+
* </li>
1551+
* <li>
1552+
* <p>PTR: Maps an IP address to a domain name.</p>
1553+
* </li>
1554+
* <li>
1555+
* <p>SOA: Start of authority record for the zone.</p>
1556+
* </li>
1557+
* <li>
1558+
* <p>SPF: Lists the servers authorized to send emails from a domain.</p>
1559+
* </li>
1560+
* <li>
1561+
* <p>SRV: Application specific values that identify servers.</p>
1562+
* </li>
1563+
* <li>
1564+
* <p>TXT: Verifies email senders and application-specific values.</p>
1565+
* </li>
1566+
* </ul>
1567+
*/
1568+
Qtype?: string;
14691569
}
14701570

14711571
/**
@@ -2480,6 +2580,56 @@ export interface DeleteFirewallRuleRequest {
24802580
* <p>The ID of the domain list that's used in the rule. </p>
24812581
*/
24822582
FirewallDomainListId: string | undefined;
2583+
2584+
/**
2585+
* @public
2586+
* <p>
2587+
* The DNS query type that the rule you are deleting evaluates. Allowed values are;
2588+
* </p>
2589+
* <ul>
2590+
* <li>
2591+
* <p>
2592+
* A: Returns an IPv4 address.</p>
2593+
* </li>
2594+
* <li>
2595+
* <p>AAAA: Returns an Ipv6 address.</p>
2596+
* </li>
2597+
* <li>
2598+
* <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>
2599+
* </li>
2600+
* <li>
2601+
* <p>CNAME: Returns another domain name.</p>
2602+
* </li>
2603+
* <li>
2604+
* <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>
2605+
* </li>
2606+
* <li>
2607+
* <p>MX: Specifies mail servers.</p>
2608+
* </li>
2609+
* <li>
2610+
* <p>NAPTR: Regular-expression-based rewriting of domain names.</p>
2611+
* </li>
2612+
* <li>
2613+
* <p>NS: Authoritative name servers.</p>
2614+
* </li>
2615+
* <li>
2616+
* <p>PTR: Maps an IP address to a domain name.</p>
2617+
* </li>
2618+
* <li>
2619+
* <p>SOA: Start of authority record for the zone.</p>
2620+
* </li>
2621+
* <li>
2622+
* <p>SPF: Lists the servers authorized to send emails from a domain.</p>
2623+
* </li>
2624+
* <li>
2625+
* <p>SRV: Application specific values that identify servers.</p>
2626+
* </li>
2627+
* <li>
2628+
* <p>TXT: Verifies email senders and application-specific values.</p>
2629+
* </li>
2630+
* </ul>
2631+
*/
2632+
Qtype?: string;
24832633
}
24842634

24852635
/**
@@ -5425,6 +5575,56 @@ export interface UpdateFirewallRuleRequest {
54255575
* <p>The name of the rule.</p>
54265576
*/
54275577
Name?: string;
5578+
5579+
/**
5580+
* @public
5581+
* <p>
5582+
* The DNS query type you want the rule to evaluate. Allowed values are;
5583+
* </p>
5584+
* <ul>
5585+
* <li>
5586+
* <p>
5587+
* A: Returns an IPv4 address.</p>
5588+
* </li>
5589+
* <li>
5590+
* <p>AAAA: Returns an Ipv6 address.</p>
5591+
* </li>
5592+
* <li>
5593+
* <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>
5594+
* </li>
5595+
* <li>
5596+
* <p>CNAME: Returns another domain name.</p>
5597+
* </li>
5598+
* <li>
5599+
* <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>
5600+
* </li>
5601+
* <li>
5602+
* <p>MX: Specifies mail servers.</p>
5603+
* </li>
5604+
* <li>
5605+
* <p>NAPTR: Regular-expression-based rewriting of domain names.</p>
5606+
* </li>
5607+
* <li>
5608+
* <p>NS: Authoritative name servers.</p>
5609+
* </li>
5610+
* <li>
5611+
* <p>PTR: Maps an IP address to a domain name.</p>
5612+
* </li>
5613+
* <li>
5614+
* <p>SOA: Start of authority record for the zone.</p>
5615+
* </li>
5616+
* <li>
5617+
* <p>SPF: Lists the servers authorized to send emails from a domain.</p>
5618+
* </li>
5619+
* <li>
5620+
* <p>SRV: Application specific values that identify servers.</p>
5621+
* </li>
5622+
* <li>
5623+
* <p>TXT: Verifies email senders and application-specific values.</p>
5624+
* </li>
5625+
* </ul>
5626+
*/
5627+
Qtype?: string;
54285628
}
54295629

54305630
/**

‎clients/client-route53resolver/src/protocols/Aws_json1_1.ts‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5626,6 +5626,7 @@ const se_CreateFirewallRuleRequest = (input: CreateFirewallRuleRequest, context:
56265626
FirewallRuleGroupId: [],
56275627
Name: [],
56285628
Priority: [],
5629+
Qtype: [],
56295630
});
56305631
};
56315632

‎codegen/sdk-codegen/aws-models/route53resolver.json‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -756,6 +756,12 @@
756756
"smithy.api#documentation": "<p>A name that lets you identify the rule in the rule group.</p>",
757757
"smithy.api#required": {}
758758
}
759+
},
760+
"Qtype": {
761+
"target": "com.amazonaws.route53resolver#Qtype",
762+
"traits": {
763+
"smithy.api#documentation": "<p>\n\t\t\tThe DNS query type you want the rule to evaluate. Allowed values are;\n\t\t</p>\n <ul>\n <li>\n <p>\n\t\t\t\tA: Returns an IPv4 address.</p>\n </li>\n <li>\n <p>AAAA: Returns an Ipv6 address.</p>\n </li>\n <li>\n <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>\n </li>\n <li>\n <p>CNAME: Returns another domain name.</p>\n </li>\n <li>\n <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>\n </li>\n <li>\n <p>MX: Specifies mail servers.</p>\n </li>\n <li>\n <p>NAPTR: Regular-expression-based rewriting of domain names.</p>\n </li>\n <li>\n <p>NS: Authoritative name servers.</p>\n </li>\n <li>\n <p>PTR: Maps an IP address to a domain name.</p>\n </li>\n <li>\n <p>SOA: Start of authority record for the zone.</p>\n </li>\n <li>\n <p>SPF: Lists the servers authorized to send emails from a domain.</p>\n </li>\n <li>\n <p>SRV: Application specific values that identify servers.</p>\n </li>\n <li>\n <p>TXT: Verifies email senders and application-specific values.</p>\n </li>\n </ul>"
764+
}
759765
}
760766
},
761767
"traits": {
@@ -1359,6 +1365,12 @@
13591365
"smithy.api#documentation": "<p>The ID of the domain list that's used in the rule. </p>",
13601366
"smithy.api#required": {}
13611367
}
1368+
},
1369+
"Qtype": {
1370+
"target": "com.amazonaws.route53resolver#Qtype",
1371+
"traits": {
1372+
"smithy.api#documentation": "<p>\n\t\t\tThe DNS query type that the rule you are deleting evaluates. Allowed values are;\n\t\t</p>\n <ul>\n <li>\n <p>\n\t\t\t\tA: Returns an IPv4 address.</p>\n </li>\n <li>\n <p>AAAA: Returns an Ipv6 address.</p>\n </li>\n <li>\n <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>\n </li>\n <li>\n <p>CNAME: Returns another domain name.</p>\n </li>\n <li>\n <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>\n </li>\n <li>\n <p>MX: Specifies mail servers.</p>\n </li>\n <li>\n <p>NAPTR: Regular-expression-based rewriting of domain names.</p>\n </li>\n <li>\n <p>NS: Authoritative name servers.</p>\n </li>\n <li>\n <p>PTR: Maps an IP address to a domain name.</p>\n </li>\n <li>\n <p>SOA: Start of authority record for the zone.</p>\n </li>\n <li>\n <p>SPF: Lists the servers authorized to send emails from a domain.</p>\n </li>\n <li>\n <p>SRV: Application specific values that identify servers.</p>\n </li>\n <li>\n <p>TXT: Verifies email senders and application-specific values.</p>\n </li>\n </ul>"
1373+
}
13621374
}
13631375
},
13641376
"traits": {
@@ -2287,6 +2299,12 @@
22872299
"traits": {
22882300
"smithy.api#documentation": "<p>The date and time that the rule was last modified, in Unix time format and Coordinated Universal Time (UTC).</p>"
22892301
}
2302+
},
2303+
"Qtype": {
2304+
"target": "com.amazonaws.route53resolver#Qtype",
2305+
"traits": {
2306+
"smithy.api#documentation": "<p>\n\t\t\tThe DNS query type you want the rule to evaluate. Allowed values are;\n\t\t</p>\n <ul>\n <li>\n <p>\n\t\t\t\tA: Returns an IPv4 address.</p>\n </li>\n <li>\n <p>AAAA: Returns an Ipv6 address.</p>\n </li>\n <li>\n <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>\n </li>\n <li>\n <p>CNAME: Returns another domain name.</p>\n </li>\n <li>\n <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>\n </li>\n <li>\n <p>MX: Specifies mail servers.</p>\n </li>\n <li>\n <p>NAPTR: Regular-expression-based rewriting of domain names.</p>\n </li>\n <li>\n <p>NS: Authoritative name servers.</p>\n </li>\n <li>\n <p>PTR: Maps an IP address to a domain name.</p>\n </li>\n <li>\n <p>SOA: Start of authority record for the zone.</p>\n </li>\n <li>\n <p>SPF: Lists the servers authorized to send emails from a domain.</p>\n </li>\n <li>\n <p>SRV: Application specific values that identify servers.</p>\n </li>\n <li>\n <p>TXT: Verifies email senders and application-specific values.</p>\n </li>\n </ul>"
2307+
}
22902308
}
22912309
},
22922310
"traits": {
@@ -5728,6 +5746,15 @@
57285746
"smithy.api#output": {}
57295747
}
57305748
},
5749+
"com.amazonaws.route53resolver#Qtype": {
5750+
"type": "string",
5751+
"traits": {
5752+
"smithy.api#length": {
5753+
"min": 1,
5754+
"max": 16
5755+
}
5756+
}
5757+
},
57315758
"com.amazonaws.route53resolver#ResolverAutodefinedReverseStatus": {
57325759
"type": "enum",
57335760
"members": {
@@ -8569,6 +8596,12 @@
85698596
"traits": {
85708597
"smithy.api#documentation": "<p>The name of the rule.</p>"
85718598
}
8599+
},
8600+
"Qtype": {
8601+
"target": "com.amazonaws.route53resolver#Qtype",
8602+
"traits": {
8603+
"smithy.api#documentation": "<p>\n\t\t\tThe DNS query type you want the rule to evaluate. Allowed values are;\n\t\t</p>\n <ul>\n <li>\n <p>\n\t\t\t\tA: Returns an IPv4 address.</p>\n </li>\n <li>\n <p>AAAA: Returns an Ipv6 address.</p>\n </li>\n <li>\n <p>CAA: Restricts CAs that can create SSL/TLS certifications for the domain.</p>\n </li>\n <li>\n <p>CNAME: Returns another domain name.</p>\n </li>\n <li>\n <p>DS: Record that identifies the DNSSEC signing key of a delegated zone.</p>\n </li>\n <li>\n <p>MX: Specifies mail servers.</p>\n </li>\n <li>\n <p>NAPTR: Regular-expression-based rewriting of domain names.</p>\n </li>\n <li>\n <p>NS: Authoritative name servers.</p>\n </li>\n <li>\n <p>PTR: Maps an IP address to a domain name.</p>\n </li>\n <li>\n <p>SOA: Start of authority record for the zone.</p>\n </li>\n <li>\n <p>SPF: Lists the servers authorized to send emails from a domain.</p>\n </li>\n <li>\n <p>SRV: Application specific values that identify servers.</p>\n </li>\n <li>\n <p>TXT: Verifies email senders and application-specific values.</p>\n </li>\n </ul>"
8604+
}
85728605
}
85738606
},
85748607
"traits": {

0 commit comments

Comments
 (0)