1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
|
// Code generated by smithy-go-codegen DO NOT EDIT.
package route53resolver
import (
"context"
"fmt"
awsmiddleware "github.com/aws/aws-sdk-go-v2/aws/middleware"
"github.com/aws/aws-sdk-go-v2/aws/signer/v4"
"github.com/aws/aws-sdk-go-v2/service/route53resolver/types"
"github.com/aws/smithy-go/middleware"
smithyhttp "github.com/aws/smithy-go/transport/http"
)
// Updates the specified firewall rule.
func (c *Client) UpdateFirewallRule(ctx context.Context, params *UpdateFirewallRuleInput, optFns ...func(*Options)) (*UpdateFirewallRuleOutput, error) {
if params == nil {
params = &UpdateFirewallRuleInput{}
}
result, metadata, err := c.invokeOperation(ctx, "UpdateFirewallRule", params, optFns, c.addOperationUpdateFirewallRuleMiddlewares)
if err != nil {
return nil, err
}
out := result.(*UpdateFirewallRuleOutput)
out.ResultMetadata = metadata
return out, nil
}
type UpdateFirewallRuleInput struct {
// The ID of the domain list to use in the rule.
//
// This member is required.
FirewallDomainListId *string
// The unique identifier of the firewall rule group for the rule.
//
// This member is required.
FirewallRuleGroupId *string
// The action that DNS Firewall should take on a DNS query when it matches one of
// the domains in the rule's domain list:
// - ALLOW - Permit the request to go through.
// - ALERT - Permit the request to go through but send an alert to the logs.
// - BLOCK - Disallow the request. This option requires additional details in the
// rule's BlockResponse .
Action types.Action
// The DNS record's type. This determines the format of the record value that you
// provided in BlockOverrideDomain . Used for the rule action BLOCK with a
// BlockResponse setting of OVERRIDE .
BlockOverrideDnsType types.BlockOverrideDnsType
// The custom DNS record to send back in response to the query. Used for the rule
// action BLOCK with a BlockResponse setting of OVERRIDE .
BlockOverrideDomain *string
// The recommended amount of time, in seconds, for the DNS resolver or web browser
// to cache the provided override record. Used for the rule action BLOCK with a
// BlockResponse setting of OVERRIDE .
BlockOverrideTtl *int32
// The way that you want DNS Firewall to block the request. Used for the rule
// action setting BLOCK .
// - NODATA - Respond indicating that the query was successful, but no response
// is available for it.
// - NXDOMAIN - Respond indicating that the domain name that's in the query
// doesn't exist.
// - OVERRIDE - Provide a custom override in the response. This option requires
// custom handling details in the rule's BlockOverride* settings.
BlockResponse types.BlockResponse
// The name of the rule.
Name *string
// The setting that determines the processing order of the rule in the rule group.
// DNS Firewall processes the rules in a rule group by order of priority, starting
// from the lowest setting. You must specify a unique priority for each rule in a
// rule group. To make it easier to insert rules later, leave space between the
// numbers, for example, use 100, 200, and so on. You can change the priority
// setting for the rules in a rule group at any time.
Priority *int32
noSmithyDocumentSerde
}
type UpdateFirewallRuleOutput struct {
// The firewall rule that you just updated.
FirewallRule *types.FirewallRule
// Metadata pertaining to the operation's result.
ResultMetadata middleware.Metadata
noSmithyDocumentSerde
}
func (c *Client) addOperationUpdateFirewallRuleMiddlewares(stack *middleware.Stack, options Options) (err error) {
if err := stack.Serialize.Add(&setOperationInputMiddleware{}, middleware.After); err != nil {
return err
}
err = stack.Serialize.Add(&awsAwsjson11_serializeOpUpdateFirewallRule{}, middleware.After)
if err != nil {
return err
}
err = stack.Deserialize.Add(&awsAwsjson11_deserializeOpUpdateFirewallRule{}, middleware.After)
if err != nil {
return err
}
if err := addProtocolFinalizerMiddlewares(stack, options, "UpdateFirewallRule"); err != nil {
return fmt.Errorf("add protocol finalizers: %v", err)
}
if err = addlegacyEndpointContextSetter(stack, options); err != nil {
return err
}
if err = addSetLoggerMiddleware(stack, options); err != nil {
return err
}
if err = awsmiddleware.AddClientRequestIDMiddleware(stack); err != nil {
return err
}
if err = smithyhttp.AddComputeContentLengthMiddleware(stack); err != nil {
return err
}
if err = addResolveEndpointMiddleware(stack, options); err != nil {
return err
}
if err = v4.AddComputePayloadSHA256Middleware(stack); err != nil {
return err
}
if err = addRetryMiddlewares(stack, options); err != nil {
return err
}
if err = awsmiddleware.AddRawResponseToMetadata(stack); err != nil {
return err
}
if err = awsmiddleware.AddRecordResponseTiming(stack); err != nil {
return err
}
if err = addClientUserAgent(stack, options); err != nil {
return err
}
if err = smithyhttp.AddErrorCloseResponseBodyMiddleware(stack); err != nil {
return err
}
if err = smithyhttp.AddCloseResponseBodyMiddleware(stack); err != nil {
return err
}
if err = addSetLegacyContextSigningOptionsMiddleware(stack); err != nil {
return err
}
if err = addOpUpdateFirewallRuleValidationMiddleware(stack); err != nil {
return err
}
if err = stack.Initialize.Add(newServiceMetadataMiddleware_opUpdateFirewallRule(options.Region), middleware.Before); err != nil {
return err
}
if err = awsmiddleware.AddRecursionDetection(stack); err != nil {
return err
}
if err = addRequestIDRetrieverMiddleware(stack); err != nil {
return err
}
if err = addResponseErrorMiddleware(stack); err != nil {
return err
}
if err = addRequestResponseLogging(stack, options); err != nil {
return err
}
if err = addDisableHTTPSMiddleware(stack, options); err != nil {
return err
}
return nil
}
func newServiceMetadataMiddleware_opUpdateFirewallRule(region string) *awsmiddleware.RegisterServiceMetadata {
return &awsmiddleware.RegisterServiceMetadata{
Region: region,
ServiceID: ServiceID,
OperationName: "UpdateFirewallRule",
}
}
|
