Struct CreateFirewallRuleInput 

#[non_exhaustive]
pub struct CreateFirewallRuleInput {

    pub action: Option<FirewallRuleAction>,
    pub block_override_dns_type: Option<BlockOverrideDnsQueryType>,
    pub block_override_domain: Option<String>,
    pub block_override_ttl: Option<i32>,
    pub block_response: Option<FirewallBlockResponse>,
    pub client_token: Option<String>,
    pub confidence_threshold: Option<ConfidenceThreshold>,
    pub description: Option<String>,
    pub dns_advanced_protection: Option<DnsAdvancedProtection>,
    pub firewall_domain_list_id: Option<String>,
    pub name: Option<String>,
    pub priority: Option<i64>,
    pub dns_view_id: Option<String>,
    pub q_type: Option<String>,
}

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

action: Option<FirewallRuleAction>

The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:

• ALLOW - Permit the request to go through.

• ALERT - Permit the request and send metrics and logs to CloudWatch.

• BLOCK - Disallow the request. This option requires additional details in the rule's BlockResponse.

block_override_dns_type: Option<BlockOverrideDnsQueryType>

The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

This setting is required if the BlockResponse setting is OVERRIDE.

block_override_domain: Option<String>

The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

This setting is required if the BlockResponse setting is OVERRIDE.

block_override_ttl: Option<i32>

The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

This setting is required if the BlockResponse setting is OVERRIDE.

block_response: Option<FirewallBlockResponse>

The response to return when the action is BLOCK. Valid values are NXDOMAIN (domain does not exist), NODATA (domain exists but no records), or OVERRIDE (return custom response).

client_token: Option<String>

A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the same clientToken has the same result every time.

confidence_threshold: Option<ConfidenceThreshold>

The confidence threshold for advanced threat detection. Valid values are HIGH, MEDIUM, or LOW, indicating the accuracy level required for threat detection.

description: Option<String>

An optional description for the firewall rule.

dns_advanced_protection: Option<DnsAdvancedProtection>

Whether to enable advanced DNS threat protection for this rule. Advanced protection can detect and block DNS tunneling and Domain Generation Algorithm (DGA) threats.

firewall_domain_list_id: Option<String>

The ID of the firewall domain list to use in this rule.

name: Option<String>

A descriptive name for the firewall rule.

priority: Option<i64>

The priority of this rule. Rules are evaluated in priority order, with lower numbers having higher priority. When a DNS query matches multiple rules, the rule with the highest priority (lowest number) is applied.

dns_view_id: Option<String>

The ID of the DNS view to associate with this firewall rule.

q_type: Option<String>

The DNS query type to match for this rule. Examples include A (IPv4 address), AAAA (IPv6 address), MX (mail exchange), or TXT (text record).

Implementations

impl CreateFirewallRuleInput

pub fn action(&self) -> Option<&FirewallRuleAction>

The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list:

• ALLOW - Permit the request to go through.

• ALERT - Permit the request and send metrics and logs to CloudWatch.

• BLOCK - Disallow the request. This option requires additional details in the rule's BlockResponse.

pub fn block_override_dns_type(&self) -> Option<&BlockOverrideDnsQueryType>

The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

This setting is required if the BlockResponse setting is OVERRIDE.

pub fn block_override_domain(&self) -> Option<&str>

The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

This setting is required if the BlockResponse setting is OVERRIDE.

pub fn block_override_ttl(&self) -> Option<i32>

The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

This setting is required if the BlockResponse setting is OVERRIDE.

pub fn block_response(&self) -> Option<&FirewallBlockResponse>

The response to return when the action is BLOCK. Valid values are NXDOMAIN (domain does not exist), NODATA (domain exists but no records), or OVERRIDE (return custom response).

pub fn client_token(&self) -> Option<&str>

A unique, case-sensitive identifier to ensure idempotency. This means that making the same request multiple times with the same clientToken has the same result every time.

pub fn confidence_threshold(&self) -> Option<&ConfidenceThreshold>

The confidence threshold for advanced threat detection. Valid values are HIGH, MEDIUM, or LOW, indicating the accuracy level required for threat detection.

pub fn description(&self) -> Option<&str>

An optional description for the firewall rule.

pub fn dns_advanced_protection(&self) -> Option<&DnsAdvancedProtection>

Whether to enable advanced DNS threat protection for this rule. Advanced protection can detect and block DNS tunneling and Domain Generation Algorithm (DGA) threats.

pub fn firewall_domain_list_id(&self) -> Option<&str>

The ID of the firewall domain list to use in this rule.

pub fn name(&self) -> Option<&str>

A descriptive name for the firewall rule.

pub fn priority(&self) -> Option<i64>

The priority of this rule. Rules are evaluated in priority order, with lower numbers having higher priority. When a DNS query matches multiple rules, the rule with the highest priority (lowest number) is applied.

pub fn dns_view_id(&self) -> Option<&str>

The ID of the DNS view to associate with this firewall rule.

pub fn q_type(&self) -> Option<&str>

The DNS query type to match for this rule. Examples include A (IPv4 address), AAAA (IPv6 address), MX (mail exchange), or TXT (text record).

impl CreateFirewallRuleInput

pub fn builder() -> CreateFirewallRuleInputBuilder

Creates a new builder-style object to manufacture CreateFirewallRuleInput.

Trait Implementations

impl Clone for CreateFirewallRuleInput

fn clone(&self) -> CreateFirewallRuleInput

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CreateFirewallRuleInput

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CreateFirewallRuleInput

fn eq(&self, other: &CreateFirewallRuleInput) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CreateFirewallRuleInput