AWS::Route53Resolver::FirewallDomainList
High-level information about a list of firewall domains for use in a AWS::Route53Resolver::FirewallRule. This is returned by GetFirewallDomainList.
To retrieve the domains that are defined for this domain list, call ListFirewallDomains.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "Type" : "AWS::Route53Resolver::FirewallDomainList", "Properties" : { "DomainFileUrl" :
String
, "Domains" :[ String, ... ]
, "Name" :String
, "Tags" :[ Tag, ... ]
} }
YAML
Type: AWS::Route53Resolver::FirewallDomainList Properties: DomainFileUrl:
String
Domains:- String
Name:String
Tags:- Tag
Properties
DomainFileUrl
-
The fully qualified URL or URI of the file stored in Amazon Simple Storage Service (Amazon S3) that contains the list of domains to import.
The file must be in an S3 bucket that's in the same Region as your DNS Firewall. The file must be a text file and must contain a single domain per line.
Required: No
Type: String
Minimum:
1
Maximum:
1024
Update requires: No interruption
Domains
-
A list of the domain lists that you have defined.
Required: No
Type: Array of String
Minimum:
1
Maximum:
255
Update requires: No interruption
Name
-
The name of the domain list.
Required: No
Type: String
Pattern:
(?!^[0-9]+$)([a-zA-Z0-9\-_' ']+)
Minimum:
1
Maximum:
64
Update requires: Replacement
-
A list of the tag keys and values that you want to associate with the domain list.
Required: No
Type: Array of Tag
Maximum:
200
Update requires: No interruption
Return values
Ref
When you pass the logical ID of this resource to the intrinsic Ref
function, Ref
returns the FirewallDomainList
object.
For more information about using the Ref
function, see Ref
.
Fn::GetAtt
The Fn::GetAtt
intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.
For more information about using the Fn::GetAtt
intrinsic function, see Fn::GetAtt
.
Arn
-
The Amazon Resource Name (ARN) of the firewall domain list.
CreationTime
-
The date and time that the domain list was created, in Unix time format and Coordinated Universal Time (UTC).
CreatorRequestId
-
A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
DomainCount
-
The number of domain names that are specified in the domain list.
Id
-
The ID of the domain list.
ManagedOwnerName
-
The owner of the list, used only for lists that are not managed by you. For example, the managed domain list
AWSManagedDomainsMalwareDomainList
has the managed owner nameRoute 53 Resolver DNS Firewall
. ModificationTime
-
The date and time that the domain list was last modified, in Unix time format and Coordinated Universal Time (UTC).
Status
-
The status of the domain list.
StatusMessage
-
Additional information about the status of the list, if available.