create_dns_view
¶
create_dns_view(
global_resolver_id: ResourceId,
name: ResourceName,
*,
config_overrides: Optional[Route53GlobalResolverClientConfig] = None,
client_token: Optional[ClientToken] = None,
dnssec_validation: Optional[DnsSecValidationType] = None,
edns_client_subnet: Optional[EdnsClientSubnetType] = None,
firewall_rules_fail_open: Optional[FirewallRulesFailOpenType] = None,
description: Optional[ResourceDescription] = None,
tags: Optional[Tags] = None,
) -> CreateDNSViewOutput
Creates a DNS view within a Route 53 Global Resolver. A DNS view models end users, user groups, networks, and devices, and serves as a parent resource that holds configurations controlling access, authorization, DNS firewall rules, and forwarding rules.
Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify --region us-east-2 on Amazon Web Services CLI commands.
Parameters:
-
global_resolver_id(ResourceId) –The ID of the Route 53 Global Resolver to associate with this DNS view.
-
client_token(Optional[ClientToken], default:None) –A unique string that identifies the request and ensures idempotency.
-
name(ResourceName) –A descriptive name for the DNS view.
-
dnssec_validation(Optional[DnsSecValidationType], default:None) –Whether to enable DNSSEC validation for DNS queries in this DNS view. When enabled, the resolver verifies the authenticity and integrity of DNS responses from public name servers for DNSSEC-signed domains.
-
edns_client_subnet(Optional[EdnsClientSubnetType], default:None) –Whether to enable EDNS Client Subnet injection for DNS queries in this DNS view. When enabled, client subnet information is forwarded to provide more accurate geographic-based DNS responses.
-
firewall_rules_fail_open(Optional[FirewallRulesFailOpenType], default:None) –Determines the behavior when Route 53 Global Resolver cannot apply DNS firewall rules due to service impairment. When enabled, DNS queries are allowed through; when disabled, queries are blocked.
-
description(Optional[ResourceDescription], default:None) –An optional description for the DNS view.
-
tags(Optional[Tags], default:None) –Tags to associate with the DNS view.
Raises:
-
AccessDeniedException–You don't have permission to perform this operation. Check your IAM permissions and try again.
-
ConflictException–The request conflicts with the current state of the resource. This can occur when trying to modify a resource that is not in a valid state for the requested operation.
-
InternalServerException–An internal server error occurred. Try again later.
-
ResourceNotFoundException–The specified resource was not found. Verify the resource ID and try again.
-
ServiceQuotaExceededException–The request would exceed one or more service quotas. Check your current usage and quotas, then try again.
-
ThrottlingException–The request was throttled due to too many requests. Wait a moment and try again.
-
ValidationException–The input parameters are invalid. Check the parameter values and try again.
-
UnknownServiceError–The service returned an error code this client does not model.
Source code in docs_src/capo_route53globalresolver/_services/route53_global_resolver.py
1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 | |