create_firewall_rule_group
async
¶
create_firewall_rule_group(
creator_request_id: CreatorRequestId,
name: Name,
*,
config_overrides: Optional[AsyncRoute53ResolverClientConfig] = None,
tags: Optional[TagList] = None,
) -> CreateFirewallRuleGroupResponse
Creates an empty DNS Firewall rule group for filtering DNS network traffic in a VPC. You can add rules to the new rule group by calling CreateFirewallRule.
Parameters:
-
creator_request_id(CreatorRequestId) –A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of running the operation twice. This can be any unique string, for example, a timestamp.
-
name(Name) –A name that lets you identify the rule group, to manage and use it.
-
tags(Optional[TagList], default:None) –A list of the tag keys and values that you want to associate with the rule group.
Raises:
-
AccessDeniedException–The current account doesn't have the IAM permissions required to perform the specified Resolver operation.
This error can also be thrown when a customer has reached the 5120 character limit for a resource policy for CloudWatch Logs.
-
InternalServiceErrorException–We encountered an unknown error. Try again in a few minutes.
-
LimitExceededException–The request caused one or more limits to be exceeded.
-
ThrottlingException–The request was throttled. Try again in a few minutes.
-
ValidationException–You have provided an invalid command. If you ran the
UpdateFirewallDomainsrequest. supported values areADD,REMOVE, orREPLACEa domain. -
UnknownServiceError–The service returned an error code this client does not model.