disassociate_firewall_rule_group ¶

disassociate_firewall_rule_group(
    firewall_rule_group_association_id: ResourceId,
    *,
    config_overrides: Optional[Route53ResolverClientConfig] = None,
) -> DisassociateFirewallRuleGroupResponse

Disassociates a FirewallRuleGroup from a VPC, to remove DNS filtering from the VPC.

Parameters:

firewall_rule_group_association_id (ResourceId) –

The identifier of the FirewallRuleGroupAssociation.

Raises:

AccessDeniedException –

The current account doesn't have the IAM permissions required to perform the specified Resolver operation.

This error can also be thrown when a customer has reached the 5120 character limit for a resource policy for CloudWatch Logs.
ConflictException –

The requested state transition isn't valid. For example, you can't delete a firewall domain list if it is in the process of being deleted, or you can't import domains into a domain list that is in the process of being deleted.
InternalServiceErrorException –

We encountered an unknown error. Try again in a few minutes.
ResourceNotFoundException –

The specified resource doesn't exist.
ThrottlingException –

The request was throttled. Try again in a few minutes.
ValidationException –

You have provided an invalid command. If you ran the UpdateFirewallDomains request. supported values are ADD, REMOVE, or REPLACE a domain.
UnknownServiceError –

The service returned an error code this client does not model.

Source code in docs_src/capo_route53resolver/_services/route53_resolver.py

def disassociate_firewall_rule_group(
    self,
    firewall_rule_group_association_id: "capo_route53resolver.types.resource_id.ResourceId",
    *,
    config_overrides: Optional[Route53ResolverClientConfig] = None,
) -> "capo_route53resolver.types.disassociate_firewall_rule_group_response.DisassociateFirewallRuleGroupResponse":
    """<p>Disassociates a <a>FirewallRuleGroup</a> from a VPC, to remove DNS filtering from the VPC. </p>

    Args:
        firewall_rule_group_association_id: <p>The identifier of the <a>FirewallRuleGroupAssociation</a>. </p>

    Raises:
        capo_route53resolver.errors.access_denied_exception.AccessDeniedException: <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p> <p>This error can also be thrown when a customer has reached the 5120 character limit for a resource policy for CloudWatch Logs.</p>
        capo_route53resolver.errors.conflict_exception.ConflictException: <p>The requested state transition isn't valid. For example, you can't delete a firewall domain list if it is in the process of being deleted, or you can't import domains into a domain list that is in the process of being deleted.</p>
        capo_route53resolver.errors.internal_service_error_exception.InternalServiceErrorException: <p>We encountered an unknown error. Try again in a few minutes.</p>
        capo_route53resolver.errors.resource_not_found_exception.ResourceNotFoundException: <p>The specified resource doesn't exist.</p>
        capo_route53resolver.errors.throttling_exception.ThrottlingException: <p>The request was throttled. Try again in a few minutes.</p>
        capo_route53resolver.errors.validation_exception.ValidationException: <p>You have provided an invalid command. If you ran the <code>UpdateFirewallDomains</code> request. supported values are <code>ADD</code>, <code>REMOVE</code>, or <code>REPLACE</code> a domain.</p>
        capo_route53resolver.errors.UnknownServiceError: The service returned an error code this client does not model.
    """

    def _handler(
        req: "OperationRequest[capo_route53resolver.types.disassociate_firewall_rule_group_request.DisassociateFirewallRuleGroupRequest]",
    ) -> OperationResponse[
        "capo_route53resolver.types.disassociate_firewall_rule_group_response.DisassociateFirewallRuleGroupResponse"
    ]:
        import capo_route53resolver._operations.route53_resolver.disassociate_firewall_rule_group

        output, http_response = (
            capo_route53resolver._operations.route53_resolver.disassociate_firewall_rule_group.disassociate_firewall_rule_group(
                req.options, req.input
            )
        )
        return OperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("DisassociateFirewallRuleGroup")
    )
    input_: capo_route53resolver.types.disassociate_firewall_rule_group_request.DisassociateFirewallRuleGroupRequest = {
        "firewall_rule_group_association_id": firewall_rule_group_association_id
    }

    response = execute_pipeline(
        OperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    response.response.close()
    return response.output