FirewallRuleType ¶

class FirewallRuleType(TypedDict, closed=True):
    partner_threat_protection: NotRequired[
        "capo_route53resolver.types.partner_threat_protection_config.PartnerThreatProtectionConfig"
    ]
    """<p>Configures the rule to match a third-party threat feed delivered through Amazon Web Services Marketplace. The calling account must hold an active subscription to the partner product named in <code>Partner</code>; if the subscription is missing or revoked, the rule is created with <code>Status</code> <code>CREATION_FAILED</code> and cannot be modified — only deleted. See <a>PartnerThreatProtectionConfig</a>.</p>"""
    firewall_advanced_content_category: NotRequired[
        "capo_route53resolver.types.firewall_advanced_content_category_config.FirewallAdvancedContentCategoryConfig"
    ]
    """<p>Configures the rule to match an Amazon Web Services-managed content category (for example, <code>VIOLENCE_AND_HATE_SPEECH</code>). See <a>FirewallAdvancedContentCategoryConfig</a>.</p>"""
    firewall_advanced_threat_category: NotRequired[
        "capo_route53resolver.types.firewall_advanced_threat_category_config.FirewallAdvancedThreatCategoryConfig"
    ]
    """<p>Configures the rule to match an Amazon Web Services-managed advanced threat category (for example, <code>PHISHING</code>). See <a>FirewallAdvancedThreatCategoryConfig</a>.</p>"""
    dns_threat_protection: NotRequired[
        "capo_route53resolver.types.dns_threat_protection_rule_type_config.DnsThreatProtectionRuleTypeConfig"
    ]
    """<p>Configures the rule to match a built-in DNS Firewall Advanced threat detector — <code>DGA</code>, <code>DNS_TUNNELING</code>, or <code>DICTIONARY_DGA</code>. See <a>DnsThreatProtectionRuleTypeConfig</a>.</p>"""