For Resolver list operations (ListResolverEndpoints, ListResolverRules, ListResolverRuleAssociations, ListResolverQueryLogConfigs, ListResolverQueryLogConfigAssociations), and ListResolverDnssecConfigs), an optional specification to return a subset of objects.

Configuration of the firewall behavior provided by DNS Firewall for a single VPC from Amazon Virtual Private Cloud (Amazon VPC).

High-level information about a list of firewall domains for use in a "FirewallRule". This is returned by "GetFirewallDomainList".

Minimal high-level information for a firewall domain list. The action "ListFirewallDomainLists" returns an array of these objects.

A single firewall rule in a rule group.

High-level information for a firewall rule group. A firewall rule group is a collection of rules that DNS Firewall uses to filter DNS network traffic for a VPC. To retrieve the rules for the rule group, call "ListFirewallRules".

An association between a firewall rule group and a VPC, which enables DNS filtering for the VPC.

Minimal high-level information for a firewall rule group. The action "ListFirewallRuleGroups" returns an array of these objects.

In a CreateResolverEndpoint request, the IP address that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). IpAddressRequest also includes the ID of the subnet that contains the IP address.

In the response to a GetResolverEndpoint request, information about the IP addresses that the Resolver endpoint uses for DNS queries.

In an UpdateResolverEndpoint request, information about an IP address to update.

The response to a PutResolverQueryLogConfigPolicy request.

The response to a PutResolverRulePolicy request.

A complex type that contains information about a Resolver configuration for a VPC.

A complex type that contains information about a configuration for DNSSEC validation.

In the response to a CreateResolverEndpoint, DeleteResolverEndpoint, GetResolverEndpoint, ListResolverEndpoints, or UpdateResolverEndpoint request, a complex type that contains settings for an existing inbound or outbound Resolver endpoint.

In the response to a CreateResolverQueryLogConfig, DeleteResolverQueryLogConfig, GetResolverQueryLogConfig, or ListResolverQueryLogConfigs request, a complex type that contains settings for one query logging configuration.

In the response to an AssociateResolverQueryLogConfig, DisassociateResolverQueryLogConfig, GetResolverQueryLogConfigAssociation, or ListResolverQueryLogConfigAssociations, request, a complex type that contains settings for a specified association between an Amazon VPC and a query logging configuration.

For queries that originate in your VPC, detailed information about a Resolver rule, which specifies how to route DNS queries out of the VPC. The ResolverRule parameter appears in the response to a CreateResolverRule, DeleteResolverRule, GetResolverRule, ListResolverRules, or UpdateResolverRule request.

In the response to an AssociateResolverRule, DisassociateResolverRule, or ListResolverRuleAssociations request, provides information about an association between a Resolver rule and a VPC. The association determines which DNS queries that originate in the VPC are forwarded to your network.

In an UpdateResolverRule request, information about the changes that you want to make.

One tag that you want to add to the specified resource. A tag consists of a Key (a name for the tag) and a Value.

In a CreateResolverRule request, an array of the IPs that you want to forward DNS queries to.