AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::Route53Resolver::ResolverRule

CfnResolverRule

For DNS queries that originate in your VPCs, specifies which Resolver endpoint the queries pass through, one domain name that you want to forward to your network, and the IP addresses of the DNS resolvers in your network.

Import

import { CfnResolverRule } from 'aws-cdk-lib/aws-route53resolver';

Or use the module namespace:

import * as route53resolver from 'aws-cdk-lib/aws-route53resolver';
// route53resolver.CfnResolverRule

Properties

Configuration passed to the constructor as CfnResolverRuleProps.

ruleTypeRequired
string

When you want to forward DNS queries for specified domain name to resolvers on your network, specify `FORWARD` or `DELEGATE` . If a query matches multiple Resolver rules (example.com and www.example.com), outbound DNS queries are routed using the Resolver rule that contains the most specific domain name (www.example.com). When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify `SYSTEM` . For example, to forward DNS queries for example.com to resolvers on your network, you create a rule and specify `FORWARD` for `RuleType` . To then have Resolver process queries for apex.example.com, you create a rule and specify `SYSTEM` for `RuleType` . Currently, only Resolver can create rules that have a value of `RECURSIVE` for `RuleType` .

delegationRecordOptional
string

DNS queries with delegation records that point to this domain name are forwarded to resolvers on your network.

domainNameOptional
string

DNS queries for this domain name are forwarded to the IP addresses that are specified in `TargetIps` . If a query matches multiple Resolver rules (example.com and www.example.com), the query is routed using the Resolver rule that contains the most specific domain name (www.example.com).

nameOptional
string

The name for the Resolver rule, which you specified when you created the Resolver rule. The name can be up to 64 characters long and can contain letters (a-z, A-Z), numbers (0-9), hyphens (-), underscores (_), and spaces. The name cannot consist of only numbers.

resolverEndpointIdOptional
string

The ID of the endpoint that the rule is associated with.

tagsOptional
CfnTag[]

Tags help organize and categorize your Resolver rules. Each tag consists of a key and an optional value, both of which you define.

targetIpsOptional
IResolvable | IResolvable | TargetAddressProperty[]

An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network.

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter