AWS cli documentation change
Summary
Updated documentation for 'list-firewall-rule-types' command with details about rule-type variants, supported filter values, and added SubscriptionInfo structure describing AWS Marketplace integrations for partner threat protection
Security assessment
The changes enhance documentation of DNS Firewall security features by detailing threat categories and partner integrations. It adds explicit documentation about security capabilities (FirewallAdvancedThreatCategory, DnsThreatProtection) and partner-backed threat protection requiring AWS Marketplace subscriptions. No vulnerabilities or incidents are addressed.
Diff
diff --git a/cli/latest/reference/route53resolver/list-firewall-rule-types.md b/cli/latest/reference/route53resolver/list-firewall-rule-types.md index 56be13c1f..3f4bbeec3 100644 --- a//cli/latest/reference/route53resolver/list-firewall-rule-types.md +++ b//cli/latest/reference/route53resolver/list-firewall-rule-types.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -59 +59,3 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Retrieves the available rule types that can be used in DNS Firewall rules. +Retrieves the rule-type variants that can be used in the `FirewallRuleType` field of CreateFirewallRule and UpdateFirewallRule . Each returned FirewallRuleTypeDefinition identifies one variant + value combination — for example, `FirewallAdvancedContentCategory` \+ `VIOLENCE_AND_HATE_SPEECH` , or `PartnerThreatProtection` \+ a partner-managed feed. + +The supported `RuleType` filter values are `FirewallAdvancedContentCategory` , `FirewallAdvancedThreatCategory` , `DnsThreatProtection` , and `PartnerThreatProtection` . When a returned definition’s variant requires an external subscription (currently only `PartnerThreatProtection` ), the response also includes a SubscriptionInfo identifying the AWS Marketplace product that backs it; absence of `SubscriptionInfo` means the variant is fully managed by AWS and requires no separate subscription. @@ -100 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/route5 -> The rule type to filter by. If specified, only rule types matching this value are returned. +> An optional filter that restricts the response to a single FirewallRuleType variant. Supported values: `FirewallAdvancedContentCategory` , `FirewallAdvancedThreatCategory` , `DnsThreatProtection` , and `PartnerThreatProtection` . If omitted, definitions across all variants are returned. @@ -118,0 +121,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/route5 +> +> Constraints: +> +> * min: `1` +> * max: `100` +> + @@ -285,0 +295,24 @@ FirewallRuleTypes -> (list) +>> +>> SubscriptionInfo -> (structure) +>> +>>> For rule types that require an external subscription (today, only the `PartnerThreatProtection` variant), describes the AWS Marketplace product that backs the rule type. Absent for rule types that are managed by AWS and do not require a separate subscription. See SubscriptionInfo . +>>> +>>> VendorName -> (string) +>>> +>>>> The name of the AWS Marketplace seller (vendor) that publishes the partner threat-protection product (for example, `Palo Alto Networks` ). +>>>> +>>>> Constraints: +>>>> +>>>> * max: `256` +>>>> + +>>> +>>> ProductId -> (string) +>>> +>>>> The AWS Marketplace product identifier of the partner threat-protection product. Use this value to verify or manage the calling account’s subscription in AWS Marketplace. +>>>> +>>>> Constraints: +>>>> +>>>> * max: `256` +>>>> + @@ -301 +334 @@ NextToken -> (string) - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) »