Amazon Route 53 Resolver Route53 Resolver Firewall Rule API

openapi: 3.2.0
info:
  title: Amazon Route 53 Resolver Firewall Rule API
  version: '2018-04-01'
  description: Generated from AWS's published Smithy model for Amazon Route 53 Resolver. 7 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://route53resolver.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Firewall Rule
paths:
  /#BatchCreateFirewallRule:
    post:
      operationId: BatchCreateFirewallRule
      summary: Batch Create Firewall Rule
      description: Creates multiple DNS Firewall rules in the specified rule group.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/BatchCreateFirewallRuleResponse'
        '400':
          description: AccessDeniedException; InternalServiceErrorException; LimitExceededException; ThrottlingException; ValidationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - Route53Resolver.BatchCreateFirewallRule
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/BatchCreateFirewallRuleRequest'
      tags:
      - Firewall Rule
  /#BatchDeleteFirewallRule:
    post:
      operationId: BatchDeleteFirewallRule
      summary: Batch Delete Firewall Rule
      description: Deletes multiple DNS Firewall rules from the specified rule group.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/BatchDeleteFirewallRuleResponse'
        '400':
          description: AccessDeniedException; InternalServiceErrorException; LimitExceededException; ThrottlingException; ValidationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - Route53Resolver.BatchDeleteFirewallRule
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/BatchDeleteFirewallRuleRequest'
      tags:
      - Firewall Rule
  /#BatchUpdateFirewallRule:
    post:
      operationId: BatchUpdateFirewallRule
      summary: Batch Update Firewall Rule
      description: Updates multiple DNS Firewall rules in the specified rule group.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/BatchUpdateFirewallRuleResponse'
        '400':
          description: AccessDeniedException; InternalServiceErrorException; LimitExceededException; ThrottlingException; ValidationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - Route53Resolver.BatchUpdateFirewallRule
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/BatchUpdateFirewallRuleRequest'
      tags:
      - Firewall Rule
components:
  schemas:
    DeleteFirewallRuleEntry:
      type: object
      properties:
        FirewallRuleGroupId:
          type: string
          description: The unique identifier of the firewall rule group for the rule.
        FirewallDomainListId:
          type: string
          description: The ID of the domain list that's used in the rule.
        FirewallThreatProtectionId:
          type: string
          description: The ID of the DNS Firewall Advanced rule.
        Qtype:
          type: string
          description: The DNS query type that the rule evaluates.
      required:
      - FirewallRuleGroupId
    FirewallRule:
      type: object
      properties:
        FirewallRuleGroupId:
          type: string
          description: The unique identifier of the Firewall rule group of the rule.
        FirewallDomainListId:
          type: string
          description: The ID of the domain list that's used in the rule.
        FirewallThreatProtectionId:
          type: string
          description: ID of the DNS Firewall Advanced rule.
        Name:
          type: string
          description: The name of the rule.
        Priority:
          type: integer
          description: The priority of the rule in the rule group. This value must be unique within the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.
        Action:
          type: string
          enum:
          - ALLOW
          - BLOCK
          - ALERT
          description: 'The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule''s domain list, or a threat in a DNS Firewall Advanced rule: ALLOW - Permit the request to go through. Not available for DNS Firewall Advanced rules. ALERT - Permit the request to go through but send an alert to the logs. BLOCK - Disallow the request. If this is specified, additional handling details are provided in the rule''s BlockResponse setting.'
        BlockResponse:
          type: string
          enum:
          - NODATA
          - NXDOMAIN
          - OVERRIDE
          description: The way that you want DNS Firewall to block the request. Used for the rule action setting BLOCK. NODATA - Respond indicating that the query was successful, but no response is available for it. NXDOMAIN - Respond indicating that the domain name that's in the query doesn't exist. OVERRIDE - Provide a custom override in the response. This option requires custom handling details in the rule's BlockOverride* settings.
        BlockOverrideDomain:
          type: string
          description: The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.
        BlockOverrideDnsType:
          type: string
          enum:
          - CNAME
          description: The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.
        BlockOverrideTtl:
          type: integer
          description: The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.
        CreatorRequestId:
          type: string
          description: A unique string defined by you to identify the request. This allows you to retry failed requests without the risk of executing the operation twice. This can be any unique string, for example, a timestamp.
        CreationTime:
          type: string
          description: The date and time that the rule was created, in Unix time format and Coordinated Universal Time (UTC).
        ModificationTime:
          type: string
          description: The date and time that the rule was last modified, in Unix time format and Coordinated Universal Time (UTC).
        FirewallDomainRedirectionAction:
          type: string
          enum:
          - INSPECT_REDIRECTION_DOMAIN
          - TRUST_REDIRECTION_DOMAIN
          description: 'How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME. INSPECT_REDIRECTION_DOMAIN: (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list. TRUST_REDIRECTION_DOMAIN: Inspects only the first domain in the redirection chain. You don''t need to add the subsequent domains in the domain in the redirection list to the domain list.'
        Qtype:
          type: string
          description: 'The DNS query type you want the rule to evaluate. Allowed values are; A: Returns an IPv4 address. AAAA: Returns an Ipv6 address. CAA: Restricts CAs that can create SSL/TLS certifications for the domain. CNAME: Returns another domain name. DS: Record that identifies the DNSSEC signing key of a delegated zone. MX: Specifies mail servers. NAPTR: Regular-expression-based rewriting of domain names. NS: Authoritative name servers. PTR: Maps an IP address to a domain name. SOA: Start of authority record for the zone. SPF: Lists the servers authorized to send emails from a domain. SRV: Application spe'
        DnsThreatProtection:
          type: string
          enum:
          - DGA
          - DNS_TUNNELING
          - DICTIONARY_DGA
          description: 'The type of the DNS Firewall Advanced rule. Valid values are: DGA: Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to launch malware attacks. DNS_TUNNELING: DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client. DICTIONARY_DGA: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.'
        ConfidenceThreshold:
          type: string
          enum:
          - LOW
          - MEDIUM
          - HIGH
          description: 'The confidence threshold for DNS Firewall Advanced. You must provide this value when you create a DNS Firewall Advanced rule. The confidence level values mean: LOW: Provides the highest detection rate for threats, but also increases false positives. MEDIUM: Provides a balance between detecting threats and false positives. HIGH: Detects only the most well corroborated threats with a low rate of false positives.'
        FirewallRuleType:
          $ref: '#/components/schemas/FirewallRuleType'
        Status:
          type: string
          description: 'The lifecycle state of the firewall rule. Possible values: CREATING — DNS Firewall is provisioning the rule. Rules created with the PartnerThreatProtection rule type begin in this state while DNS Firewall verifies the calling account''s Amazon Web Services Marketplace entitlement. COMPLETE — The rule is provisioned and enforcing matches. CREATION_FAILED — Provisioning failed. StatusMessage contains a human-readable reason. A rule in this state is immutable: UpdateFirewallRule rejects the request, and the rule must be removed with DeleteFirewallRule. For rules that do not require asynchronous pr'
        StatusMessage:
          type: string
          description: An additional message about the rule's lifecycle state. Populated when Status is CREATION_FAILED to describe why provisioning failed.
    BatchDeleteFirewallRuleResponse:
      type: object
      properties:
        DeletedFirewallRules:
          type: array
          items:
            $ref: '#/components/schemas/FirewallRule'
          description: The firewall rules that were successfully deleted by the request.
        DeleteErrors:
          type: array
          items:
            $ref: '#/components/schemas/BatchDeleteFirewallRuleError'
          description: A list of errors that occurred while deleting the firewall rules.
    BatchCreateFirewallRuleResponse:
      type: object
      properties:
        CreatedFirewallRules:
          type: array
          items:
            $ref: '#/components/schemas/FirewallRule'
          description: The firewall rules that were successfully created by the request.
        CreateErrors:
          type: array
          items:
            $ref: '#/components/schemas/BatchCreateFirewallRuleError'
          description: A list of errors that occurred while creating the firewall rules.
    CreateFirewallRuleEntry:
      type: object
      properties:
        CreatorRequestId:
          type: string
          description: A unique string that identifies the request and that allows you to retry failed requests without the risk of running the operation twice. CreatorRequestId can be any unique string, for example, a date/time stamp.
        FirewallRuleGroupId:
          type: string
          description: The unique identifier of the firewall rule group where you want to create the rule.
        FirewallDomainListId:
          type: string
          description: The ID of the domain list that you want to use in the rule. This setting is mutually exclusive with DnsThreatProtection and FirewallRuleType.
        Priority:
          type: integer
          description: The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.
        Action:
          type: string
          enum:
          - ALLOW
          - BLOCK
          - ALERT
          description: 'The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule''s domain list, or a threat in a DNS Firewall Advanced rule: ALLOW - Permit the request to go through. Not available for DNS Firewall Advanced rules. ALERT - Permit the request and send metrics and logs to CloudWatch. BLOCK - Disallow the request. This option requires additional details in the rule''s BlockResponse.'
        BlockResponse:
          type: string
          enum:
          - NODATA
          - NXDOMAIN
          - OVERRIDE
          description: The way that you want DNS Firewall to block the request, used with the rule action setting BLOCK. NODATA - Respond indicating that the query was successful, but no response is available for it. NXDOMAIN - Respond indicating that the domain name that's in the query doesn't exist. OVERRIDE - Provide a custom override in the response. This option requires custom handling details in the rule's BlockOverride* settings.
        BlockOverrideDomain:
          type: string
          description: The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.
        BlockOverrideDnsType:
          type: string
          enum:
          - CNAME
          description: The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.
        BlockOverrideTtl:
          type: integer
          description: The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE. This setting is required if the BlockResponse setting is OVERRIDE.
        Name:
          type: string
          description: A name that lets you identify the rule in the rule group.
        FirewallDomainRedirectionAction:
          type: string
          enum:
          - INSPECT_REDIRECTION_DOMAIN
          - TRUST_REDIRECTION_DOMAIN
          description: 'How you want the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME. INSPECT_REDIRECTION_DOMAIN: (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list. TRUST_REDIRECTION_DOMAIN: Inspects only the first domain in the redirection chain. You don''t need to add the subsequent domains in the redirection list to the domain list.'
        Qtype:
          type: string
          description: 'The DNS query type you want the rule to evaluate. Allowed values are: A: Returns an IPv4 address. AAAA: Returns an IPv6 address. CAA: Restricts CAs that can create SSL/TLS certifications for the domain. CNAME: Returns another domain name. DS: Record that identifies the DNSSEC signing key of a delegated zone. MX: Specifies mail servers. NAPTR: Regular-expression-based rewriting of domain names. NS: Authoritative name servers. PTR: Maps an IP address to a domain name. SOA: Start of authority record for the zone. SPF: Lists the servers authorized to send emails from a domain. SRV: Application spe'
        DnsThreatProtection:
          type: string
          enum:
          - DGA
          - DNS_TUNNELING
          - DICTIONARY_DGA
          description: 'The type of the DNS Firewall Advanced rule. This setting is mutually exclusive with FirewallDomainListId and FirewallRuleType. Valid values are: DGA: Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to launch malware attacks. DNS_TUNNELING: DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client. DICTIONARY_DGA: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appea'
        ConfidenceThreshold:
          type: string
          enum:
          - LOW
          - MEDIUM
          - HIGH
          description: 'The confidence threshold for DNS Firewall Advanced. You must provide this value when you create or update a DNS Firewall Advanced rule. The confidence level values mean: LOW: Provides the highest detection rate for threats, but also increases false positives. MEDIUM: Provides a balance between detecting threats and false positives. HIGH: Detects only the most well corroborated threats with a low rate of false positives.'
        FirewallRuleType:
          $ref: '#/components/schemas/FirewallRuleType'
      required:
      - CreatorRequestId
      - FirewallRuleGroupId
      - Priority
      - Action
      - Name
    BatchCreateFirewallRuleRequest:
      type: object
      properties:
        CreateFirewallRuleEntries:
          type: array
          items:
            $ref: '#/components/schemas/CreateFirewallRuleEntry'
          description: The list of firewall rules to create.
      required:
      - CreateFirewallRuleEntries
    DnsThreatProtectionRuleTypeConfig:
      type: object
      properties:
        Value:
          type: string
          description: 'The type of DNS threat protection. Valid values are: DGA: Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to launch malware attacks. DNS_TUNNELING: DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client. DICTIONARY_DGA: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appear more legitimate, making them harder to detect than traditional DGAs.'
        ConfidenceThreshold:
          type: string
          enum:
          - LOW
          - MEDIUM
          - HIGH
          description: 'The confidence threshold for DNS Firewall Advanced. You must provide this value when you create or update a DNS Firewall Advanced rule. The confidence level values mean: LOW: Provides the highest detection rate for threats, but also increases false positives. MEDIUM: Provides a balance between detecting threats and false positives. HIGH: Detects only the most well corroborated threats with a low rate of false positives.'
      required:
      - Value
      - ConfidenceThreshold
    BatchCreateFirewallRuleError:
      type: object
      properties:
        FirewallRule:
          $ref: '#/components/schemas/CreateFirewallRuleEntry'
        Code:
          type: string
          description: The error code for the failure.
        Message:
          type: string
          description: A message that provides details about the error.
    BatchUpdateFirewallRuleError:
      type: object
      properties:
        FirewallRule:
          $ref: '#/components/schemas/UpdateFirewallRuleEntry'
        Code:
          type: string
          description: The error code for the failure.
        Message:
          type: string
          description: A message that provides details about the error.
    BatchDeleteFirewallRuleRequest:
      type: object
      properties:
        DeleteFirewallRuleEntries:
          type: array
          items:
            $ref: '#/components/schemas/DeleteFirewallRuleEntry'
          description: The list of firewall rules to delete.
      required:
      - DeleteFirewallRuleEntries
    UpdateFirewallRuleEntry:
      type: object
      properties:
        FirewallRuleGroupId:
          type: string
          description: The unique identifier of the firewall rule group for the rule.
        FirewallDomainListId:
          type: string
          description: The ID of the domain list to use in the rule. This setting is mutually exclusive with DnsThreatProtection and FirewallRuleType.
        FirewallThreatProtectionId:
          type: string
          description: The ID of the DNS Firewall Advanced rule.
        Priority:
          type: integer
          description: The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.
        Action:
          type: string
          enum:
          - ALLOW
          - BLOCK
          - ALERT
          description: 'The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule''s domain list, or a threat in a DNS Firewall Advanced rule: ALLOW - Permit the request to go through. Not available for DNS Firewall Advanced rules. ALERT - Permit the request and send metrics and logs to CloudWatch. BLOCK - Disallow the request. This option requires additional details in the rule''s BlockResponse.'
        BlockResponse:
          type: string
          enum:
          - NODATA
          - NXDOMAIN
          - OVERRIDE
          description: The way that you want DNS Firewall to block the request, used with the rule action setting BLOCK. NODATA - Respond indicating that the query was successful, but no response is available for it. NXDOMAIN - Respond indicating that the domain name that's in the query doesn't exist. OVERRIDE - Provide a custom override in the response. This option requires custom handling details in the rule's BlockOverride* settings.
        BlockOverrideDomain:
          type: string
          description: The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.
        BlockOverrideDnsType:
          type: string
          enum:
          - CNAME
          description: The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.
        BlockOverrideTtl:
          type: integer
          description: The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE. This setting is required if the BlockResponse setting is OVERRIDE.
        Name:
          type: string
          description: The name of the rule.
        FirewallDomainRedirectionAction:
          type: string
          enum:
          - INSPECT_REDIRECTION_DOMAIN
          - TRUST_REDIRECTION_DOMAIN
          description: 'How you want the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME. INSPECT_REDIRECTION_DOMAIN: (Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list. TRUST_REDIRECTION_DOMAIN: Inspects only the first domain in the redirection chain. You don''t need to add the subsequent domains in the redirection list to the domain list.'
        Qtype:
          type: string
          description: 'The DNS query type you want the rule to evaluate. Allowed values are: A: Returns an IPv4 address. AAAA: Returns an IPv6 address. CAA: Restricts CAs that can create SSL/TLS certifications for the domain. CNAME: Returns another domain name. DS: Record that identifies the DNSSEC signing key of a delegated zone. MX: Specifies mail servers. NAPTR: Regular-expression-based rewriting of domain names. NS: Authoritative name servers. PTR: Maps an IP address to a domain name. SOA: Start of authority record for the zone. SPF: Lists the servers authorized to send emails from a domain. SRV: Application spe'
        DnsThreatProtection:
          type: string
          enum:
          - DGA
          - DNS_TUNNELING
          - DICTIONARY_DGA
          description: 'The type of the DNS Firewall Advanced rule. This setting is mutually exclusive with FirewallDomainListId and FirewallRuleType. Valid values are: DGA: Domain generation algorithms detection. DGAs are used by attackers to generate a large number of domains to launch malware attacks. DNS_TUNNELING: DNS tunneling detection. DNS tunneling is used by attackers to exfiltrate data from the client by using the DNS tunnel without making a network connection to the client. DICTIONARY_DGA: Dictionary-based domain generation algorithms detection. Dictionary DGAs use wordlists to generate domains that appea'
        ConfidenceThreshold:
          type: string
          enum:
          - LOW
          - MEDIUM
          - HIGH
          description: 'The confidence threshold for DNS Firewall Advanced. You must provide this value when you create or update a DNS Firewall Advanced rule. The confidence level values mean: LOW: Provides the highest detection rate for threats, but also increases false positives. MEDIUM: Provides a balance between detecting threats and false positives. HIGH: Detects only the most well corroborated threats with a low rate of false positives.'
        FirewallRuleType:
          $ref: '#/components/schemas/FirewallRuleType'
      required:
      - FirewallRuleGroupId
    FirewallRuleType:
      type: object
      properties:
        PartnerThreatProtection:
          $ref: '#/components/schemas/PartnerThreatProtectionConfig'
        FirewallAdvancedContentCategory:
          $ref: '#/components/schemas/FirewallAdvancedContentCategoryConfig'
        FirewallAdvancedThreatCategory:
          $ref: '#/components/schemas/FirewallAdvancedThreatCategoryConfig'
        DnsThreatProtection:
          $ref: '#/components/schemas/DnsThreatProtectionRuleTypeConfig'
    PartnerThreatProtectionConfig:
      type: object
      properties:
        Partner:
          type: string
          description: The identifier of the partner threat-protection product, exactly as returned in the Value field of a FirewallRuleTypeDefinition with RuleType set to PartnerThreatProtection. The calling account must hold an active Amazon Web Services Marketplace subscription to this product.
      required:
      - Partner
    FirewallAdvancedThreatCategoryConfig:
      type: object
      properties:
        Category:
          type: string
          description: The threat category identifier. To retrieve the list of available threat categories, call ListFirewallRuleTypes with RuleType set to FirewallAdvancedThreatCategory.
      required:
      - Category
    BatchUpdateFirewallRuleRequest:
      type: object
      properties:
        UpdateFirewallRuleEntries:
          type: array
          items:
            $ref: '#/components/schemas/UpdateFirewallRuleEntry'
          description: The list of firewall rules to update.
      required:
      - UpdateFirewallRuleEntries
    FirewallAdvancedContentCategoryConfig:
      type: object
      properties:
        Category:
          type: string
          description: The content category identifier. To retrieve the list of available content categories, call ListFirewallRuleTypes with RuleType set to FirewallAdvancedContentCategory.
      required:
      - Category
    BatchUpdateFirewallRuleResponse:
      type: object
      properties:
        UpdatedFirewallRules:
          type: array
          items:
            $ref: '#/components/schemas/FirewallRule'
          description: The firewall rules that were successfully updated by the request.
        UpdateErrors:
          type: array
          items:
            $ref: '#/components/schemas/BatchUpdateFirewallRuleError'
          description: A list of errors that occurred while updating the firewall rules.
    AccessDeniedException:
      type: object
      properties:
        Message:
          type: string
    BatchDeleteFirewallRuleError:
      type: object
      properties:
        FirewallRule:
          $ref: '#/components/schemas/DeleteFirewallRuleEntry'
        Code:
          type: string
          description: The error code for the failure.
        Message:
          type: string
          description: A message that provides details about the error.
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: route53resolver
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/route53resolver/service/2018-04-01/route53resolver-2018-04-01.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)