Aws/route53resolver

@swamp/aws/route53resolverv2026.10.25.1· AGPL-3.0-or-later· 1d agoBEHAVIORS

01README

AWS ROUTE53RESOLVER infrastructure models

02Behaviors12

@swamp/aws/route53resolver/firewall-configv2026.10.23.1firewall_config.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ResourceId	string	yes	The ID of the VPC that this firewall configuration applies to.
FirewallFailOpen	enum	yes	Determines how DNS Firewall operates during failures. By default, fail open is disabled, which means the failure mode is closed. If you enable this option, the failure mode is open. This behavior is only enforced for VPCs that have at least one DNS Firewall rule group association.

fn create()

Create a Route53Resolver FirewallConfig

fn get(identifier: string)

Get a Route53Resolver FirewallConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallConfig

fn update()

Update a Route53Resolver FirewallConfig

fn delete(identifier: string)

Delete a Route53Resolver FirewallConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallConfig

fn sync()

Sync Route53Resolver FirewallConfig state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver FirewallConfig resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver FirewallConfig resource state

@swamp/aws/route53resolver/firewall-domain-listv2026.10.23.1firewall_domain_list.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Name?	string	no	FirewallDomainListName
Domains?	array	no	An inline list of domains to use for this domain list.
DomainFileUrl?	string	no	S3 URL to import domains from.
Tags?	array	no	Tags

fn create()

Create a Route53Resolver FirewallDomainList

fn get(identifier: string)

Get a Route53Resolver FirewallDomainList

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallDomainList

fn update()

Update a Route53Resolver FirewallDomainList

fn delete(identifier: string)

Delete a Route53Resolver FirewallDomainList

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallDomainList

fn sync()

Sync Route53Resolver FirewallDomainList state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver FirewallDomainList resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver FirewallDomainList resource state

@swamp/aws/route53resolver/firewall-rule-groupv2026.10.23.1firewall_rule_group.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Name?	string	no	FirewallRuleGroupName
FirewallRules?	array	no	FirewallRules
Tags?	array	no	Tags

fn create()

Create a Route53Resolver FirewallRuleGroup

fn get(identifier: string)

Get a Route53Resolver FirewallRuleGroup

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallRuleGroup

fn update()

Update a Route53Resolver FirewallRuleGroup

fn delete(identifier: string)

Delete a Route53Resolver FirewallRuleGroup

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallRuleGroup

fn sync()

Sync Route53Resolver FirewallRuleGroup state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver FirewallRuleGroup resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver FirewallRuleGroup resource state

@swamp/aws/route53resolver/firewall-rule-group-associationv2026.10.23.1firewall_rule_group_association.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
FirewallRuleGroupId	string	yes	FirewallRuleGroupId
VpcId	string	yes	VpcId
Name?	string	no	FirewallRuleGroupAssociationName
Priority	number	yes	Priority
MutationProtection?	enum	no	MutationProtectionStatus
Tags?	array	no	Tags

fn create()

Create a Route53Resolver FirewallRuleGroupAssociation

fn get(identifier: string)

Get a Route53Resolver FirewallRuleGroupAssociation

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallRuleGroupAssociation

fn update()

Update a Route53Resolver FirewallRuleGroupAssociation

fn delete(identifier: string)

Delete a Route53Resolver FirewallRuleGroupAssociation

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver FirewallRuleGroupAssociation

fn sync()

Sync Route53Resolver FirewallRuleGroupAssociation state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver FirewallRuleGroupAssociation resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver FirewallRuleGroupAssociation resource state

@swamp/aws/route53resolver/outpost-resolverv2026.10.23.1outpost_resolver.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Name	string	yes	The OutpostResolver name.
OutpostArn	string	yes	The Outpost ARN.
PreferredInstanceType	string	yes	The OutpostResolver instance type.
InstanceCount?	number	no	The number of OutpostResolvers.
Tags?	array	no	An array of key-value pairs to apply to this resource.

fn create()

Create a Route53Resolver OutpostResolver

fn get(identifier: string)

Get a Route53Resolver OutpostResolver

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver OutpostResolver

fn update()

Update a Route53Resolver OutpostResolver

fn delete(identifier: string)

Delete a Route53Resolver OutpostResolver

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver OutpostResolver

fn sync()

Sync Route53Resolver OutpostResolver state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver OutpostResolver resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver OutpostResolver resource state

@swamp/aws/route53resolver/resolver-configv2026.10.23.1resolver_config.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ResourceId	string	yes	ResourceId
AutodefinedReverseFlag	enum	yes	Represents the desired status of AutodefinedReverse. The only supported value on creation is DISABLE. Deletion of this resource will return AutodefinedReverse to its default value (ENABLED).

fn create()

Create a Route53Resolver ResolverConfig

fn get(identifier: string)

Get a Route53Resolver ResolverConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverConfig

fn delete(identifier: string)

Delete a Route53Resolver ResolverConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverConfig

fn sync()

Sync Route53Resolver ResolverConfig state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver ResolverConfig resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver ResolverConfig resource state

@swamp/aws/route53resolver/resolver-dnssecconfigv2026.10.23.1resolver_dnssecconfig.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ResourceId?	string	no	ResourceId

fn create()

Create a Route53Resolver ResolverDNSSECConfig

fn get(identifier: string)

Get a Route53Resolver ResolverDNSSECConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverDNSSECConfig

fn delete(identifier: string)

Delete a Route53Resolver ResolverDNSSECConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverDNSSECConfig

fn sync()

Sync Route53Resolver ResolverDNSSECConfig state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver ResolverDNSSECConfig resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver ResolverDNSSECConfig resource state

@swamp/aws/route53resolver/resolver-endpointv2026.10.23.1resolver_endpoint.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Direction	string	yes	Indicates whether the Resolver endpoint allows inbound or outbound DNS queries: - INBOUND: allows DNS queries to your VPC from your network - OUTBOUND: allows DNS queries from your VPC to your network - INBOUND_DELEGATION: allows DNS queries to your VPC from your network with authoritative answers from private hosted zones
IpAddresses	array	yes	The subnets and IP addresses in your VPC that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). The subnet ID uniquely identifies a VPC.
Name?	string	no	A friendly name that lets you easily find a configuration in the Resolver dashboard in the Route 53 console.
OutpostArn?	string	no	The ARN (Amazon Resource Name) for the Outpost.
PreferredInstanceType?	string	no	The Amazon EC2 instance type.
TargetNameServerMetricsEnabled?	boolean	no	Specifies whether target name server metrics are enabled for the Outbound Resolver Endpoint. When set to true, one-minute granular metrics are published in CloudWatch for each target name server associated with this endpoint. When set to false, metrics are not published. Default is false.
RniEnhancedMetricsEnabled?	boolean	no	Specifies whether RNI enhanced metrics are enabled for the Resolver Endpoints. When set to true, one-minute granular metrics are published in CloudWatch for each RNI associated with this endpoint. When set to false, metrics are not published. Default is false.
Dns64Enabled?	boolean	no	Specifies whether DNS64 is enabled for the Inbound Resolver Endpoint. When set to true, if a DNS AAAA query is made for a domain that has only an A (IPv4) record, the resolver automatically synthesizes an AAAA (IPv6) response by embedding the IPv4 address into the well-known prefix 64:ff9b::/96. Default is false.
Ipv6InternetAccessEnabled?	boolean	no	Specifies whether IPv6 Internet Gateway access is enabled through the Outbound Resolver Endpoint. When set to true, this property allows your Endpoint ENIs to reach public IPv6 target nameservers through an internet gateway. Default is false.
Protocols?	array	no	Protocols used for the endpoint. DoH-FIPS is applicable for inbound endpoints only.
ResolverEndpointType?	enum	no	The Resolver endpoint IP address type.
SecurityGroupIds	array	yes	The ID of one or more security groups that control access to this VPC. The security group must include one or more inbound rules (for inbound endpoints) or outbound rules (for outbound endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network.
Tags?	array	no	An array of key-value pairs to apply to this resource.

fn create()

Create a Route53Resolver ResolverEndpoint

fn get(identifier: string)

Get a Route53Resolver ResolverEndpoint

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverEndpoint

fn update()

Update a Route53Resolver ResolverEndpoint

fn delete(identifier: string)

Delete a Route53Resolver ResolverEndpoint

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverEndpoint

fn sync()

Sync Route53Resolver ResolverEndpoint state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver ResolverEndpoint resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver ResolverEndpoint resource state

@swamp/aws/route53resolver/resolver-query-logging-configv2026.10.23.1resolver_query_logging_config.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Name?	string	no	ResolverQueryLogConfigName
DestinationArn?	string	no	destination arn
Tags?	array	no	An array of key-value pairs to apply to this resource.

fn create()

Create a Route53Resolver ResolverQueryLoggingConfig

fn get(identifier: string)

Get a Route53Resolver ResolverQueryLoggingConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverQueryLoggingConfig

fn delete(identifier: string)

Delete a Route53Resolver ResolverQueryLoggingConfig

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverQueryLoggingConfig

fn sync()

Sync Route53Resolver ResolverQueryLoggingConfig state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver ResolverQueryLoggingConfig resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver ResolverQueryLoggingConfig resource state

@swamp/aws/route53resolver/resolver-query-logging-config-associationv2026.10.23.1resolver_query_logging_config_association.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ResolverQueryLogConfigId?	string	no	ResolverQueryLogConfigId
ResourceId?	string	no	ResourceId

fn create()

Create a Route53Resolver ResolverQueryLoggingConfigAssociation

fn get(identifier: string)

Get a Route53Resolver ResolverQueryLoggingConfigAssociation

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverQueryLoggingConfigAssociation

fn delete(identifier: string)

Delete a Route53Resolver ResolverQueryLoggingConfigAssociation

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverQueryLoggingConfigAssociation

fn sync()

Sync Route53Resolver ResolverQueryLoggingConfigAssociation state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver ResolverQueryLoggingConfigAssociation resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver ResolverQueryLoggingConfigAssociation resource state

@swamp/aws/route53resolver/resolver-rulev2026.10.23.1resolver_rule.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ResolverEndpointId?	string	no	The ID of the endpoint that the rule is associated with.
DomainName?	string	no	DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps
Name?	string	no	The name for the Resolver rule
RuleType	enum	yes	When you want to forward DNS queries for specified domain name to resolvers on your network, specify FORWARD. When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify SYSTEM.
DelegationRecord?	string	no	The name server domain for queries to be delegated to if a query matches the delegation record.
Tags?	array	no	An array of key-value pairs to apply to this resource.
TargetIps?	array	no	An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network. Specify IPv4 addresses. IPv6 is not supported.

fn create()

Create a Route53Resolver ResolverRule

fn get(identifier: string)

Get a Route53Resolver ResolverRule

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverRule

fn update()

Update a Route53Resolver ResolverRule

fn delete(identifier: string)

Delete a Route53Resolver ResolverRule

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverRule

fn sync()

Sync Route53Resolver ResolverRule state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver ResolverRule resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver ResolverRule resource state

@swamp/aws/route53resolver/resolver-rule-associationv2026.10.23.1resolver_rule_association.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
VPCId	string	yes	The ID of the VPC that you associated the Resolver rule with.
ResolverRuleId	string	yes	The ID of the Resolver rule that you associated with the VPC that is specified by VPCId.
Name?	string	no	The name of an association between a Resolver rule and a VPC. The name can be up to 64 characters long and can contain letters (a-z, A-Z), numbers (0-9), hyphens (-), underscores (_), and spaces. The name cannot consist of only numbers.

fn create()

Create a Route53Resolver ResolverRuleAssociation

fn get(identifier: string)

Get a Route53Resolver ResolverRuleAssociation

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverRuleAssociation

fn delete(identifier: string)

Delete a Route53Resolver ResolverRuleAssociation

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Route53Resolver ResolverRuleAssociation

fn sync()

Sync Route53Resolver ResolverRuleAssociation state from AWS

fn list(maxPages?: number, resourceModel?: string)

List Route53Resolver ResolverRuleAssociation resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— Route53Resolver ResolverRuleAssociation resource state

03Previous Versions19

2026.10.24.1AGPL-3.0-or-laterOct 24, 2026

2026.10.23.1AGPL-3.0-or-laterOct 24, 2026

Updated: firewall_config, firewall_domain_list, firewall_rule_group, firewall_rule_group_association, outpost_resolver, resolver_config, resolver_dnssecconfig, resolver_endpoint, resolver_query_logging_config, resolver_query_logging_config_association, resolver_rule, resolver_rule_association

2026.10.22.1AGPL-3.0-or-later(was none)Oct 22, 2026

Added: firewall_config

Added 1 behaviors

2026.10.13.1Oct 13, 2026

Updated: firewall_domain_list, firewall_rule_group, firewall_rule_group_association, outpost_resolver, resolver_config, resolver_dnssecconfig, resolver_endpoint, resolver_query_logging_config, resolver_query_logging_config_association, resolver_rule, resolver_rule_association

2026.10.08.1Oct 8, 2026

2026.10.06.1Oct 6, 2026

2026.10.04.1Oct 4, 2026

2026.10.03.1Oct 3, 2026

2026.10.02.1Oct 2, 2026

2026.10.01.1Oct 1, 2026

2026.09.30.1Sep 30, 2026

2026.09.29.1Sep 29, 2026

2026.09.28.1Sep 28, 2026

2026.09.27.1Sep 27, 2026

2026.09.26.1Sep 26, 2026

2026.09.25.1Sep 25, 2026

2026.09.24.1Sep 24, 2026

2026.09.23.1Sep 23, 2026

2026.09.21.1Sep 21, 2026

04Stats

100 / 100

Downloads

Archive size

2.4 MB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Docs keep secrets in a vault1/1earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License2/2earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

05Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64 windows · x86_64

06Labels

#aws #route53resolver #cloud #infrastructure