��JFIF��2� /snap/aws-cli/current/aws/dist/awscli/examples/route53resolver/ Current File: //snap/aws-cli/current/aws/dist/awscli/examples/route53resolver/create-firewall-rule.rst

**To create a firewall rule**

The following ``create-firewall-rule`` example creates a firewall rule in a DNS Firewall rule for domains listed in a DNS Firewall domain list. ::

    aws route53resolver create-firewall-rule \
        --name allow-rule \
        --firewall-rule-group-id rslvr-frg-47f93271fexample \
        --firewall-domain-list-id rslvr-fdl-9e956e9ffexample \
        --priority 101 \
        --action ALLOW

Output::

    {
        "FirewallRule": {
            "FirewallRuleGroupId": "rslvr-frg-47f93271fexample",
            "FirewallDomainListId": "rslvr-fdl-9e956e9ffexample",
            "Name": "allow-rule",
            "Priority": 101,
            "Action": "ALLOW",
            "CreatorRequestId": "d81e3fb7-020b-415e-939f-EXAMPLE11111",
            "CreationTime": "2021-05-25T21:44:00.346093Z",
            "ModificationTime": "2021-05-25T21:44:00.346093Z"
        }
    }

For more information, see `Managing rule groups and rules in DNS Firewall <https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-dns-firewall-rule-group-managing.html>`__ in the *Amazon Route 53 Developer Guide*.