Skip to content

List platform-curated managed DNS firewall rule groups.

GET
/v1/projects/{projectId}/dns/managed-firewall-rule-groups
Code sample: Shell / cURL
curl --request GET \
--url https://stratum.example.com/v1/projects/example/dns/managed-firewall-rule-groups \
--header 'Authorization: Bearer <token>'

The AWS AWSManagedDomains* analog. Managed rule groups are platform-curated (owned by the platform, read-only to tenants) and can be associated by any project with its own VPCs via the normal associate endpoint. Each entry carries a domainCount rather than the full (potentially large) domain set; GET the group by id for its domains.

projectId
required
string
/^p-[a-z0-9-]+$/

The available managed firewall rule groups.

Media typeapplication/json
object
items
required
Array<object>
object
id
required
string
/^fwrg-[a-z0-9]+$/
projectId
required
string
region
string
name
required
string
managed

True for a platform-curated managed group: owned by the platform, read-only to tenants, associable by any project with its own VPCs.

boolean
description

Human-readable description; set on managed groups to explain the curated list.

string
createdAt
string format: date-time
domains

The group’s domain rules. Omitted on the managed-list discovery endpoint (see domainCount).

Array<object>
object
domain
required

FQDN to match (its subtree is included). A trailing dot is added if omitted.

string
action
required

Block sinkholes the domain (NXDOMAIN); alert logs matched queries but resolves normally (monitoring); allow overrides a block/alert for that exact domain.

string
Allowed values: block allow alert
vpcIds

VPCs this rule group is associated with.

Array<string>
domainCount

Number of domain rules; set by the managed-list discovery endpoint in lieu of the full domains array.

integer

Example

{
"items": [
{
"domains": [
{
"action": "block"
}
]
}
]
}