---
title: "DELETE /firewall-rules/{firewallRuleId}"
method: DELETE
path: "/firewall-rules/{firewallRuleId}"
---

# DELETE /firewall-rules/{firewallRuleId}

`DELETE /firewall-rules/{firewallRuleId}`

Deletes a DNS firewall rule. This operation cannot be undone.

Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify `--region us-east-2` on Amazon Web Services CLI commands.

## Path parameters

- `firewallRuleId` string, required

## Response `200`

Success

- DeleteFirewallRuleOutput
  - `action` 'ALLOW' | 'ALERT' | 'BLOCK', required — The action that was configured for the deleted firewall rule.
  - `blockOverrideDnsType` 'CNAME' — The DNS record type that was configured for the deleted firewall rule's custom response.
  - `blockOverrideDomain` string — The custom domain that was configured for the deleted firewall rule's BLOCK response.
  - `blockOverrideTtl` integer — The TTL value that was configured for the deleted firewall rule's custom response.
  - `blockResponse` 'NODATA' | 'NXDOMAIN' | 'OVERRIDE' — The block response type that was configured for the deleted firewall rule.
  - `confidenceThreshold` 'LOW' | 'MEDIUM' | 'HIGH' — The confidence threshold that was configured for the deleted firewall rule's advanced threat detection.
  - `createdAt` string, date-time, required — The date and time when the firewall rule was originally created.
  - `description` string — The description of the deleted firewall rule.
  - `dnsAdvancedProtection` 'DGA' | 'DNS_TUNNELING' | 'DICTIONARY_DGA' — Whether advanced DNS threat protection was enabled for the deleted firewall rule.
  - `firewallDomainListId` string — The ID of the firewall domain list that was associated with the deleted firewall rule.
  - `id` string, required — The unique identifier of the deleted firewall rule.
  - `name` string, required — The name of the deleted firewall rule.
  - `priority` integer, required — The priority that was configured for the deleted firewall rule.
  - `dnsViewId` string, required — The ID of the DNS view that was associated with the deleted firewall rule.
  - `queryType` string — The DNS query type that the deleted firewall rule was configured to match.
  - `status` 'CREATING' | 'OPERATIONAL' | 'UPDATING' | 'DELETING', required — The final status of the deleted firewall rule.
  - `updatedAt` string, date-time, required — The date and time when the firewall rule was last updated before deletion.

## Other responses

- `480` — InternalServerException
- `481` — ValidationException
- `482` — ConflictException
- `483` — AccessDeniedException
- `484` — ThrottlingException
- `485` — ResourceNotFoundException

---

[API](https://skmtc.net/aws/apis/route53globalresolver.md) · [All operations](https://skmtc.net/aws/apis/route53globalresolver/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/route53globalresolver/versions/5ebf158d0c4b/schema)