| _key | core | string | |
| account_id | core | string | |
| arn | core | string | The ARN (Amazon Resource Name) for the Resolver rule specified by Id. |
| creation_time | core | string | The date and time that the Resolver rule was created, in Unix time format and Coordinated Universal Time (UTC). |
| creator_request_id | core | string | A unique string that you specified when you created the Resolver rule. CreatorRequestId identifies the request and allows failed requests to be retried without the risk of running the operation twice. |
| delegation_record | core | string | DNS queries with delegation records that point to this domain name are forwarded to resolvers on your network. |
| domain_name | core | string | DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps. If a query matches multiple Resolver rules (example.com and www.example.com), the query is routed using the Resolver rule that contains the most specific domain name (www.example.com). |
| id | core | string | The ID that Resolver assigned to the Resolver rule when you created it. |
| modification_time | core | string | The date and time that the Resolver rule was last updated, in Unix time format and Coordinated Universal Time (UTC). |
| name | core | string | The name for the Resolver rule, which you specified when you created the Resolver rule. The name can be up to 64 characters long and can contain letters (a-z, A-Z), numbers (0-9), hyphens (-), underscores (_), and spaces. The name cannot consist of only numbers. |
| owner_id | core | string | When a rule is shared with another Amazon Web Services account, the account ID of the account that the rule is shared with. |
| resolver_endpoint_id | core | string | The ID of the endpoint that the rule is associated with. |
| rule_type | core | string | When you want to forward DNS queries for specified domain name to resolvers on your network, specify FORWARD or DELEGATE. If a query matches multiple Resolver rules (example.com and www.example.com), outbound DNS queries are routed using the Resolver rule that contains the most specific domain name (www.example.com). When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify SYSTEM. For example, to forward DNS queries for example.com to resolvers on your network, you create a rule and specify FORWARD for RuleType. To then have Resolver process queries for apex.example.com, you create a rule and specify SYSTEM for RuleType. Currently, only Resolver can create rules that have a value of RECURSIVE for RuleType. |
| share_status | core | string | Whether the rule is shared and, if so, whether the current account is sharing the rule with another account, or another account is sharing the rule with the current account. |
| status | core | string | A code that specifies the current status of the Resolver rule. |
| status_message | core | string | A detailed description of the status of a Resolver rule. |
| tags | core | hstore_csv | |
| target_ips | core | json | An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network. |