Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Command line interface
  • Getting started with the CLI
    • Overview
      • Overview
        • Overview
        • add-access-binding
        • add-labels
        • create
        • delete
        • get
        • list
        • list-access-bindings
        • list-operations
        • move
        • remove-access-binding
        • remove-labels
        • set-access-bindings
        • update
    • help
    • init
    • version
  • CLI releases
  • Troubleshooting
  1. CLI reference
  2. dns
  3. firewall
  4. update

yc dns firewall update

Written by
Yandex Cloud
Updated at June 10, 2026
View in Markdown

Modify configuration or attributes of a dns firewall.

Command UsageCommand Usage

Syntax:

yc dns firewall update <DNS-FIREWALL-NAME>|<DNS-FIREWALL-ID> [Flags...] [Global Flags...]

FlagsFlags

Flag

Description

--id

string

DNS firewall id.

--name

string

DNS firewall name.

--async

Display information about the operation in progress, without waiting for the operation to complete.

--new-name

string

A new name of the DNS firewall.

--description

string

Specifies a textual description of the DNS firewall.

--labels

key=value[,key=value...]

A list of label KEY=VALUE pairs to add. For example, to add two labels named 'foo' and 'bar', both with the value 'baz', use '--labels foo=baz,bar=baz'.

--deletion-protection

Prevents accidental firewall removal.

--network-ids

value[,value]

Specifies network identifiers from which dns firewall will be accessible.

--folder-ids

value[,value]

Specifies folder identifiers from which dns firewall will be accessible.

--cloud-ids

value[,value]

Specifies cloud identifiers from which dns firewall will be accessible.

--lock-resources

Specifies whether the dns firewall locks resources in the folder in which it is created.

--enabled

Specifies whether the dns firewall is enabled or not.

--whitelist-fqdns

value[,value]

Specifies a list of FQDNs to whitelist.

--blacklist-fqdns

value[,value]

Specifies a list of FQDNs to blacklist.

Global FlagsGlobal Flags

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.

Was the article helpful?

Previous
set-access-bindings
Next
Overview
© 2026 Direct Cursus Technology L.L.C.