Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
    • Cloud Interconnect
    • Cloud Backup
    • Cloud Registry
    • Yandex AI Studio
    • Compute Cloud
    • Object Storage
    • Managed Service for Kubernetes®
    • Yandex BareMetal
    • Smart Web Security
    • Security Deck
    • Managed Service for PostgreSQL
    • Managed Service for ClickHouse®
    • Monium
    • Cloud CDN
    • Network Load Balancer
    • Virtual Private Cloud
    • Cloud DNS
    • Application Load Balancer
    • Yandex Cloud Video
    • Stackland
    • Yandex Cloud Router
    • Yandex Managed Service for Trino
    • Managed Service for MySQL®
    • Managed Service for Valkey™
    • Managed Service for Apache Spark™
    • Yandex StoreDoc
    • Managed Service for OpenSearch
    • Managed Service for Apache Kafka®
    • Data Transfer
    • Yandex MPP Analytics Engine for PostgreSQL
    • Yandex Managed Service for Apache Airflow®
    • Data Processing
    • Yandex MetaData Hub
    • Managed Service for YDB
    • Managed Service for Sharded PostgreSQL
    • Managed Service for YTsaurus
    • Yandex WebSQL
    • DataLens
    • Yandex Search API
    • SpeechSense
    • SpeechKit
    • DataSphere
    • Vision OCR
    • Translate
    • Yandex Identity Hub
    • Key Management Service
    • Certificate Manager
    • Yandex Lockbox
    • Audit Trails
    • SmartCaptcha
    • Cloud Desktop
    • SourceCraft Code Assistant
    • Container Registry
    • Managed Service for GitLab
    • Managed Service for Prometheus®
    • Cloud Functions
    • API Gateway
    • Yandex Cloud Postbox
    • Message Queue
    • Serverless Integrations
    • IoT Core
    • Data Streams
    • Serverless Containers
    • Cloud Notification Service
    • Yandex Query
    • Identity and Access Management
    • Yandex Cloud Console
    • Resource Manager
    • Yandex Cloud Billing
    • Yandex Cloud Quota Manager
    • Cloud Apps
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Terraform in Yandex Cloud
  • Getting started
  • Setting up Yandex Cloud Terraform provider authentication
  • Solution library
    • Overview
    • Release notes
          • dns_firewall
          • dns_inbound_endpoint
          • dns_zone

In this article:

  • Example usage
  • Arguments & Attributes Reference
  1. Terraform reference
  2. Resources
  3. Cloud DNS
  4. Data Sources
  5. dns_firewall

yandex_dns_firewall (DataSource)

Written by
Yandex Cloud
Updated at July 30, 2026
View in Markdown
  • Example usage
  • Arguments & Attributes Reference

A DNS firewall. For details about the concept, see DNS firewalls.

Example usageExample usage

//
// Get information about existing DNS Firewall.
//
data "yandex_dns_firewall" "foo" {
  dns_firewall_id = yandex_dns_firewall.fw1.id
}

output "whitelist_fqdns" {
  value = data.yandex_dns_firewall.foo.whitelist_fqdns
}

Arguments & Attributes ReferenceArguments & Attributes Reference

  • blacklist_fqdns (Set Of String). List of FQDNs that the DNS firewall blocks.
  • created_at (Read-Only) (String). Creation timestamp.
  • deletion_protection (Bool). Prevents accidental firewall removal.
  • description (String). Description of the DNS firewall.
  • dns_firewall_id (String). ID of the DNS firewall to return.
    To get a DNS firewall ID, make a [DnsFirewallService.List] request.
  • enabled (Bool). Whether the DNS firewall is enabled.
  • folder_id (String). ID of the folder that the DNS firewall belongs to.
  • id (String). ID of the DNS firewall to return.
    To get a DNS firewall ID, make a [DnsFirewallService.List] request.
  • labels (Map Of String). DNS firewall labels as key:value pairs.
  • name (String). Name of the DNS firewall.
    The name is unique within the folder.
  • resource_config [Block]. Resource settings.
    Specifies resources that the DNS firewall applies to.
    • lock_resources (Bool). Whether the locking policy is enabled.
    • resource_ids (Set Of String). Resource ids.
    • type (String). Type of the resource.
  • timeouts [Block].
    • create (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    • delete (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    • read (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    • update (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
  • whitelist_fqdns (Set Of String). List of FQDNs that the DNS firewall allows to pass.

Was the article helpful?

Previous
cdn_resource
Next
dns_inbound_endpoint
© 2026 Direct Cursus Technology L.L.C.