import * as core from "@terrascript/core";
export interface FirewallConfigArgs extends core.ResourceArgs {
    /**
     * (Required) Determines how Route 53 Resolver handles queries during failures, for example when all tr
     * affic that is sent to DNS Firewall fails to receive a reply. By default, fail open is disabled, whic
     * h means the failure mode is closed. This approach favors security over availability. DNS Firewall bl
     * ocks queries that it is unable to evaluate properly. If you enable this option, the failure mode is
     * open. This approach favors availability over security. DNS Firewall allows queries to proceed if it
     * is unable to properly evaluate them. Valid values: `ENABLED`, `DISABLED`.
     */
    firewallFailOpen?: string | core.StringOut;
    /**
     * (Required) The ID of the VPC that the configuration is for.
     */
    resourceId: string | core.StringOut;
}
export declare class FirewallConfig extends core.Resource<FirewallConfigArgs> {
    /**
     * (Required) Determines how Route 53 Resolver handles queries during failures, for example when all tr
     * affic that is sent to DNS Firewall fails to receive a reply. By default, fail open is disabled, whic
     * h means the failure mode is closed. This approach favors security over availability. DNS Firewall bl
     * ocks queries that it is unable to evaluate properly. If you enable this option, the failure mode is
     * open. This approach favors availability over security. DNS Firewall allows queries to proceed if it
     * is unable to properly evaluate them. Valid values: `ENABLED`, `DISABLED`.
     */
    firewallFailOpen?: string | core.StringOut;
    /**
     * The ID of the firewall configuration.
     */
    id: string | core.StringOut;
    /**
     * The AWS account ID of the owner of the VPC that this firewall configuration applies to.
     */
    ownerId: string | core.StringOut;
    /**
     * (Required) The ID of the VPC that the configuration is for.
     */
    resourceId: string | core.StringOut;
    constructor(name: string, args?: FirewallConfigArgs);
    getNamespace(): string;
}
//# sourceMappingURL=firewall_config.d.ts.map