[Документация Yandex Cloud](../../../index.md) > [Yandex Cloud DNS](../../index.md) > Справочник API > [REST (англ.)](../index.md) > [DnsFirewall](index.md) > Create # Cloud DNS API, REST: DnsFirewall.Create Creates a DNS firewall in the specified folder. ## HTTP request ``` POST https://dns.api.yandexcloud.kz/dns/v1/firewalls ``` ## Body parameters {#yandex.cloud.dns.v1.CreateDnsFirewallRequest} ```json { "folderId": "string", "name": "string", "description": "string", "labels": "object", "deletionProtection": "boolean", "enabled": "boolean", "resourceConfig": { "type": "string", "resourceIds": [ "string" ], "lockingPolicyEnabled": "boolean" }, "whitelistFqdns": [ "string" ], "blacklistFqdns": [ "string" ] } ``` #| ||Field | Description || || folderId | **string** Required field. ID of the folder to create DNS firewalls in. To get a folder ID, make a [yandex.cloud.resourcemanager.v1.FolderService.List](../../../resource-manager/api-ref/Folder/list.md#List) request. The maximum string length in characters is 50. || || name | **string** Name of the DNS firewall. The name must be unique within the folder. Value must match the regular expression ``` |[a-z]([-a-z0-9]{0,61}[a-z0-9])? ```. || || description | **string** Description of the DNS firewall. The maximum string length in characters is 256. || || labels | **object** (map<**string**, **string**>) DNS firewall labels as `key:value` pairs. The maximum string length in characters for each value is 63. The string length in characters for each key must be 1-63. Each key must match the regular expression ` [a-z][-_./\@0-9a-z]* `. Each value must match the regular expression ` [-_./\@0-9a-z]* `. No more than 64 per resource. || || deletionProtection | **boolean** Prevents accidental firewall removal. || || enabled | **boolean** Whether the DNS firewall is enabled. || || resourceConfig | **[ResourceConfig](#yandex.cloud.dns.v1.DnsFirewall.ResourceConfig)** Resource settings. Specifies resources that the DNS firewall applies to. || || whitelistFqdns[] | **string** List of FQDNs that the DNS firewall allows to pass. The maximum string length in characters for each value is 255. The maximum number of elements is 255. || || blacklistFqdns[] | **string** List of FQDNs that the DNS firewall blocks. The maximum string length in characters for each value is 255. The maximum number of elements is 255. || |# ## ResourceConfig {#yandex.cloud.dns.v1.DnsFirewall.ResourceConfig} #| ||Field | Description || || type | **enum** (ResourceType) Type of the resource. - `NETWORK`: VPC network resource type. - `FOLDER`: Folder resource type. - `CLOUD`: Cloud resource type. || || resourceIds[] | **string** Resource ids. The maximum string length in characters for each value is 64. The number of elements must be in the range 0-100. || || lockingPolicyEnabled | **boolean** Whether the locking policy is enabled. || |# ## Response {#yandex.cloud.operation.Operation} **HTTP Code: 200 - OK** ```json { "id": "string", "description": "string", "createdAt": "string", "createdBy": "string", "modifiedAt": "string", "done": "boolean", "metadata": "object", // Includes only one of the fields `error`, `response` "error": { "code": "integer", "message": "string", "details": [ "object" ] }, "response": "object" // end of the list of possible fields } ``` An Operation resource. For more information, see [Operation](../../../api-design-guide/concepts/operation.md). #| ||Field | Description || || id | **string** ID of the operation. || || description | **string** Description of the operation. 0-256 characters long. || || createdAt | **string** (date-time) Creation timestamp. String in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the [Protocol Buffers reference](https://developers.google.com/protocol-buffers/docs/reference/overview). In some languages, built-in datetime utilities do not support nanosecond precision (9 digits). || || createdBy | **string** ID of the user or service account who initiated the operation. || || modifiedAt | **string** (date-time) The time when the Operation resource was last modified. String in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the [Protocol Buffers reference](https://developers.google.com/protocol-buffers/docs/reference/overview). In some languages, built-in datetime utilities do not support nanosecond precision (9 digits). || || done | **boolean** If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available. || || metadata | **object** Service-specific metadata associated with the operation. It typically contains the ID of the target resource that the operation is performed on. Any method that returns a long-running operation should document the metadata type, if any. || || error | **[Status](#google.rpc.Status)** The error result of the operation in case of failure or cancellation. Includes only one of the fields `error`, `response`. The operation result. If `done == false` and there was no failure detected, neither `error` nor `response` is set. If `done == false` and there was a failure detected, `error` is set. If `done == true`, exactly one of `error` or `response` is set. || || response | **object** The normal response of the operation in case of success. If the original method returns no data on success, such as Delete, the response is [google.protobuf.Empty](https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#google.protobuf.Empty). If the original method is the standard Create/Update, the response should be the target resource of the operation. Any method that returns a long-running operation should document the response type, if any. Includes only one of the fields `error`, `response`. The operation result. If `done == false` and there was no failure detected, neither `error` nor `response` is set. If `done == false` and there was a failure detected, `error` is set. If `done == true`, exactly one of `error` or `response` is set. || |# ## Status {#google.rpc.Status} The error result of the operation in case of failure or cancellation. #| ||Field | Description || || code | **integer** (int32) Error code. An enum value of [google.rpc.Code](https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto). || || message | **string** An error message. || || details[] | **object** A list of messages that carry the error details. || |#