Guided Walkthroughs
Step-by-step configuration wizards for your environment
Dedicated Security Account
AWS Backup Strategy
VPC Connectivity Setup
Automated Patching
All Guides
Guided Walkthroughs
Configuration Packages
AI CloudAdvisor (Beta)
By Implementation
By Service Protected
Reference Guides
Other
Guided Walkthroughs
Configuration Packages
AI CloudAdvisor (Beta)
Configuration Stack0
By Service Protected
By Implementation
Service Control Policies
Config Rules
Auto Remediation Rules
Conformance Packs
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network Firewall
Route53 Resolver Security
Amazon Macie
S3 Bucket Policies
CloudWatch Alarms and Event Rules
AWS WAF
AWS Secrets Manager
AWS Systems Manager
Security Groups & NACLs
AWS KMS
AWS SSO
IAM Policies
VPC Endpoint Policies
CloudFormation Guard Rules
Load Balancers
RDS Event Subscriptions
AWS Resource Access Manager (RAM)Reference Guides
Other
Route53 Resolver Security
Route53 Resolver DNS Firewall Custom Template
Configuration templates to deploy an AWS Route53 Resolver Firewall and related settings including firewall rule groups, custom domain lists, and VPC associations. This configuration can be used to block DNS requests for malicious or unwanted domains.
The following resources are available for configuration:
- Firewall Rule Groups – define a set of rules that allow, block or alert on DNS requests that match the associated domain lists. AWS managed URL domain lists are available for Malware and Botnet C&C URLs, or custom domain lists can be defined
- Domain List – a set of domain specifications that you use in a DNS Firewall rule, inside a rule group. Each domain listed must be alphanumerical (or can optionally start with *)
- VPC Association – Associated the newly created Firewall Rule Group with a VPC in the AWS account
Items
2
Size
0.5 KB
AWSTemplateFormatVersion: "2010-09-09"
Description: ""
Resources:
ResolverFirewallDomainList1:
Type: "AWS::Route53Resolver::FirewallDomainList"
Properties:
Name: "new-domain-list"
Domains:
- "google.com"
ResolverFirewallRuleGroup:
Type: "AWS::Route53Resolver::FirewallRuleGroup"
Properties:
Name: "dns-firewall-rulegroup"
FirewallRules:
- Priority: 1
Action: "ALLOW"
FirewallDomainListId:
Ref: "ResolverFirewallDomainList1"
Parameters: {}
Metadata: {}
Conditions: {}
Actions
Customize Template
* Required field
Upgrade to Premium for More Features
Configuration Packages
Pre-built packages for common configuration
Common SCPs
CloudFormation Guard Rules
Auto Remediation Rules
IAM Monitoring & Compliance
All Packages
Automated Assessments
- 350+ security checks
- Well-architected reviews
- Detailed compliance reports
- Remediation templates
- Email summaries
- Learn more