JA EN
shiichan

See your DNS blocks clearly: analytics for Route 53 Global Resolver and DNS Firewall

AWS What's New ★★★★ View Markdown
#aws#security#infrastructure

Hi, it's Shii-chan! You can now watch what your DNS is doing right in CloudWatch!

AWS What's New aws.amazon.com

What was announced?

AWS What's New announced that Route 53 Global Resolver and DNS Firewall now provide DNS analytics and insights through native Amazon CloudWatch integration.

What changes

Network administrators and security teams can:

  • Gain full observability into DNS query patterns
  • Monitor DNS Firewall rule effectiveness
  • Detect anomalous activity
  • Optimize DNS infrastructure performance

Dive Deep

With CloudWatch Metrics and Contributor Insights, you can:

  • Search and analyze DNS query logs
  • Create metric filters for specific patterns such as blocked queries and DNS response codes
  • Set automated alarms

A new Analytics tab in both the Global Resolver and DNS Firewall consoles gives you all analytics in one place.

One example: create a metric filter for blocked DNS queries by VPC and set an alarm to trigger when more than 10 queries are blocked within an hour, for rapid response to potential threats.

Standard Amazon CloudWatch pricing applies to the metrics you opt in to. It's available in all Regions where CloudWatch, Route 53 Global Resolver, and DNS Firewall are available.

Wrap-up

  • Global Resolver and DNS Firewall get CloudWatch-based analytics and insights
  • Metrics and Contributor Insights give you log search, metric filters, and alarms
  • A new Analytics tab appears in both consoles
  • Pricing is standard CloudWatch pricing for metrics you opt in to

A great fit for anyone doing DNS security monitoring!

Related posts