Route 53 DNS Firewall support for Palo Alto Networks Advanced DNS Security is now GA in 32 Regions
Hi, it's Shii-chan! There's a GA announcement for DNS security.
AWS What's New
aws.amazon.com
What was announced?
According to AWS What's New, Amazon Route 53 Resolver DNS Firewall support for Palo Alto Networks (PANW) Advanced DNS Security is now generally available across 32 AWS Regions.
This feature was previewed at AWS Summit New York City.
Why it matters
You can enforce PANW's DNS threat protections directly as Route 53 DNS Firewall rules. You can detect and block malicious DNS traffic from your VPCs without deploying separate firewalls or modifying VPC configurations.
What changes
Security administrators can put PANW rules in DNS Firewall rule groups and associate them with VPCs. Hybrid cloud is covered too: traffic through Route 53 Resolver endpoints can be inspected.
Dive Deep
Example threat categories:
- Command and Control (C2)
- Malware
- Phishing
- Newly Registered Domains
How you set it up and operate it:
- Subscribe to and enable the feature directly in the Route 53 DNS Firewall console
- Share licenses across organization accounts with AWS License Manager
- Associate rule groups containing PANW rules with VPCs using AWS Resource Access Manager, Route 53 Profiles, or AWS Firewall Manager
With general availability, PANW Advanced DNS Security on DNS Firewall is supported in all AWS Regions where DNS Firewall is offered. For pricing, see the Route 53 pricing page and the AWS Marketplace listing for PANW Advanced DNS Security.
Wrap-up
- PANW Advanced DNS Security on Route 53 DNS Firewall is GA in 32 Regions
- It can block DNS threats such as C2, malware, phishing, and newly registered domains
- No separate firewall or VPC changes needed
- Licenses are shared through AWS License Manager; association uses RAM, Route 53 Profiles, or Firewall Manager
This is for security teams who want PANW threat intelligence at the AWS DNS layer!
