Posted On: Dec 16, 2022

Amazon Route 53 Resolver DNS Firewall has expanded its offering to include threat intelligence provided by Recorded Future, expanding the breadth of DNS threats you can block using the DNS Firewall’s AWS Managed Domain Lists. Recorded Future’s domain risk list contains over 100,000 domains, with dynamic risk scores, which is updated as new threats are identified and continuously added to DNS Firewall. Recorded Future’s Intelligence Cloud uses sandbox analysis, network traffic analysis, and command and control detection to identify potentially malicious domains from news sites, blogs, the dark web, TOR sites, underground forums, and other external sources.

Route 53 Resolver DNS Firewall is a managed security service that enables customers to filter DNS queries made for domains identified as low-reputation or that are known or suspected to be malicious, while allowing queries for trusted domains. Before today, the DNS Firewall offered two Managed Domain Lists: Malware Domains and Botnet Command and Control Domains. With this launch, we’ve added a new AWSManagedAggregateThreatList list, which contains domains associated with a range of DNS threat categories, such as malware, ransomware, botnet, spyware, and DNS tunneling, to help you address multiple types of threats at the same time.

You can get started with AWS Managed Domain Lists for DNS Firewall at no additional cost. To learn more about the feature, including region availability, visit the Route 53 documentation for Managed Domain Lists. To learn more about Route 53 Resolver DNS Firewall and pricing, visit the Route 53 website and documentation.