Strengthening security with DNS Firewall
summary
Describes deploying Amazon Route 53 Resolver DNS Firewall with Firewall Manager to centrally apply managed domain lists (aggregate, malware, botnet C&C and a Recorded Futures feed) to VPCs, showing a live demo creating domain lists and rule groups, associating to a VPC, and blocking with NX domain or no data responses. Real-time rule changes take effect immediately, per-rule CloudWatch metrics and VPC DNS query logs provide visibility, and recommendations are crawl then walk then run, start in one VPC in alert mode, use DNS query and VPC flow logs, and integrate with Network Firewall.
AI-written summary · about
chapters (6)
- 0:00The challenge of DNS security
- 2:58Route 53 DNS firewall
- 6:06Architecture and management
- 10:14Demonstration
- 13:41Summary of benefits
- 14:58Implementation recommendations
related talks
39mOutbound security implementation with AWS Network Firewall & Route 53
52mFirewalls, and where to put them
13mConquering Hybrid DNS with Route 53 Resolver
44mElevando la postura de seguridad con AWS Network Firewall
34mUsing DNS as a layer of defense
29mWeb application protection on AWS
33mNetwork and application protection on AWS
02h 04mProtective DNS – Why It Matters and How to Deploy It On-prem