AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-03-10 · Documentation medium

File: cli/latest/reference/route53globalresolver/update-firewall-rule.md

Summary

Updated CLI version to 2.34.5, added region warning, expanded regex, added DICTIONARY_DGA rule type.

Security assessment

DICTIONARY_DGA addition documents a new security feature for advanced threat detection. Regex changes lack explicit security justification.

Diff

diff --git a/cli/latest/reference/route53globalresolver/update-firewall-rule.md b/cli/latest/reference/route53globalresolver/update-firewall-rule.md
index ea02dc251..c7025862f 100644
--- a//cli/latest/reference/route53globalresolver/update-firewall-rule.md
+++ b//cli/latest/reference/route53globalresolver/update-firewall-rule.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.4 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.5 Command Reference](../../index.html) »
@@ -60,0 +61,4 @@ Updates the configuration of a DNS firewall rule.
+### Warning
+
+Route 53 Global Resolver is a global service that supports resolvers in multiple Amazon Web Services Regions but you must specify the US East (Ohio) Region to create, update, or otherwise work with Route 53 Global Resolver resources. That is, for example, specify `--region us-east-2` on Amazon Web Services CLI commands.
+
@@ -134 +138 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/route5
->   * pattern: `\*?[-a-zA-Z0-9.]+`
+>   * pattern: `\*?[a-zA-Z0-9!"#$%&'()*+,./:;<=>?@\[\\\]^_`{|}~-]+`
@@ -197 +201 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/route5
-> The type of the DNS Firewall Advanced rule. Valid values are DGA and DNS_TUNNELING.
+> The type of the DNS Firewall Advanced rule. Valid values are DGA, DNS_TUNNELING, and DICTIONARY_DGA.
@@ -202,0 +207 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/route5
+>   * `DICTIONARY_DGA`
@@ -384 +389 @@ blockOverrideDomain -> (string)
->   * pattern: `\*?[-a-zA-Z0-9.]+`
+>   * pattern: `\*?[a-zA-Z0-9!"#$%&'()*+,./:;<=>?@\[\\\]^_`{|}~-]+`
@@ -440 +445 @@ dnsAdvancedProtection -> (string)
-> The type of the DNS Firewall Advanced rule. Valid values are DGA and DNS_TUNNELING.
+> The type of the DNS Firewall Advanced rule. Valid values are DGA, DNS_TUNNELING, and DICTIONARY_DGA.
@@ -445,0 +451 @@ dnsAdvancedProtection -> (string)
+>   * `DICTIONARY_DGA`
@@ -546 +552 @@ updatedAt -> (timestamp)
-  * [AWS CLI 2.34.4 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.5 Command Reference](../../index.html) »