AWS Route53 documentation change
Summary
Renamed section to 'DNS Firewall Foundational Rules' and restructured content to emphasize foundational rules categories while maintaining domain list functionality explanations.
Security assessment
Changes are organizational/terminology updates (introducing 'Foundational Rules' concept) without addressing vulnerabilities or weaknesses. No evidence of security incident remediation.
Diff
diff --git a/Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md b/Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md index 92c38b4c5..a140a3400 100644 --- a//Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md +++ b//Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md @@ -7 +7 @@ -# Resolver DNS Firewall domain lists +# DNS Firewall Foundational Rules @@ -9,5 +9 @@ -A _domain list_ is a reusable set of domain specifications that you use in a DNS Firewall rule, inside a rule group. When you associate a rule group with a VPC, DNS Firewall compares your DNS queries against the domain lists that are used in the rules. If it finds a match, it handles the DNS query according to the matching rule's action. For more information about rule groups and rules, see [DNS Firewall rule groups and rules](./resolver-dns-firewall-rule-groups.html). - -Domain lists allow you to separate your explicit domain specifications from the actions that you want to take on them. You can use a single domain list in multiple rules and any updates that you do to the domain list automatically affects all rules that use it. - -Domain lists fall into two main categories: +DNS Firewall Foundational rules provide you with the essential DNS protections to help you get started with DNS Firewall, with two main types of foundational rules: @@ -17 +13 @@ Domain lists fall into two main categories: - * Your own domain lists, which you create and maintain. + * Your own domain lists, which you create and maintain. You can use a single domain list in multiple rules and any updates that you do to the domain list automatically affect all rules that use it. @@ -22 +18 @@ Domain lists fall into two main categories: -This section describes the types of managed domain lists that are available to you and provides guidance for creating and managing your own domain lists, if you choose to do so. +A _domain list_ is a reusable set of domain specifications that you use in a DNS Firewall rule, inside a rule group. When you associate a rule group with a VPC, DNS Firewall compares your DNS queries against the domain lists that are used in the rules. If it finds a match, it handles the DNS query according to the matching rule's action. For more information about rule groups and rules, see [DNS Firewall rule groups and rules](./resolver-dns-firewall-rule-groups.html).