AWS Route53 documentation change
Summary
Added new section differentiating Foundation vs Advanced rule types with documentation links for custom/managed domain lists and advanced protections.
Security assessment
This adds documentation about security features (DGA protection, DNS tunneling detection) but doesn't indicate any specific vulnerability being patched. It enhances existing security documentation without addressing new threats.
Diff
diff --git a/Route53/latest/DeveloperGuide/resolver-dns-firewall-rule-group-adding.md b/Route53/latest/DeveloperGuide/resolver-dns-firewall-rule-group-adding.md index aa947a7ec..f1cf6b5cd 100644 --- a//Route53/latest/DeveloperGuide/resolver-dns-firewall-rule-group-adding.md +++ b//Route53/latest/DeveloperGuide/resolver-dns-firewall-rule-group-adding.md @@ -28,0 +29,16 @@ the Amazon VPC console under [https://console.aws.amazon.com/vpc/](https://conso +When you add rules to a rule group, first select the rule type: **Foundation** or **Advanced**. + + * **Foundation** – Select a rule protection to create rules with your own custom domain lists or AWS essential managed domain lists. + +For more information about custom domain lists, see [Managing your own domain lists](./resolver-dns-firewall-user-managed-domain-lists.html). + +For more information about managed domain lists, see [Managed Domain Lists](./resolver-dns-firewall-managed-domain-lists.html). + + * **Advanced** – Select one or more advanced managed domain lists (threat and content categories) or an advanced protection (Domain Generation Algorithms, Dictionary DGA, or DNS tunneling). + +For more information about advanced managed domain lists, see [Advanced Managed Domain Lists](./firewall-advanced-managed-domain-lists.html). + +For more information about advanced protections, see [Advanced DNS Protections](./firewall-advanced-protections.html). + + 5. With each rule, you can select one or more rule settings. +