AWS Route53 documentation change
Summary
Restructured content about DNS Firewall domain lists: changed title from 'DNS Firewall Foundational Rules' to 'Resolver DNS Firewall domain lists', reorganized content to better explain domain list concepts and usage, clarified the difference between managed and custom domain lists.
Security assessment
The changes are organizational improvements to documentation structure without introducing new security capabilities or addressing specific vulnerabilities. The content describes existing security features but doesn't fix or reveal any security flaws.
Diff
diff --git a/Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md b/Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md index a140a3400..92c38b4c5 100644 --- a//Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md +++ b//Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md @@ -7 +7 @@ -# DNS Firewall Foundational Rules +# Resolver DNS Firewall domain lists @@ -9 +9,5 @@ -DNS Firewall Foundational rules provide you with the essential DNS protections to help you get started with DNS Firewall, with two main types of foundational rules: +A _domain list_ is a reusable set of domain specifications that you use in a DNS Firewall rule, inside a rule group. When you associate a rule group with a VPC, DNS Firewall compares your DNS queries against the domain lists that are used in the rules. If it finds a match, it handles the DNS query according to the matching rule's action. For more information about rule groups and rules, see [DNS Firewall rule groups and rules](./resolver-dns-firewall-rule-groups.html). + +Domain lists allow you to separate your explicit domain specifications from the actions that you want to take on them. You can use a single domain list in multiple rules and any updates that you do to the domain list automatically affects all rules that use it. + +Domain lists fall into two main categories: @@ -13 +17 @@ DNS Firewall Foundational rules provide you with the essential DNS protections t - * Your own domain lists, which you create and maintain. You can use a single domain list in multiple rules and any updates that you do to the domain list automatically affect all rules that use it. + * Your own domain lists, which you create and maintain. @@ -18 +22 @@ DNS Firewall Foundational rules provide you with the essential DNS protections t -A _domain list_ is a reusable set of domain specifications that you use in a DNS Firewall rule, inside a rule group. When you associate a rule group with a VPC, DNS Firewall compares your DNS queries against the domain lists that are used in the rules. If it finds a match, it handles the DNS query according to the matching rule's action. For more information about rule groups and rules, see [DNS Firewall rule groups and rules](./resolver-dns-firewall-rule-groups.html). +This section describes the types of managed domain lists that are available to you and provides guidance for creating and managing your own domain lists, if you choose to do so.