AWS Route53 documentation change
Summary
Renamed topic to 'DNS Firewall Foundational Rules', restructured content to emphasize foundational rules, and reorganized information about domain list types and usage.
Security assessment
The changes are organizational and terminological (e.g., renaming to 'Foundational Rules'), with no evidence of addressing a security vulnerability. While DNS Firewall is a security feature, this update doesn't introduce new security information but restructures existing domain list documentation.
Diff
diff --git a/Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md b/Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md index 92c38b4c5..a140a3400 100644 --- a//Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md +++ b//Route53/latest/DeveloperGuide/resolver-dns-firewall-domain-lists.md @@ -7 +7 @@ -# Resolver DNS Firewall domain lists +# DNS Firewall Foundational Rules @@ -9,5 +9 @@ -A _domain list_ is a reusable set of domain specifications that you use in a DNS Firewall rule, inside a rule group. When you associate a rule group with a VPC, DNS Firewall compares your DNS queries against the domain lists that are used in the rules. If it finds a match, it handles the DNS query according to the matching rule's action. For more information about rule groups and rules, see [DNS Firewall rule groups and rules](./resolver-dns-firewall-rule-groups.html). - -Domain lists allow you to separate your explicit domain specifications from the actions that you want to take on them. You can use a single domain list in multiple rules and any updates that you do to the domain list automatically affects all rules that use it. - -Domain lists fall into two main categories: +DNS Firewall Foundational rules provide you with the essential DNS protections to help you get started with DNS Firewall, with two main types of foundational rules: @@ -17 +13 @@ Domain lists fall into two main categories: - * Your own domain lists, which you create and maintain. + * Your own domain lists, which you create and maintain. You can use a single domain list in multiple rules and any updates that you do to the domain list automatically affect all rules that use it. @@ -22 +18 @@ Domain lists fall into two main categories: -This section describes the types of managed domain lists that are available to you and provides guidance for creating and managing your own domain lists, if you choose to do so. +A _domain list_ is a reusable set of domain specifications that you use in a DNS Firewall rule, inside a rule group. When you associate a rule group with a VPC, DNS Firewall compares your DNS queries against the domain lists that are used in the rules. If it finds a match, it handles the DNS query according to the matching rule's action. For more information about rule groups and rules, see [DNS Firewall rule groups and rules](./resolver-dns-firewall-rule-groups.html).