
This article provides an automated solution for centrally managing domain lists across AWS Network Firewall and Route 53 Resolver DNS Firewall, enabling easier network security control and reducing operational complexity.


<div>
<p>
This article introduces a solution for centralizing domain list management across AWS Network Firewall and Route 53 Resolver DNS Firewall, helping customers enhance their network security.
</p>
<ul>
<li>Solution automates creating and updating domain lists for both firewall services</li>
<li>Uses AWS CloudFormation to deploy a complete infrastructure including S3 bucket, Lambda function, and firewall rule groups</li>
<li>Allows uploading a domain list text file to trigger automatic updates</li>
<li>Supports both allowlist and denylist configurations for domain filtering</li>
<li>Provides flexibility in managing network security across VPCs</li>
</ul>
<p>
The solution enables a "defense in depth" approach by providing centralized, automated domain list management across multiple AWS networking security services.
</p>
</div>


Related articles