Centralizing Domain List Management for AWS Network Firewall and Route 53 Resolver DNS Firewall

This article introduces a solution for centralizing domain list management across AWS Network Firewall and Route 53 Resolver DNS Firewall, helping customers enhance their network security.

• Solution automates creating and updating domain lists for both firewall services
• Uses AWS CloudFormation to deploy a complete infrastructure including S3 bucket, Lambda function, and firewall rule groups
• Allows uploading a domain list text file to trigger automatic updates
• Supports both allowlist and denylist configurations for domain filtering
• Provides flexibility in managing network security across VPCs

The solution enables a "defense in depth" approach by providing centralized, automated domain list management across multiple AWS networking security services.