Amazon Route 53 Resolver endpoints now support DNS-over-HTTPS (DoH) with Server Name Indication (SNI) validation
News
The article announces the support for Server Name Indication (SNI) validation with DNS-over-HTTPS (DoH) on Amazon Route 53 Resolver endpoints. This allows specifying the target server hostname for DNS query requests from outbound endpoints to DoH servers that require SNI for TLS validation.
Specifically, the article covers:
- DoH on Route 53 Resolver endpoints encrypts DNS queries for improved privacy
- With SNI support, you can specify the hostname for TLS handshakes from endpoints to DoH servers
- SNI validation helps meet regulatory compliance like US CISA Protective DNS requirements
- The feature is available in all AWS Regions where Route 53 is available, including GovCloud
- You can get started using the AWS Console or Route 53 API
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Dec 11
2024
2024
Encrypt DNS queries using DNS-over-HTTPS (DoH) with Amazon Route 53 Resolver Endpoints
Oct 30
2024
2024
Amazon Route 53 announces HTTPS, SSHFP, SVCB, and TLSA DNS resource record support
Nov 15
2024
2024
Introducing Amazon Route 53 Resolver DNS Firewall Advanced
Jun 24
2025
2025
Amazon Route 53 Resolver endpoints now support DNS delegation for private hosted zones
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.