Announcing DNS analytics and insights for Route 53 Global Resolver and DNS Firewall

Route 53 Global Resolver and DNS Firewall Updates

Route 53 Global Resolver and DNS Firewall now offer DNS analytics and insights via native Amazon CloudWatch integration. This enables network administrators and security teams to monitor DNS query patterns, assess DNS Firewall rule effectiveness, detect anomalies, and optimize DNS infrastructure performance.

With CloudWatch Metrics and Contributor Insights, users can search and analyze DNS query logs, create metric filters for specific patterns, and set automated alarms. A new Analytics tab in the Global Resolver and DNS Firewall consoles provides consolidated access to all analytics.

• Example: Create a metric filter for blocked DNS queries by VPC and set an alarm to trigger when more than 10 queries are blocked within an hour, facilitating rapid response to potential security threats.

What to do

• Opt in to CloudWatch Metrics for DNS analytics.
• Create metric filters and alarms for specific DNS query patterns.
• Utilize the new Analytics tab for streamlined access to DNS insights.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.