All news with #route 53 tag

Amazon Route 53 Global Resolver: Secure Anycast DNS Preview

🌐Amazon announced the preview of Amazon Route 53 Global Resolver, an internet-reachable DNS resolver that offers secure, anycast-based resolution for authorized clients worldwide. It supports split DNS for public domains and Route 53 private hosted zones and integrates DNS Firewall rules to block threat categories, malicious content, and advanced DNS attacks while logging queries centrally. Global Resolver provides high availability via selection of two or more regions for anycast resolution with automatic failover, and AWS will rename the existing Route 53 Resolver to Route 53 VPC Resolver to clarify the difference.

Amazon Route 53 DNS API Endpoint Adds IPv6 Dual-Stack

🌐 Amazon Route 53 now exposes a dual-stack API endpoint at route53.global.api.aws, allowing clients to connect over IPv6, IPv4, or dual-stack. The existing IPv4-only endpoint remains available for backward compatibility. IPv6 support is available in all Commercial Regions at no additional cost and can be enabled via the AWS CLI or Management Console. This reduces IPv4 translation complexity and helps organizations meet IPv6 compliance.

Amazon Route 53 Adds AWS PrivateLink for API Access

🔒 Amazon Route 53 now supports AWS PrivateLink for the route53.amazonaws.com API, enabling private, regional connectivity from VPCs to the Route 53 API without traversing the public internet. This allows workloads to manage hosted zones, records, and health checks over the AWS backbone and simplifies networking by removing the need for complex private connectivity. Support is global except in AWS GovCloud and China, and cross-region interface VPC endpoints enable native multi-region access.

Route 53 Adds Protection Against Dictionary DGA Attacks

🛡️ Amazon Web Services has added Dictionary-based DGA detection to Route 53 Resolver DNS Firewall Advanced, enabling real-time monitoring and blocking of domain queries that use word-based DGA techniques designed to mimic legitimate names. Administrators can create DNS Firewall Advanced rule(s) targeting Dictionary DGA and add them to rule groups to enforce protections on VPCs directly or through AWS Firewall Manager, RAM, CloudFormation, or Route 53 Profiles. The capability is available in all AWS Regions, including AWS GovCloud (US). See the Route 53 documentation for setup and pricing details.

Amazon Route 53 Profiles Adds Resolver Query Logging

🛡️ AWS announced support for Resolver query logging configurations in Amazon Route 53 Profiles, allowing centralized management of Resolver query logging across multiple VPCs and AWS accounts. The enhancement eliminates the need to manually associate logging configurations with each VPC and helps produce consistent DNS query logs for compliance and auditing. The feature is available now in supported AWS Regions via the console or AWS CLI.

Amazon Route 53 Resolver Adds AWS PrivateLink Support

🔒 Amazon Route 53 Resolver now supports AWS PrivateLink, allowing customers to access and manage Resolver and its associated features privately over the Amazon network rather than the public internet. This private access covers Resolver endpoints, Route 53 Resolver DNS Firewall, Resolver Query Logging, and Resolver for AWS Outposts, with create, delete, edit and list operations handled via PrivateLink. Route 53 Resolver continues to respond recursively for public records, VPC-specific DNS names, and private hosted zones and remains available by default in all VPCs. The capability can be used in regions where Resolver and its features are offered, including AWS GovCloud (US) Regions.

Amazon Route 53 Resolver Adds AWS PrivateLink Support

🔒 Amazon Route 53 Resolver now supports AWS PrivateLink, enabling private management and access to Resolver and its features without traversing the public internet. Customers can use PrivateLink to reach Resolver endpoints, Route 53 Resolver DNS Firewall, Resolver Query Logging, and Resolver for AWS Outposts over the Amazon network. All operations — create, delete, edit, list — are supported via the private connection in supported regions, including AWS GovCloud.