Amazon Web Services → Microsoft Azure
Azure equivalent of Route 53 Resolver DNS Firewall
Route 53 Resolver DNS Firewall maps to Azure DNS resolver policy, which can use a Microsoft-managed threat intelligence feed.
About Route 53 Resolver DNS Firewall
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Filters outbound DNS queries from VPCs with allow, block, and alert rules on domain lists, including AWS-managed threat lists. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| DNS query filtering | DNS resolver policy (with threat intelligence) | Direct match |
DNS & DNS-based routing(1)
DNS query filtering Direct match
Route 53 Resolver DNS Firewall maps to Azure DNS resolver policy, which can use a Microsoft-managed threat intelligence feed.
- Managed lists. DNS Firewall offers AWS-managed domain lists (for example, malware and botnet command-and-control domains). Azure offers a managed threat intelligence feed sourced from the Microsoft Security Response Center.
- Logging. Azure resolver policy can log queries to Log Analytics, storage, or Event Hubs. On AWS, query logging is a separate Resolver feature.