Microsoft Azure → Amazon Web Services
AWS equivalent of DNS resolver policy (with threat intelligence)
The closest AWS equivalent of DNS resolver policy (with threat intelligence) is Route 53 Resolver DNS Firewall.
About DNS resolver policy (with threat intelligence)
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Filters and logs DNS queries at the virtual network level with allow, alert, and block rules on domain lists, plus an optional Microsoft-managed threat intelligence feed. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| DNS query filtering | Route 53 Resolver DNS Firewall | Direct match |
DNS & DNS-based routing(1)
DNS query filtering Direct match
Route 53 Resolver DNS Firewall maps to Azure DNS resolver policy, which can use a Microsoft-managed threat intelligence feed.
- Managed lists. DNS Firewall offers AWS-managed domain lists (for example, malware and botnet command-and-control domains). Azure offers a managed threat intelligence feed sourced from the Microsoft Security Response Center.
- Logging. Azure resolver policy can log queries to Log Analytics, storage, or Event Hubs. On AWS, query logging is a separate Resolver feature.