Google Cloud → AWS and Azure
AWS and Azure equivalents of Cloud DNS response policies
The closest AWS equivalent of Google Cloud Cloud DNS response policies is Route 53 Resolver DNS Firewall; on Azure, DNS resolver policy (with threat intelligence).
About Cloud DNS response policies
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Override or block DNS answers for private resolution inside VPC networks. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| DNS query filtering | Route 53 Resolver DNS Firewall | Direct match | DNS resolver policy (with threat intelligence) |
DNS query filtering Direct match
Route 53 Resolver DNS Firewall maps to DNS Armor (threat detection powered by Infoblox) together with Cloud DNS response policies for custom block lists.
- DNS Armor detects and logs threats to Cloud Logging; blocking specific domains uses response policies.
- DNS Armor is enabled per project for all VPC networks, with optional exclusions.