Google Cloud → AWS and Azure
AWS and Azure equivalents of DNS Armor
The closest AWS equivalent of Google Cloud DNS Armor is Route 53 Resolver DNS Firewall; on Azure, DNS resolver policy (with threat intelligence).
About DNS Armor
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Advanced DNS threat detection, powered by Infoblox, for queries from VPC networks. |
| Documentation | docs.cloud.google.com |
| Pricing | No separate pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| DNS query filtering | Route 53 Resolver DNS Firewall | Direct match | DNS resolver policy (with threat intelligence) |
DNS query filtering Direct match
Route 53 Resolver DNS Firewall maps to DNS Armor (threat detection powered by Infoblox) together with Cloud DNS response policies for custom block lists.
- DNS Armor detects and logs threats to Cloud Logging; blocking specific domains uses response policies.
- DNS Armor is enabled per project for all VPC networks, with optional exclusions.