Advanced Managed Domain Lists

Advanced Managed Domain Lists contain domain names that are associated with malicious activity or other not-safe-for-work domains. Advanced Managed Domain Lists are categorized into Threat and Content categories, designed to help protect you from common web threats and also block query resolution to domains not safe-for-work.

As a best practice, before using a Managed Domain List in production, test it in a non-production environment, with the rule action set to Alert. Evaluate the rule using Amazon CloudWatch metrics combined with DNS Firewall logs. When you're satisfied that the rule does what you want, change the action setting as needed.

Available Advanced Managed Domain Lists

This section describes the Advanced Managed Domain Lists that are currently available for DNS Firewall under the Advanced rule tier. AWS provides the following Managed Domain Lists, classified by Threat or Content Type.