AWS Network Firewall Gets Smarter Domain Filtering Across All Protocols

AWS Network Firewall now validates that destination IPs were actually resolved through your Route 53 VPC Resolver, letting you enforce domain-based security rules on SFTP, SSH, and other protocols—not just HTTP/HTTPS. This closes the gap where clients could bypass your domain rules, and it's available in all AWS commercial regions at no extra cost.