aws.amazon.com/blogs/security/introducing-route-53-resolved-ip-validation-for-aws-network-firewall Introducing Route 53 Resolved IP Validation for AWS Network Firewall
AWS launched Route 53 Resolved IP Validation for Network Firewall, free of charge. Route 53 Resolver shares the IP addresses it returns per domain with the firewall, enabling domain-based filtering of non-web traffic like SFTP and blocking SNI manipulation without TLS inspection.
— via AWS Security Blog, Lawton Pittenger
