AWS Cloud WAN simplifies network operations with Security Group Referencing and enhanced DNS support
AWS announces the general availability for Security Group (SG) Referencing and enhanced Domain Name System (DNS) support across Amazon Virtual Private Clouds (VPCs) connected by AWS Cloud WAN. With SG Referencing, customers can simplify management of Security Groups and gain a better security posture for cross-VPC connectivity via Cloud WAN. With enhanced DNS support, customers can enable the resolution of public DNS hostnames to private IP addresses for DNS queries from VPCs attached to Cloud WAN.
Customers can configure Security Groups by specifying a list of rules that allow network traffic based on criteria such as IP addresses, Prefix-Lists, Ports and SG references. Until now, customers were not able to use SG references for controlling traffic between VPCs connected via Cloud WAN. SG Referencing allows customers to specify other SGs as references, or matching criterion in inbound security rules to allow instance-to-instance traffic. With this capability, customers do not need to reconfigure security rules as applications scale up or down or if their IP addresses change. Rules with SG references also provide higher scale as a single rule can cover thousands of instances and prevents customers from over-running SG rule limits. Both SG Referencing and enhanced DNS support are regional features on Cloud WAN, meaning VPCs must be connected to the same Core network edge (CNE) for these features to work.
Security Group Referencing and enhanced DNS support on Cloud WAN are available in all AWS Regions where Cloud WAN is available. You can enable these features using the AWS Management Console, AWS Command Line Interface (CLI) and the AWS Software Development Kit (SDK). There is no additional charge for enabling SG Referencing or DNS support on Cloud WAN. For more information, see the AWS Cloud WAN documentation pages.