https://www.cloudresearch.tech/adding-aws-dns-firewall/