via aws.amazon.com => original post link
Starting today, you can configure your DNS Firewall to automatically trust all domains in a resolution chain (such as aCNAME, DNAME, or Alias chain).
Let’s walk through this in nontechnical terms for those unfamiliar with DNS.