AMAZON ROUTE 53 RESOLVER DNS FIREWALL NOW SUPPORTS DOMAIN REDIRECTION

Summary from the TLDR InfoSec newsletter

AWS has added the ability to enable Route 53 Resolver DNS Firewall to automatically skip the inspection of domains included in a redirection chain. Prior to this feature, all CNAMEs in a domain redirection chain would have to be explicitly allow-listed.