| Where Can I Use This? | What Do I Need? |
- Amazon Route 53 Resolver DNS Firewall
|
- Advanced DNS Security subscription (active)
- AWS Marketplace subscription management permissions
|
To stop subscription charges, you must remove all Palo Alto Networks rules from your DNS Firewall rule groups in addition to canceling your AWS Marketplace subscription. If you cancel the Marketplace subscription but leave Palo Alto Networks rules in your rule groups, charges may continue until you remove the rules.
Unsubscribing from Advanced DNS Security on Route 53 DNS Firewall is a two-step process. You first remove all Palo Alto Networks partner managed rules from every rule group that contains them, then cancel the subscription through the AWS Marketplace console.