Hi,
The configuration is correct, but It looks like doesn't work properly.
The policy on Umbrella is correct too.
I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.
Please, if this post was useful, leave your kudos and mark it as solved.