Route 53 Domains Should Be Locked
More Info:
AWS Route 53 registered domains should be locked to prevent any unauthorized transfers to another domain name registrar.Risk Level
LowAddress
SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
Sure, here are the steps to remediate the misconfiguration of unlocked Route 53 domains in AWS:
- Open the AWS Management Console and go to the Route 53 service.
- In the left navigation pane, click on the Registered domains option.
- Select the domain that you want to lock.
- In the domain details page, click on the “Add/Edit Tags” button.
- In the “Add/Edit Tags” dialog box, click on the “Add tag” button.
- In the “Key” field, enter “LockDomain” and in the “Value” field, enter “True”.
- Click on the “Save changes” button to save the tag.
- After adding the tag, click on the “Lock domain” button to lock the domain.
- In the “Lock domain” dialog box, review the information and click on the “Lock domain” button to confirm.
- Once the domain is locked, you will see the “Domain lock enabled” message on the domain details page.
Using CLI
Using CLI
To remediate the misconfiguration of unlocked Route 53 domains in AWS using AWS CLI, follow these steps:If the output of this command shows that the domain is already locked, then no further action is needed for that domain.This command will update the nameservers for the domain to be locked.If the output of this command shows that the domain is now locked, then the remediation is complete.
- Open the AWS CLI on your local machine.
- Run the following command to get a list of your Route 53 domains:
- For each domain in the list, run the following command to check if it is locked:
- If the domain is not locked, run the following command to lock it:
- Finally, run the following command to verify that the domain is now locked:
Using Python
Using Python
To remediate the Route 53 Domains Should Be Locked misconfiguration in AWS using Python, follow these steps:This will enable domain locking for all Route 53 domains in your AWS account.
- Install the AWS SDK for Python (Boto3) using the following command:
- Create an AWS IAM user with the necessary permissions to manage Route 53 domains.
- Configure the AWS CLI with the IAM user credentials using the following command:
- Write a Python script to enable domain locking for all Route 53 domains using the following code:
- Save the script and run it using the following command: