Route 53 Should Be In Use
More Info:
AWS Route 53 Domain Name System (DNS) service should be used within your AWS account to manage DNS zones for your domains.Risk Level
MediumAddress
Reliability, SecurityCompliance Standards
AWSWAFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Route 53 should be in use” for AWS using the AWS console, follow these steps:
- Open the AWS Management Console and navigate to Route 53.
- Create a new hosted zone for your domain name if you haven’t already done so.
- Click on the “Create Record Set” button to create a new record set.
- In the “Name” field, enter the domain name that you want to associate with the record set.
- In the “Type” field, select the type of record that you want to create (e.g. A, CNAME, MX, etc.).
- In the “Value” field, enter the IP address or domain name that you want to associate with the record set.
- Click on the “Create” button to create the record set.
- Repeat steps 3-7 for any additional record sets that you want to create.
Using CLI
Using CLI
To remediate the misconfiguration “Route 53 should be in use” for AWS using AWS CLI, follow these steps:If the command returns a list of hosted zones, that means Route 53 is already enabled for your account. If it returns an error, Route 53 is not enabled.Replace “example.com” with your domain name and “1” with a unique reference number.Replace “example.com” with your domain name.
- Open the AWS CLI on your local machine.
- Check if the Route 53 service is enabled for your AWS account using the following command:
- If Route 53 is not enabled, enable it using the following command:
- Once Route 53 is enabled, you can start using it to manage your DNS records.
- Update your DNS records to point to the appropriate resources using the Route 53 console or CLI.
- Verify that your DNS records have been updated correctly using the following command:
- If the command returns the expected IP address, your DNS records have been updated successfully.
Using Python
Using Python
To remediate the misconfiguration “Route 53 Should Be In Use” for AWS using Python, follow these steps:Note: Replace “example.com” with your own domain name.
- Import the necessary libraries:
- Create a Route 53 hosted zone:
- Update the NS records for the domain with the Route 53 name servers:
- Update the domain registrar with the new NS records.
- Verify that the domain is now using Route 53 by checking the DNS records:
- Delete any existing DNS records that conflict with the new Route 53 hosted zone:
- Wait for the DNS changes to propagate, which can take up to 48 hours.