Ajinkya route53 prevention by ajinkya1986 · Pull Request #133 · Cloudanix/docs

ajinkya1986 · 2024-08-02T07:46:12Z

No description provided.

mpurusottamc · 2024-08-02T07:46:58Z

...udit/route53monitoring/rules/aws_cloudfront_distribution_cname_records_without_s3_origin.mdx

+for zone in hosted_zones['HostedZones']:
+    record_sets = route53_client.list_resource_record_sets(HostedZoneId=zone['Id'])
+    for record_set in record_sets['ResourceRecordSets']:
+        if record_set['Type'] == 'CNAME':


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:00Z

...monitoring/rules/aws_cloudfront_distribution_cname_records_without_s3_origin_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:02Z

docs/aws/audit/route53monitoring/rules/aws_elastic_beanstalk_alias_records_vulnerable.mdx

+for hosted_zone in response['HostedZones']:
+    record_sets = route53_client.list_resource_record_sets(HostedZoneId=hosted_zone['Id'])
+
+    for record_set in record_sets['ResourceRecordSets']:


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:04Z

...audit/route53monitoring/rules/aws_elastic_beanstalk_alias_records_vulnerable_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:06Z

docs/aws/audit/route53monitoring/rules/aws_s3_alias_records_vulnerable.mdx

+4. This script will print out the names of all Alias records that are pointing to S3 buckets. These could potentially be vulnerable if the S3 buckets are misconfigured. You should further investigate these S3 buckets to ensure they are properly secured.
+</Accordion>
+
+</AccordionGroup>


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:08Z

docs/aws/audit/route53monitoring/rules/aws_s3_alias_records_vulnerable_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='your_access_key',
+    aws_secret_access_key='your_secret_key',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:09Z

docs/aws/audit/route53monitoring/rules/config_enabled.mdx

+To ensure that AWS Config is enabled, you can describe the configuration recorder and check its status.
+```python
+# Describe the configuration recorder
+response = config_client.describe_configuration_recorders()


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:11Z

docs/aws/audit/route53monitoring/rules/config_enabled_remediation.mdx

+# Create a session using your AWS credentials
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:13Z

docs/aws/audit/route53monitoring/rules/config_global_resources.mdx

+4. Check the 'recordingGroup' field in the response. If 'includeGlobalResourceTypes' is set to False, then global resources are not included in AWS Config:
+
+```python
+if not response['ConfigurationRecordersStatus'][0]['recordingGroup']['includeGlobalResourceTypes']:


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:15Z

docs/aws/audit/route53monitoring/rules/config_global_resources_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:17Z

docs/aws/audit/route53monitoring/rules/domain_auto_renew.mdx

+for hosted_zone in response['HostedZones']:
+    hosted_zone_id = hosted_zone['Id']
+    domain_list = route53_client.list_domains(HostedZoneId=hosted_zone_id)
+


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:18Z

docs/aws/audit/route53monitoring/rules/domain_auto_renew_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:20Z

docs/aws/audit/route53monitoring/rules/domain_expired.mdx

+
+3. **Check Domain Expiry:**
+   - Use a WHOIS lookup to check the expiration date of each domain. You can use a third-party library like `whois` for this purpose.
+


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:22Z

docs/aws/audit/route53monitoring/rules/domain_expired_remediation.mdx

+   # Initialize a session using Amazon Route 53
+   session = boto3.Session(
+       aws_access_key_id='YOUR_ACCESS_KEY',
+       aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:24Z

docs/aws/audit/route53monitoring/rules/domain_expiry_30_days.mdx

+current_date_plus_30 = datetime.now() + timedelta(days=30)
+
+# Check if the domain is expiring in the next 30 days
+if expiry_date <= current_date_plus_30:


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-08-02T07:47:25Z

docs/aws/audit/route53monitoring/rules/domain_expiry_30_days_remediation.mdx

+from datetime import datetime, timedelta
+
+# Initialize the Route53 client
+route53 = boto3.client('route53', aws_access_key_id='YOUR_ACCESS_KEY', aws_secret_access_key='YOUR_SECRET_KEY')


Secret: Secret Keyword

Click here for more details

ajinkyajawalkar added 2 commits May 17, 2024 18:13

Added cause for route53

58fb051

Added prevention for route53

24ed2a0

ajinkya1986 requested a review from mpurusottamc August 2, 2024 07:46

mpurusottamc reviewed Aug 2, 2024

View reviewed changes


		3. Check Domain Expiry:
		- Use a WHOIS lookup to check the expiration date of each domain. You can use a third-party library like `whois` for this purpose.

Conversation

ajinkya1986 commented Aug 2, 2024

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants