More Info:

Ensure AWS registered domains have Hosted Zones

Risk Level

High

Address

Security

Compliance Standards

CBP

Triage and Remediation

Remediation

To remediate the misconfiguration of having no hosted zones for registered domains in AWS Route53 using the AWS console, follow these steps:

  1. Sign in to the AWS Management Console.
  2. Open the Route 53 console by navigating to the service.
  3. In the Route 53 dashboard, click on “Hosted zones” in the left-hand navigation pane.
  4. Click on the “Create hosted zone” button.
  5. In the “Domain name” field, enter the registered domain name for which you want to create a hosted zone.
  6. Optionally, you can add a comment to provide additional information about the hosted zone.
  7. Choose the appropriate configuration for the “Type” field. If you are unsure, leave it as the default option.
  8. Click on the “Create hosted zone” button to create the hosted zone.
  9. After the hosted zone is created, note down the four NS (Name Server) records displayed in the “Delegation Set” section. These NS records need to be added to the domain registrar’s DNS configuration.
  10. Go to the domain registrar’s website where you registered the domain and navigate to the DNS configuration settings.
  11. Add the four NS records obtained from the Route 53 console as custom DNS records in the registrar’s DNS configuration. This step delegates the DNS resolution for your domain to Route 53.
  12. Save the changes in the registrar’s DNS configuration.
  13. Return to the Route 53 console and verify that the hosted zone is now associated with the registered domain by checking the “Hosted zones” section.

By following these steps, you will have successfully remediated the misconfiguration of having no hosted zones for registered domains in AWS Route53.