Skip to main content

More Info:

All the domain names registered with AWS Route 53 or transferred to AWS Route 53 should be renewed 7 days before their validity period ends.

Risk Level

High

Address

Reliability, Security

Compliance Standards

  • APRA CPS 234 (Australia)
  • BSI C5 (Germany)
  • Brazil LGPD
  • CCPA / CPRA (California)
  • CIS Critical Security Controls v8
  • CMMC 2.0
  • CSA Cloud Controls Matrix v4
  • Cloudanix Best Practice
  • DPDPA
  • Digital Operational Resilience Act (EU)
  • ISO/IEC 27017
  • ISO/IEC 27018
  • ISO/IEC 27701
  • KSA PDPL
  • MAS Technology Risk Management (Singapore)
  • MITRE ATT&CK (Cloud)
  • NIS2 Directive
  • NIST SP 800-171
  • NYDFS 23 NYCRR 500
  • SWIFT Customer Security Controls Framework
  • Sarbanes-Oxley IT General Controls
  • UK NCSC Cyber Assessment Framework

Triage and Remediation

Remediation

Using Console

To remediate the Route 53 Domain Expiry in 7 Days issue in AWS using AWS console, follow the below steps:
  1. Log in to the AWS Management Console.
  2. Navigate to the Route 53 service.
  3. Click on the Registered Domains option in the left-hand menu.
  4. Select the domain that has an expiry date in 7 days.
  5. Click on the Renew button.
  6. Follow the on-screen instructions to complete the renewal process.
  7. Once the renewal is complete, verify that the expiry date has been extended to a later date.
Note: It is recommended to set up auto-renewal for your domain to avoid such issues in the future.

To remediate the Route 53 Domain Expiry in 7 days issue in AWS using AWS CLI, follow these steps:
  1. Open the AWS CLI on your local machine.
  2. Check the expiration date of the domain by running the following command:
  1. If the domain is set to expire in 7 days or less, you need to renew it. Run the following command to renew the domain:
Note: You can specify the number of years you want to renew the domain for by replacing <number-of-years-to-renew> with the desired value.
  1. After running the renew command, you will receive a confirmation message with the details of the renewal. Verify the details and confirm the renewal.
  2. Once the renewal is confirmed, the domain will be renewed for the specified number of years and the expiration date will be updated.
  3. Verify that the domain has been successfully renewed by running the get-domain-detail command again.
  4. You have successfully remediated the Route 53 Domain Expiry in 7 Days issue.
To remediate the Route 53 Domain Expiry in 7 days issue in AWS using Python, you can follow the below steps:
  1. Install the boto3 library using the following command:
  1. Create an AWS IAM user with Route53 read-only access and generate the access key and secret key.
  2. Create a Python script with the following code:
  1. Replace the YOUR_ACCESS_KEY and YOUR_SECRET_KEY placeholders with the actual access key and secret key.
  2. Run the script using the following command:
This script will update the domain registration for all the hosted zones that are expiring in 7 days or less and print the status of the update.

Additional Reading: