- Domain Protect standup tests are manual using a test AWS Organization, test Cloudflare account and test Slack workspace
- environment deployed using Terraform
- for major changes the following combinations of functionality should be checked end-to-end:
| Vulnerability | Detect | Takeover | Fixed |
|---|---|---|---|
| A record Elastic IP / EC2 | X | N/A | X |
| A record Global Accelerator | X | N/A | X |
| Alias CloudFront S3 | X | X | X |
| Alias Elastic Beanstalk | X | X | X |
| Alias S3 | X | X | X |
| CNAME Azure | X | N/A | X |
| CNAME CloudFront S3 | X | X | X |
| CNAME Elastic Beanstalk | X | X | X |
| CNAME Google | X | N/A | X |
| CNAME S3 | X | X | X |
| NS Subdomain | X | N/A | X |
| NS Domain | X | N/A | X |
| CloudFlare Azure | X | N/A | X |
| Cloudflare CNAME | X | X | X |
| Cloudflare Elastic Beanstalk | X | X | X |
| CloudFlare NS | X | N/A | X |
| Cloudflare S3 | X | X | X |
-
select links above to see details of DNS records to create for tests
-
test with optional features enabled and disabled in Terraform:
| Optional features | Enabled | Disabled |
|---|---|---|
| A records (IP addresses) | X | X |
| Takeover | X | X |
| Cloudflare | X | X |
| Bugcrowd | X | X |
- select links above for details on enabling or disabling optional features