CLOUD SECURITY & AUTOMATION
AWS-DNS-Sentinel
Tracking DNS changes with control.
A Python tool for comparing Route 53 records with a baseline and examining drift through a guarded remediation workflow.
01 / Problem
Problem
Unexpected DNS changes can be easy to miss. Remediation automation also needs to make it clear which records would change and why, while keeping actions controlled.
02 / My working focus
My working focus
Python automation comparing Route 53 records with a baseline. The focus is making differences visible and separating remediation from the dry-run preview and guard checks.
A personal project. The repository’s code, tests and documentation are the basis for this summary. AI-assisted development tools are also part of the workflow.
03 / Approach
Approach
- 01
Read Route 53 records through Boto3 and compare them with a baseline.
- 02
Inspect record differences and preview planned actions in a dry run.
- 03
Use safeguards to constrain the scope of remediation steps.
- 01Baseline
- 02DNS drift
- 03Dry run
A diagram of the approach, not a product screenshot.
04 / Technologies
Technologies
05 / Evidence & status
Evidence & status
The successful CI run reviewed on October 12, 2026 records 29 tests.
Alpha
CI records were reviewed on October 12, 2026. Counts reflect those runs; they are not an independent security audit.
06 / Limitations
Limitations
- The project is in alpha and requires thorough validation before production use.
- Detecting DNS drift is not proof of a domain takeover vulnerability.
- Changes to real cloud resources require appropriate authorization, review and scope.
CONTACT
Have a similar need?
Start by sharing the problem, your current system and what you want to achieve.
These buttons open your email app with a prepared subject and message. Nothing is sent until you send it.