ministryofjustice / operations-engineering

This repository is home to the Operations Engineering's tools and utilities for managing, monitoring, and optimising software development processes at the Ministry of Justice. • This repository is defined and managed in Terraform
https://user-guide.operations-engineering.service.justice.gov.uk/
MIT License
11 stars 5 forks source link

Add Defensive DNS records #4579

Open AntonyBishop opened 1 week ago

AntonyBishop commented 1 week ago

User Need

As a Operations Engineering Team I want to add defensive DNS records to a domain so that the domain is protected from a variety of vulnerabilities and security risks.

Value

Protects domains and reduces risk of security vulnerabilities.

Functional Requirements (What):

The following hostedzones require DNS records to be added:

The DNS records are a standard set of records. Here is an example - https://github.com/ministryofjustice/dns/blob/main/hostedzones/court-service.net.yaml. The configuration will be the same with the exception being the NS records which we be as they are now i.e. you will need to add the CAA, MX and TXT records.

Acceptance Criteria: