route53
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [Standard Cloud Management Procedures]: The skill provides structured workflows for managing Amazon Route 53 DNS resources using the AWS CLI and MCP server. These operations are within the expected scope for cloud infrastructure administration.
- [Credential Management Best Practices]: The instructions consistently recommend using ephemeral, least-privilege credentials (such as IAM roles and AWS STS) over long-lived access keys, aligning with industry security standards.
- [Data Encryption and Privacy]: There is a strong emphasis on encrypting sensitive outputs at rest, including DNS query logs and health-check notifications, using AWS KMS and server-side encryption (SSE).
- [Secure Handling of Sensitive Tokens]: For Global Resolver configurations, the skill correctly identifies access tokens as sensitive secrets and directs the agent to store them in AWS Secrets Manager rather than in plaintext.
- [Network Access Control]: Procedures include requirements to scope security group rules for DNS endpoints to specific CIDR ranges rather than open internet access (0.0.0.0/0).
Audit Metadata