detect and resolve DNS dangling / sub-domain takeover in GCP

[atul_shal]

Hi ,

What are native capabilities to detect and resolve DNS dangling / sub-domain takeover in GCP?

Thanks.

[grobledo]

There are no native capabilities. You have to be very cautious and remove all the NS records from the parent domain before deleting a managed zone.

But, a couple of projects exist for this purpose though, like the domain-protect-gcp.

[atul_shal]

Thanks for reply. Thought of understanding if there is something natively available or if in roadmap. Yeah I have found the domain-protect-gcp  lately.

Is there any plan to introduce a native capability just like other CSPs. 

Azure - https://docs.microsoft.com/en-us/azure/security/fundamentals/subdomain-takeover

AWS - https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/protection-from-dangling-dns.html

3rd party partner - https://unit42.paloaltonetworks.com/dangling-domains/

Thanks.