Description: 

Route 53 is a highly available and scalable Domain Name System (DNS) web service. You can use Route 53 to perform three main functions in any combination: domain registration, DNS routing, and health checking 


Rationale: 

We need Route 53 is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Route 53. CloudTrail captures all API calls for Route 53 as events, including calls from the Route 53 console and from code calls to the Route 53 APIs. If you create a trail, you can enable continuous delivery of CloudTrail events to an Amazon S3 bucket, including events for Route 53.


Remediation:

S3 bucket. By default, when you create a trail in the console, the trail applies to all regions. The trail logs events from all regions in the AWS partition and delivers the log files to the Amazon S3 bucket that you specify. Additionally, you can configure other AWS services to further analyze and act upon the event data collected in CloudTrail logs.

  • Overview for creating a trail
  • CloudTrail supported services and integrations
  • Configuring Amazon SNS notifications for CloudTrail
  • Receiving CloudTrail log files from multiple Regions and Receiving CloudTrail log files from multiple accounts

Receiving CloudTrail Log Files from Multiple Regions 

  1. Sign in to the AWS Management Console and open the CloudTrail console at https://console.aws.amazon.com/cloudtrail/
  2. Choose Trails, and then choose a trail name.
  3. Click the pencil icon next to Apply trail to all regions, and then choose Yes.
  4. Choose Save. The original trail is now replicated across all regions. CloudTrail delivers log files from all regions to the specified S3 bucket.

Note: When a new region launches in the aws partition, CloudTrail automatically creates a trail for you in the new region with the same settings as your original trail.


Resources: 

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/Welcome.html

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/receive-cloudtrail-log-files-from-multiple-regions.html