Soo saarista Koontada Cloud (AWS/GCP/Azure) ama Domain la hakiyay: Kordhinta degdega ah iyo Guuldarrooyinka¶

Toosinta kumanaan ogeysiisyada PagerDuty iyo wicitaanada macaamiisha sababtoo ah dhammaan shabakada wax soo saarka ee shirkaddaada, codsiga SaaS, API, iyo shirkadda @yourcompany.com iimaylka ayaa isku mar ka lumay intarneedka (maaha sababtoo ah cilad kood, laakiin sababtoo ah ** diiwanhayahaaga domain ayaa dhigay clientHold ka joojinta bartaada aasaasiga ah *** ama **AWS, Google Cloud (GCP), ama Microsoft Azure ayaa hakisay kiraystahaaga daruuraha wax soo saarka ***) waa xaalad hawleed degdeg ah. Maalin kasta, ganacsiyada faa'iidada leh waxay la kulmaan maqnaansho wadar ah sababtoo ah kaarka deynta shirkadeed ee shaqaalihii hore wuu dhacay, bot otomaatig ah oo ka-hortagga phishing-ka ayaa si been abuur ah u calaamadiyay PDF isticmaale-ku soo galiyay baaldi S3 ah, iimaylka diiwaangashan ee ICANN WHOIS aan la xaqiijin ayaa soo booday 15 maalmood ka dib, ama fure IAM ah oo soo fakaday ayaa kor u kacay bixiyaha iyada oo aan la fasaxin.

** Haddii goobtaada la hakiyey ama kaabayaasha daruuriga ah ay taageerto telemetry daryeelka caafimaadka nolosha-muhiimka ah, dirista degdega ah, ama nidaamka badbaadada utility dadweynaha, isla markaaba u dhaqaaji guuldarrooyinka dhismaha gudaha oo ogaysii adeegyada degdegga ah haddii badbaadada dadwaynaha ay saamayso (wac 911 gudaha Mareykanka iyo Kanada, 112 gudaha Midowga Yurub, 999 gudaha Boqortooyada Ingiriiska; arag dhammaan nambarada degdega ah.** Xiisadaha farsamada iyo shaqada ee is barbar socda, eeg qorshaha sii wadida ganacsiga iyo soo kabashada musiibada, ransomware ganacsiga iyo jebinta serverkaiyo barta iibka (POS) oo go'an iyo intarneedka oo go'an.

Hadda samee tan¶

1. ** Orod 10-ilbiriqsi whois iyo dig +trace Ka raadi terminaalka si aad u go'aamiso in Magacaaga Domain-ka (clientHold) ama Koontadaada Cloud Hosting (AWS/GCP/Azure) ayaa ah waxa dhab ahaantii hoos u dhacay Orod whois yourdomain.com | grep -i "status": haddii aad aragto clientHold, serverHold, redemptionPeriod, ama server-yada loo beddelay sedoparking.com / verification-hold.suspended-domain.com, Adeegayaashaada daruuraha ayaa wali si fiican u shaqaynaya, maqnaanshuhuna waa 100 boqolkiiba ** heerka Diiwaangelinta domain ***.
2. Ka dami isgaadhsiintaada dhacdada degdega ah @yourcompany.com isla markiiba iimayl u dir. Marka boggaga koowaad la hakiyo ama la dhigo clientHold, dhammaan imaylka MX ee soo socda @yourcompany.com bounces, oo ay ku jiraan iimaylada sirta ah dib-u-dejinta, 2FA koodhadhka xaqiijinta, iyo tigidhada jawaabaha ee diiwaan-hayahaaga domain iyo AWS Trust & Safety. Isla markiiba hubi in diiwaan-hayahaaga ama koontada xididka daruuraha ay ku xidhan tahay a @yourcompany.com ciwaanka iimaylka; haddii ay sidaas tahay, bixi koox ka baxsan band @gmail.com ama ciwaanka sare ee tigidh kasta oo taageero ah iyo wicitaan telefoon.
3. **Hadii domainkaagu shiran yahay clientHold sababtuna tahay iimaylka ICANN WHOIS ee aan la xaqiijin (Xeerka 15-Maalmood), dhagsii isku xirka xaqiijinta ama beddel Emailka diwaangeliyaha ee marinka diiwaan-hayaha. diiwangeliyaha si sharci ah ayaa lagu qasbay inuu dhigo goobta clientHold (parking DNS). Dib u soo celinta iyo gujinta isku xirka iimaylkaas ayaa meesha ka saaraya clientHold gudaha 15 ilaa 60 daqiiqo.
4. *Haddii boggaaga uu hakiyay Diiwaan-hayaha "Ku-xadgudub / Aaminaad & Badbaadada" eedeymaha phishing, malware, ama ku xad-gudubka calaamada ganacsiga, kaliya ha ka jawaabin safka xad-gudubka guud. Isla markiiba: (a) meesha ka saar ama ka saar URL gafka gaarka ah/kordhinta isticmaalaha ee lagu xusay cabashada, (b) soo gudbi Caddaynta Daawaynta Xadgudubkayourcompany.co ama yourcompany-app.com si macaamiisha iyo macaamiisha API ay u sii wadan karaan shaqada inta ay DNS faafinayaan.
5. ** Haddii AWS, GCP, ama Azure ay hakiyaan akoonkaaga daruuriga ah ee wax soo saarka ee Billing Failure, ku bixi baaqi hore ee kaadhka bangiga labaad AMA silig/ACH oo fur tigidh dib-u-kicinta Billing-Level. Baaldiyada S3 ayaa ku jira xaalad barafaysan 30 ilaa 90 maalmood ka hor inta aan si joogto ah loo tirtirin. Bixinta hadhaaga soo daahday ee Root Billing Console waxay kicisaa dib u hawlgelin toos ah 15 daqiiqo ilaa 4 saacadood.
6. ** Haddii AWS, GCP, ama Azure ay u hakiyaan akoonkaaga "Siyaasadda Isticmaalka La Aqbali karo (AUP) / Aaminaad & Badbaadada / Khatarta IAM Key" jebinta, beddel dhammaan furayaasha IAM isla markiiba oo ka jawaab aqoonsiga kiiska saxda ah ee Xarunta Taageerada Xididada. EC2/Matoorka Xisaabinta Tusaalooyinka kripto-macdanta, waxay awood u siinaysaa MFA isticmaalaha xididka, oo ku lifaaq Root-Sababta & Warbixinta Dib-u-habaynta kooban ee kiiska taageerada kalsoonida iyo badbaadada rasmiga ah.

Geedka go'aanka: ogaanshaha iyo xallinta aagga wax soo saarka ama joojinta daruuraha¶

flowchart TD
    Start["Wadarta wax soo saarka: Mareegta, API, & Iimayl-shirkadeed Hoos u dhacay"] --> Diag["Orod 10-labaad ee cilad-sheegashada Terminal: whois yourdomain.com AND qod +trace yourdomain.com"]

    Diag -->|"WHOIS waxay tusinaysaa macmiilkaHold,serverHold,PeriodPeriod,ama NS la dhigto"| DomainCrisis{"Maxaa sababay hakinta Diiwaan-hayaha Domain?"}

    DomainCrisis -->|"1. ICANN 15-maalmood WHOIS Xaqiijinta iimaylka Guuldarada"| ICANNFix["Soo gal Diiwaan-hayaha -> Dib ugu soo dir Iimayl xaqiijinta RAA (ama u cusboonaysii diiwaan-hayaha Gmail-ka shaqeeya) -> Guji xidhiidhka -> Ku noolow 15 ilaa 60 daqiiqo"]
    DomainCrisis -->|"2. Domain dhacay/Kaarka amaahda dib-u-cusboonaysiinta ee fashilantay"| RenewFix["Bixi khidmadda cusboonaysiinta (oo lagu daray $80-$250 Khidmada Furashada haddii 30+ maalmood ay dhaafeen) -> Soo celi server-yada asalka ah -> Dareemi DNS Dadweynaha"]
    DomainCrisis -->|"3. Xadgudubka Diiwaan Gelinta/Phishing/Hakinta Malware"| AbuseFix["1. Ka saar URL/faylka calanka leh ee ku jira server-ka 2. Fayl been-abuur ah / caddayn la saxay oo leh Aaminaadda Diiwaan-hayaha & Badbaadada 3. Hawl-geli Domain-ga Guul-darrida Labaad"]

    Diag -->|"Domain DNS wuxuu xalliyaa ganaax, laakiin Cloud IPs/Console Account soo celinta waa la hakiyay"| CloudCrisis{"Maxay AWS/GCP/Azure shaqada uga joojiyeen Kiraystaha daruuraha?"}

    CloudCrisis -->|"1. Ku guuldareysiga Biilasha (Kaarka Dhacay / Bank ACH Diid / Xaddidaad Xaddidan)"| CloudBill["1. Soo gal adigoo isticmaalaya Root User/Billing Admin 2. Ku dar credit card cusub ama kaarka kaydka oo dhagsii 'dib u tijaabi lacag bixinta'"]
    CloudCrisis -->|"2. Furaha IAM ee la jabiyay / Rogue Crypto-Mining Spend Spend"| CloudSec["1. Bedeli/ Tirtir furayaasha gelitaanka IAM ee soo daatay 2. Jooji tusaaleyaal aan fiicneyn & karti xididka MFA"]
    CloudCrisis -->|"3. Qaybta saddexaad ee Phishing / DMCA / AUP Xadgudubka Calanka S3 / VM"| CloudAUP["1. Go'doomi ama tirtir shayga S3 ee calanka leh / VM IP 2. U jawaab AWS/GCP Trust & Aqoonsiga Kiiska Badbaadada oo wata WAF/Soorar ilaalin"]

Wajiga 1: Baadhitaanka 3-daqiiqo ee baadhitaanka (miyuu yahay Diiwaanhayaha Domain, DNS, ama Cloud Provider?)¶

Marka codsigaaga wax soo saarku mugdi galo oo shaqaaluhu ku qayliyaan "wax walba waa hoos u dhaceen, xitaa iimaylkayaga," ha qiyaasin. Ka socodsii saddexdan amar goob kasta oo laptop ah (macOS, Linux, ama Windows WSL/PowerShell) si aad u qeexdo lakabka saxda ah ee kaa joojiyay.

1. Amarka 1: Hubi ICANN Provisioning Protocol (EPP) heerka koodka¶

Orod:

whois yourdomain.com | grep -E -i "Status|Name Server|Expiry"

Wajiga 2: Xallinta ka joojinta Diiwaan-hayaha Domain (clientHold / Xadgudub / ICANN Quful)¶

Haddii aad whois hubi muujinta clientHold ama server-yada la dhigto, raac jidka soo kabashada saxda ah ee hoose.

Raadraaca A: Qaadista ICANN WHOIS Xaqiijinta Iimayl Joojinta (15-daqiiqo hagaajin)¶

Sida hoos timaada ICANN 2013 RAA Whois Program. 1. Soo gal boggaaga koontaroolka diiwaan-hayaha. Calan guduudan oo dhalaalaya oo ku yaal xagga sare ee shaashadda ayaa ku qornaan doona: "Boggaan waa la hakiyey inta uu la sugayo xaqiijinta xiriirka ICANN Whois." 2. ** Dabin-qabasho-22: Haddii iimaylka diiwaan-hayaha ee faylka ku jira uu yaallo admin@yourdomain.com, ma heli kartid iimaylka xaqiijinta sababtoo ah yourdomain.com hadda waa la hakiyay. 3. Hagaajinta: Gudaha Diiwaan-geliyaha Xiriiriyaha Domain / WHOIS, u beddel ** ciwaanka iimaylka ee diiwaan-geliyaha** ciwaan dibadda ah oo shaqeynaya (sida @gmail.com ciwaanka aad maamusho), kaydi isbeddelka, dhagsii "dib u soo dir emaylka xaqiijinta," fur sanduuqa Gmail-ka, oo dhagsii xidhiidhka xaqiijinta. 4. API otomaatiga ah ee diiwaan-hayaha ayaa isla markiiba soo diraya EPP update amarka ka saarida clientHold laga bilaabo aagga xididka Verisign/Diiwaanka gudaha 5 ilaa 20 daqiiqo.

Raadraaca B: Qaadista Diiwaan-hayaha "Ku-xadgudubka / Phishing / Malware / AUP" Hakinta¶

Maanta, diiwaan-bixiyeyaasha waaweyn ee domain (Namecheap, GoDaddy, Tucows/Enom/OpenSRS, Porkbun, Cloudflare Registrar, Squarespace Domains) waxay iska diiwaan galiyaan quudinta sirta-khatarta ah ee tooska ah (Netcraft, PhishTank, Spamhaus, Google Safe Browsing, AbuseIPDB). Haddii hacker-ku uu wax u dhimo plugin WordPress ka ah subdomain-ka suuqgeynta ee la illoobay (promo.yourdomain.com), ama haddii isticmaale uu ku soo geliyo PDF gal been abuur ah baaldiga nuxurka isticmaale ee abka SaaS (cdn.yourdomain.com/uploads/invoice.pdfbot otomaatig ah ayaa u soo dirta Tier-1 Phishing Takedown Ogeysiiska diiwangeliyahaaga, iyo qandaraasle u hogaansanaanta xeebahaada ayaa dhigaya ** dhammaan xididka xididkaada (yourdomain.com)** ku clientHold.

Kordhinta tallaabo-tallaabo si aad u hesho clientHold lagu qaaday saacado halkii maalmo¶

1. Raadi Aqoonsiga Tigidhka Xadgudubka Saxda ah iyo URL Calansan:
2. Hubi sanduuqa iimaylka ee la xidhiidha koontadaada diiwaan-hayaha (iyo xidhiidhka WHOIS Abuse) iimaylka ka yimid abuse@, legal@, ama compliance@[registrar].com.
3. Raadi ** URL-ka saxda ah ama cinwaanka IP** ee lagu xusay warbixinta xadgudubka.
4. ** Si degdeg ah u hagaaji ama go'doom kheyraadka calamada leh:**
5. Xataa haddii ay cabashadu tahay mid been abuur ah (tusaale ahaan, bogga soo galitaanka ee shirkaddaada SSO) si been abuur ah ayaa loogu calaamadeeyay "Microsoft 365 phishing page" by AI scanner), ** si ku meel gaar ah u dami ama dhig liiska oggolaanshaha IP ee dariiqa gaarka ah ee calaamadeysan *** haddii ay suurtagal tahay, ama sawir sawirro muujinaya inuu yahay mid sharci ah oo shaqaale ah.
6. Haddii faylka la soo geliyo isticmaale ama subdomain la jabiyay uu si dhab ah xaasidnimo u yahay, ** tirtir faylka/koonteenarka isla markiiba**, laali koontada isticmaalaha xadgudubka ah, oo xidh jidka cidhifka Cloudflare/WAF.
7. ** U dir "Daawaynta Xadgudubka Fulinta & Kordhinta Kaabayaasha Muhiimka ah" Jawaabta:**
8. Si toos ah ugu jawaab tigidhka Xadgudubka diiwaan-hayaha (ilaalinta saxda ah [Ticket #...] Mawduuca sumad si uu u marin habaabiyo
9. Ku dar 4tan qodob oo caddaynaya jawaabtaada qoran:
   1. ** Xaqiijinta ka saarida degdega ah:** " URL la sheegay ([exact URL]) waxay ahayd raritaanka qolo saddexaad oo aan la ogalayn / hantida suuq-geyneed la jabiyay oo si joogto ah ayaa loo tirtiray [Timestamp UTC]. Hadda waxay soo celisaa HTTP 404 Not Found / 410 Gone"
   2. ** Waxa la Hirgaliyay Jidadka Ka Hortagga Nidaamka:** "Waxaan geynay shuruucdii Codsiga Shabakadda Firewall (WAF), waxaan joojinay gelinta faylasha dadwaynaha ee aan la hubin, waxaanan wareejinay dhammaan shahaadooyinka server-ka si looga hortago soo noqoshada."
   3. ** Ogeysiiska Saamaynta Ganacsi ee Aan Isku Beegnayn:** "Delaynta qaybta sare ee xididka yourdomain.com on clientHold ayaa hoos u dhigay kaabayaasha wax soo saarka iyo emailka shirkadaha [Number] macaamiisha/shaqaalaha ganacsiga ee sharciga ah."
   4. Codsiga ka saarida degdega ah clientHold: *"Fadlan ka saar EPP-ga clientHold status on yourdomain.com isla markiiba. Waxaan go'aansanay inaan uga jawaabno warbixinada xadgudubka mustaqbalka 2 saacadood gudahooda anagoo u baahnayn meel-u-joog ah.
10. Nadiifi "Negative Caching (NXDOMAIN)" TTL ee Xallinta DNS Dadweynaha Marka la qaado:
11. Isla markiiba diiwangeliyaha meesha ka saaro clientHold, domainkaaga ayaa ku soo noqday .com xididada xididka, ** laakiin ** Google Public DNS (8.8.8.8), Cloudflare DNS (1.1.1.1), iyo OpenDNS waxa laga yaabaa inay sii wado kaydinta dadka dhintay NXDOMAIN ama jawaabta dhigashada 15 ilaa 60 daqiiqo.
12. Isla markiiba booqo agabka kaydinta dareeraha shabakada ee bilaashka ah Google Public DNS Flush Cache (developers.google.com/speed/public-dns/cacheiyo Cloudflare 1.1.1.1 Nadiifinta Cache (one.one.one.one/purge-cache/), nooca yourdomain.com (iyo A, AAAA, NS, MX), oo dhagsii Flush Cache si isticmaalayaasha caalamiga ahi ay dib ugu xidhmaan 60 sekan gudahood.

Wajiga 3: Xallinta Joojinta Koontada Wax Soo Saarka ah (AWS, Google Cloud, Microsoft Azure)¶

Marka Adeegyada Shabakadda Amazon (AWS), Google Cloud Platform (GCP), ama Microsoft Azure ay hakiyaan akoonnada daruuraha ama mashruuca, habka soo kabashada waxay gebi ahaanba ku xiran tahay in laalitaanku uu ka dhashay Biil / Lacag-bixin la'aan oo liddi ku ah ** Kalsoonida & Badbaadada / Shahaadooyinka La Dhibay**.

Isbarbardhigga bixiyayaasha daruuraha ee wareegyada nololeed ee hakinta iyo daaqadaha dib u hawlgelinta¶

Hab-maamuuska Tafatiran ee 1: Ka Soo Kabashada Ka-Hakinta Biilasha daruuriga ah (Marka Kaadhku Hoos u Dhaco ama Siliggu Ku Dhagmo)¶

Waa maxay sababta shirkadaha sida fiican loo maalgeliyay ay ugu dhacaan hakinta biilasha? 1. Kaarka deynta ee faylka ku jira wuxuu ku dhuftey qiimaha ugu sarreeya ** (tusaale, $25,000 xadka) sababta oo ah dhammaadka bisha sare u kaca ama cusboonaysiinta tusaalaha kaydsan ee sannadlaha ah; 2. Kaarka waxaa lahaa ** aasaasihii tagay ama VP of Engineering** kaas oo kaarkiisa ay joojisay HR/Maaliyadda; ama 3. Nidaamka khiyaanada tooska ah ee bangiga ayaa xannibay qarashka weyn ee AWS/GCP sida "waxqabad kaadh shaki leh oo aan hadda jirin."

Tillaabo-tallaabo 30-daqiiqo ah ee liiska hubinta ee biilasha¶

1. ** Soo gal si gaar ah adigoo ah Mulkiilaha Koontada xididka ama maamulaha biilasha:** Doorarka Horumariyaha/Maamulka IAM ee caadiga ah inta badan ma geli karaan shaashadda Dib-u-hawlgelinta Biilasha ee xiran marka koontada la hakiyo. Adeegso iimaylka Isticmaalaha xididka AWS** (ama GCP Billing Account Administrator/Maamulaha Xisaabaadka Azure).
2. Ha ku dhufan "Dib-u-isku day" isla kaadhka la diiday ka hor inta aanad wicin bangiga: Haddii mishiinka khiyaanada bangigaagu xannibo $14,000 AWS lacag ah, gujinta "dib u tijaabi" saddex jeer gudaha AWS console waxay dhalin doontaa saddex diidmo oo kale oo adag waxayna xidhi doontaa habka lacag bixinta. Ama:
3. Geli ** kaadhka deynta guud ee shirkada ama kaarka deynta *** (Labada kaarar u kala qaybiya lacag bixinta haddii konsolka bixiyaha uu ogolaado lacag bixinta qayb ahaan); AMA
4. Wac lambarka taleefoonka ee ku yaal dhabarka kaadhka shirkada marka hore, ha furo miiska ganacsi ee bangiga ee baayacmushtarka. Amazon Web Services / Google Cloud / Microsoft Azure oo kor u qaad xadka hal-ganacsi muddo 24 saacadood ah, iyo kaliya markaas dhagsii Dib-u-isku day Bixinta gudaha konsolka daruuraha.
5. Haddii Shirkaddaadu ay ku Bixiso Silig La Soo Dalacday/ACH (Akoonka Shabakadda-30 ee Ganacsiga) iyo qaansheegtu ay tagtay 60+ Maalmood oo la soo dhaafay:
6. U dir Fedwire isla-maalin isku mid ah (ma aha 3-maalin ACH) si aad u hesho hadhaaga dhameestiran, soo deji bangiga rasmiga ah Rsiidhka Xaqiijinta Wire-ka ee ka kooban IMAD/OMAD Nambarka Tixraaca Federaalka, oo si toos ah ugu lifaaq PDF-kaas degdegga ah Biilka & Kiis Taageero Xisaabeed codsanaya buug degdeg ah ** Balanqaad-to-Pay-/* waaxdu waxay heshiisiinaysaa siliga.
7. ** Xaqiiji Gobolka Tusaalaha Dib-u-hawlgelinta Kadib ("Dabinkii la joojiyay VM & Dhaqdhaqaaqa IP"):**
8. Marka AWS, GCP, ama Azure ay dib u hawlgeliyaan akoonkii la hakiyey, ** qaar baa joojiyey mishiinnada farsamada gacanta (gaar ahaan Azure Deallocated VMs iyo GCP Compute Engine Tusaalaha) si toos ah uma kici karaan keligood, iyo mishiin kasta oo aan isticmaalin static ** IP Elastic / Reserved Static IP *** waxay la iman doontaa ** ciwaanka IP-ga oo cusub.
9. Isla markiiba iska hubi gobol kasta oo ku jira EC2 / Matoorka Xisaabinta / Azure VMs, billow tusaale kasta oo la joojiyo, xaqiiji Dheelayaashaada Elastic Load Balancers iyo database-yada RDS Available, oo hubi in DNS-kaaga A diiwaanadu wali waa ku habboon yihiin IP-yadaada dadweynaha ee firfircoon.

Hab-maamuuska Faahfaahinta 2: Ka Soo Kabashada Badbaado Darruur ah / Furaha La Khalkhaliyay / Kalsoonida & Joojinta Badbaadada¶

Haddii horumariye si lama filaan ah u sameeyo an .env fayl ka kooban AWS_ACCESS_KEY_ID iyo AWS_SECRET_ACCESS_KEY (ama Koontada Adeegga GCP JSON furaha) ee kaydka dadweynaha ee GitHub, bots-ka hacker-ka ah ayaa ku xoqaya furaha gudaha 1.5 ilbiriqsi oo ay ku rogaan 200 oo tusaaleyaal GPU ahp4d.24xlarge) gobolada sida ap-east-1 ama sa-east-1 si aan u soo saarno cryptocurrency ama bilaabida weerarrada DDoS. Saacado gudahood, AWS/GCP Trust & Badbaadadu waxay ogaataa cillada oo waxay gelisaa ** Karantiil Amni ilaalineed / Ka-joojin Koontada **

Sida loo helo AWS / GCP / Azure Trust & Safety si kor loogu qaado karantiil ammaan 4 saacadood ka yar¶

Kooxaha amniga daruuraha waxay raacaan liis hubineed adag: waxay ** diidi doonaan *** inay dib u hawlgeliyaan akoonkaaga ilaa aad ka caddayso in dib u hawlgelintu aanay isla markiiba dib u bilaabi doonin weerarka. 1. ** Baadhitaan Gobol kasta (oo ay ku jiraan Naafada/Gobollada ka-baxay) oo Tirtir Xubinta Tanaasulka:** - Gal IAM Console: ** Demi oo Tirtir ** Furaha Helitaanka IAM ee la jabiyay (iyo isticmaaleyaasha IAM-ka gadaal ee aan la aqoon, doorarka, ama Bixiyaasha Aqoonsiga weeraryahanku waxa uu u abuuray in uu joogteeyo). - Ka yeel Hardware ama Virtual MFA Isticmaalaha xididka iyo dhammaan isticmaalayaasha IAM. - Fur ** AWS Resource Explorer / Tag Editor / EC2 Global View** (hubinta dhammaan 30+ gobol oo caalami ah, ma aha oo kaliya us-east-1iyo ** Jooji ** dhammaan kiisaska EC2 ee aan la ogalayn, Kooxaha Is-beeridda Gawaarida, Kutlada EKS, iyo Lambda ee uu miiqiyay qofka weerarka geystay. 2. ** Gudbi 4-Qayb Warbixinta Dib-u-habaynta Amniga ee Kiiska Taageerada Rasmiga ah:** - Ku fur Xarunta Taageerada ku dhex jirta Cloud Console oo uga jawaab furan Akoonka Amniga / Kalsoonida & Kiiska Badbaadada - 1. Sababta xididka: "IAM User [Name] furaha AKIA... ayaa si badheedh ah loogu kashifay kayd kood oo ku yaal [Time]" - 2. Kala noqoshada aqoonsiga: "furaha gelitaanka AKIA... iyo isticmaalaha IAM-ga xun [Name] si joogto ah ayaa loo tirtiray, oo Root/IAM MFA waa la dhaqan galiyay." - 3. Nadiifinta Khayraadka Gobolada oo dhan: "Dhammaan xaaladaha EC2 ee aan la fasaxin ee gobolada [List Regions] waa la joojiyay." - 4. Codsiga ka-hortagga Wax-soo-saarka degdega ah + hagaajinta biilasha furaha ee la carqaladeeyay: [Your Region] u adeegto [Number] macaamiisha oo hadda waa offline. Fadlan isla markaaba ka qaad ganaaxa koontada, waxaanan codsaneynaa hagaajinta biilasha ixtiraam leh $[Amount] eedeeymaha xisaabinta been abuurka ah ee la galay intii lagu jiray faragelinta aan la ogolayn." - (Talo: AWS iyo GCP waxay si joogta ah u bixiyaan hal mar 100% ka dhaafid credit tobanaan kun oo doolar oo ah khidmadaha crypto-macdanta been abuurka ah markaad dhamaystirto liiskooda hubinta ee dib u habeynta akoontada la jabsaday.)

Wajiga 4: Dhaqdhaqaaqa degdega ah "Break-Glass" ee domainka labaad ee guul daraystay 30 daqiiqo gudahood¶

Haddii goobtaada aasaasiga ah (yourcompany.com) waxa lagu xidhay diiwaanka hoostiisa serverHold ama khilaaf sharci oo adag oo diiwaan-hayaha ah kaas oo qaadan doona 48 ilaa 72 saacadood si loo xaliyo, ha fadhiisan offline saddex maalmood. Tignoolajiyad kasta iyo meherad kasta oo e-ganacsi ah waxay soo celin kartaa gelitaanka macaamiisha iyo iimaylka shaqaalaha 30 ilaa 45 daqiiqo gudahooda iyadoo la adeegsanayo Domain Secondary Mirror Domainyourcompany.co, yourcompany.io, ama getyourcompany.com).

30-daqiiqo Liis Hubinta Xubinta Qaybta Degdegga ah ee Sare¶

1. Is diwaangeli (ama hawl-geli) Domain-kaaga Sare ee Diiwaan-Gare Gaar ah: Weligaa ha iska diwaangelin domainkaaga kaydka isla diiwaan-hayaha oo hadda hakiyay boggaga aasaasiga ah. Is diwaangeli yourcompany-app.com ama yourcompany.co diiwangeliyaha madax banaan (sida Cloudflare Registrar, Porkbun, ama AWS Route 53) adoo isticmaalaya kaar shirkad gaar ah iyo iimaylka la xaqiijiyay.
2. ** Soo rar faylkaaga Aagga Cloudflare ama Jidka 53:** Dhoofinta (ama nuqul) DNS kaaga A, AAAA, CNAMEiyo TXT diiwaanada laga soo bilaabo guddida DNS-kaaga aasaasiga ah oo geli faylka aagga domainka cusub sidaas darteed app.yourcompany.co iyo api.yourcompany.co Tilmaan isku dheellitirka culeyska wax-soo-saarkaaga.
3. ** Cusbooneysii dheelitiriyahaaga culeyska / Shahaadada TLS ee soo galeysa (SAN Ku-darka):** Ku dar *.yourcompany.co iyo yourcompany.co sida ** Mawduuca Magacyada Beddelka ah (SANs)** ee ku yaal AWS ACM kaaga / Aynu Encrypt / Cloudflare cidhifka SSL shahaado, oo ku dar magaca cusub ee martigeliyaha Nginx/Ergeyga/ALB xeerar-madaxeed-madaxeed iyo liisaska CORS.
4. Ku dar Domain-ka Labaad sidii Domain Alias La Xaqiijiyay ee Google Workspace ama Microsoft 365:
5. Gudaha Google Workspace Admin Console (admin.google.com -> Koontada -> Domains -> Maamul Domains -> Kudar Magaca Domain) ama Microsoft 365 Admin Center (Settings -> Domains -> Add Domain), ku dar yourcompany.co oo ku dheji xaqiijinta TXT iyo MX diiwaanada galka domainka cusub ee DNS
6. 15 daqiiqo gudahood, shaqaale kasta wuxuu si toos ah ugu helayaa iimaylka firstname@yourcompany.co gudaha sanduuqa boostada ee jira oo leh guuritaanka eber.

Marxaladda 5: Adkeynta xayndaabkaaga iyo xisaabaadka daruuraha si aanay tani mar dambe u dhicin¶

Marka wax soo saarku dib ugu soo noqdaan khadka, ku dhaqan shantan ilaalin dhisme gudahood 48 saacadood:

1. Xooji Qufulka Diiwaangelinta (serverDeleteProhibited / serverUpdateProhibited / serverTransferProhibited: Goobaha wax soo saarka ee muhiimka ah, u cusboonaysii domainkaaga ** Diiwaangelinta Lock ** (oo ay bixiso Cloudflare, MarkMonitor, CSC Domains Corporate, iyo diiwaangeliyeyaasha waaweyn), kaas oo u baahan xaqiijinta qarsoodiga-qofka badan ee ka baxsan kooxda ka hor inta aan la beddelin magac-bixiyeyaasha ama heerarka domainka.
2. Weligaa ha martigelin Content User-Generated (UGC) ama Xidhiidhada Suuqgeynta ee Wax soo saarkaaga Apex Domain: Had iyo jeer u adeeg gelinta isticmaalaha, PDF-yada macmiilka, iyo xidhiidhinta iimaylka dibadda ah ee ka socda ** domain gabi ahaanba gooni ah oo sanduuq leh** (tusaale ahaan, yourcompany-usercontent.com halkii yourcompany.com). Habkaas, haddii isticmaaluhu soo geliyo fayl xaasidnimo ah oo kicinaya bot xadgudubka diiwangeliyaha otomaatiga ah, kaliya bogga macluumaadka la tuuri karo ayaa la calaamadeeyay, waligaa abkaaga wax soo saarka ee asaasiga ah ama iimaylka shirkadda.
3. Habee Hababka Lacag-bixinta Labada ah + ACH kaabta + Digniinaha Biilasha daruuriga ah: Ku dar ugu yaraan ** laba kaadh oo deyn ah oo madax banaan oo ka kala socda laba bangi oo kala duwan** oo lagu daray ACH xisaab bangi oo toos ah gudaha AWS, GCP, Azure, iyo diiwaan hayahaaga, oo awood u yeelo ** AWS Kharashka Kharashka Dareenka Anomaly /* Miisaaniyadda GCP maalin kasta in ka badan 25 boqolkiiba.
4. ** Deji Diiwaan-hayaha Door-ku-saleysan & Iimayl Xididka Daruuraha Domain-ka Sare ee Madax-bannaan:** Waligaa ha dhigin admin@yourcompany.com sida email-ka soo kabashada ee yourcompany.com. Adeegso sanduuqa boostada ee u go'ay, hardware-YubiKey-ku jira goob maamul oo madax banaan ama kirayste aqoonsi ganacsi si aad had iyo jeer u hesho iimaylo xaqiijin iyo taageero xataa marka goobtaada aasaasiga ahi hoos u dhacdo.

Lambarada degdega ah ee gobolka iyo borotokoolka wakaalada¶

Su'aalaha soo noqnoqda¶

Haddii AWS, Google Cloud, ama Azure ay hakiyaan akoonteenna lacag-la'aan ama xad-gudub, miyaa xog-ururintayada iyo baaldiyada S3 la tirtiray isla markiiba?¶

Maya. Labada AWS, GCP, iyo Microsoft Azure midkoodna ma tirtiro xogtaada maalinta 1aad ee joojinta. Marka koontada la hakiyo, mashiinnada farsamada gacanta waa la joojinayaa waxaana la xannibay gelitaanka dadweynaha ee baaldiyadaada kaydinta iyo xisaabiyeyaasha culeyska waa la xannibay, ** laakiin boqolkiiba 100 ee mugga EBS-gaaga, xog-ururinta RDS, walxaha S3, iyo sawir-qaadista ayaa ku sii jira kaydinta qabow ugu yaraan 30 maalmood** (iyo AWS, xisaabaadka waa la soo kaban karaa inta lagu jiro 60-maalmood dheeraad ah oo xidhitaannada 90 maalmood, kor u kaca. Markaad bixiso hadhaaga la daahday ama aad xalliso tigidhka Aaminaada & Badbaadada, deegaankaga wax soo saarka saxda ah ayaa dib loo soo celinayaa iyada oo aan loo baahnayn in dib loo dhiso.

Muxuu domainkayagu si lama filaan ah u joojiyay xallinta a clientHold heerka marka dib u cusboonaysiinta boggayaga aanu ku ekayn 8 bilood oo kale?¶

Marka domain la bixiyo oo ka fog taariikhda uu dhacayo uu si lama filaan ah u galo **`clientHold`**, waxaa jira laba sababood oo keliya: (1) **ICANN 15-maalmood ee WHOIS Xaqiijinta Fashilka kooxda u hoggaansanaanta diiwaan-hayaha). Si degdeg ah u gal boggaaga diiwaan-hayaha: xaqiijinta ICANN waxay ku nadiifinaysaa 15 daqiiqo gudahood markaad gujiso xiriirinta xanaaqa, halka haynta xadgudubku u baahan tahay ka jawaabista tigidhka u hogaansanaanta diiwaan-hayaha.

Maxaynu nahay @ourcompany.com iimaylka soo booda sidoo kale markii boggayaga kaliya laga soo sheegay xiriir been abuur ah?¶

Marka diiwaan-hayaha domain dhigto EPP **`clientHold`** ku yaal boggaaga xididka (`ourcompany.com`), diiwaanku waxa uu meesha ka saarayaa ** dhammaan ergada domainka (dhammaan `NS` diiwaanada)** ka caalamka `.com` xidid server. Sababtoo ah server-yada boostada aduunka ma sii eegi karaan boggaaga `NS` ama `MX` diiwaanada, iimayl kasta oo soo gala `@ourcompany.com` ku guul darreysato qaladka raadinta DNS, xitaa haddii iimaylkaagu si gaar ah loogu martigeliyay Google Workspace ama Microsoft 365. Tani waa sababta ay tahay inaad had iyo jeer la xiriirto diiwaan-hayahaaga adigoo jooga meel ka baxsan band. `@gmail.com` ama cinwaanka domainka sare inta lagu jiro a `clientHold` maqnaansho.

Sideen ku gaarnaa bini'aadamka AWS, GCP, ama diiwaan-hayaha domain haddii aan haysano kaliya heerka taageerada "Aasaasiga ah" ee bilaashka ah?¶

Xataa heerka $0 ee taageerada aasaasiga ah, ** AWS, GCP, iyo Azure waxay u ogolaadaan isticmaalayaasha xididka akoonnada la hakiyay inay furaan kiisaska taageerada "Account and Billing" mudnaanta sare leh oo lacag la'aan ah, iyo gudaha Xarunta Taageerada AWS waxaad dooran kartaa **"Telefoon"** habka xiriirkaaga si AWS Account & Khabiir biilku si toos ah ugu waco taleefankaaga daqiiqado gudahood. Haddii aad xalinayso go'itaanka wax soo saarka degdega ah, waxaad sidoo kale cusboonaysiin kartaa akoonkaaga AWS isla goobta ku taal console-ka **Taageerada Ganacsiga ($100/bishii ugu yaraan)***ama **Ganacsiga On-Ramp** si aad u furto isla markiiba 15-daqiiqo 24/7 Injineer wada sheekaysi farsamo iyo kor u kaca taleefanka.

Ka waran haddii shaqaale qallafsan ama horumariyihii hore uu haysto galitaanka diiwaan-hayaha domain ama AWS Root koontada oo uu diido inuu wareejiyo?¶

Haddii shaqaale hore, wakaalad madax-banaan, ama aasaasaha tuuganimada ay koontaroolaan koontada diiwaan-hayaha ama aqoonsiga xididka daruuriga oo ay ka xidhaan shirkadda, ula dhaqan sida maamul-shirkadeed degdeg ah iyo qalalaasaha qufulka gudaha. Diiwaan-geliyaha domain kasta iyo bixiyaha daruuriga ah wuxuu leeyahay rasmi ah ** Soo kabashada Xisaabaadka Shirkad / Habka Khilaafaadka Diiwaangelinta ** halkaas oo hay'adda ganacsiga sharciga ah ay u soo gudbin karto **Qodobada Isku-dhafka, Warqadda IRS EIN, Diiwaangelinta ganacsiga shirkadda, iyo bayaannada biilasha bangiga/kaarka deynta ee taariikhiga ah** taasoo caddaynaysa in shirkadu bixisay lacagta domainka ama kiraystaha daruuriga ah si ay si khasab ah ugu wareejiso maamulka shirkadda ee maamulka shirkadda. Eeg hagahayaga [khilaafka shuraakada, iskaashato-aasaasaha bangiga daadinta, iyo xannibaadda shirkadda](partnership-dispute-rogue-cofounder-bank-drain-and-corporate-lockout.md).

Intee in le'eg ayay DNS qaadanaysaa inuu ku soo noqdo adduunka oo dhan ka dib marka diiwaan-geliyaha meesha ka saaro clientHold?¶

Marka diiwangeliyaha soo gudbiyo amarka EPP si meesha looga saaro `clientHold`, diiwaanka heerka sare (sida Verisign for `.com`) waxay ku cusboonaysiisaa adeegayaasha aagga xididka **3 ilaa 15 daqiiqo gudahood**. Inta badan isticmaalayaasha intarneedka waxay awood u yeelan doonaan inay mar kale ku gaaraan goobtaada 15 ilaa 30 daqiiqo gudahood, waxaadna ku dadajin kartaa ilaa ** in ka yar 2 daqiiqo** inta badan taraafikada caalamiga ah adiga oo gacanta ku nadiifinaya boggaaga cache-ga xun ee foomamka shabakada dadweynaha ee **Google Public DNS (`8.8.8.8`*** iyo ** Cloudflare DNS (`1.1.1.1`)**.

Tilmaamaha la xidhiidha¶

• Qorshaha sii wadida ganacsiga iyo soo kabashada musiibada
• Madax furashada ganacsiga iyo jebinta serverka
• Muranka shuraakada, iskaashatada aasaasaha bangiga daadinta, iyo qufulka shirkadda
• Bar-iibka iibka (POS) go'an, intarneedka oo go'ay, iyo habaynta kaadhka deynta qad la'aanta

Ilaha iyo hanuuninta rasmiga ah¶

• Shirkadda Internetka ee Magacyada iyo Nambarada la magacaabay (ICANN): Heshiiska Aqoonsiga Diiwaan Geliyaha (RAA) 2013clientHold, serverHold, redemptionPeriod), iyo Siyaasadda Soo-kabashada Diiwaangelinta Dhacday (ERRP).
• Adeegyada Shabakadda Amazon (AWS) Dukumentiga Rasmiga ah: Hakinta Koontada, Dib u soo celinta, iyo Xidhidhiyaha Kadib Nolosha Haynta Xogta (30-Maalmood oo Hakinta / 60-Maalin Daaqadda Xidhitaanka Kadib) iyo AWS Khatartay Hab-maamuuska Aqoonsiga IAM.
• Google Cloud Platform (GCP) iyo Microsoft Azure Dukumentiyada Rasmiga ah: * Soo kabashada Delinquency Billing Cloud, Trust Project & Safety Appeal Workflows, iyo Hababka Dib-u-dhaqaajinta Diiwaangelinta Azure ee la qoondeeyey*.
• Hay'adda Ammaanka Kaabayaasha Internetka iyo Kaabayaasha (CISA, United States) iyo Xarunta Amniga Cyberka Qaranka (NCSC, Boqortooyada Ingiriiska): * Qaabdhismeedka Tixraaca Farsamada ee Amniga Cloud, Xisaabinta Xididada ee MFA, iyo Hababka ugu Fiican ee Quful Diiwaangelinta Domain*.
• Machadka Qaranka ee Heerarka iyo Tignoolajiyada (NIST, Mareykanka): NIST SP 800-61 Rev. 2 (Hagaha Xakamaynta Dhacdooyinka Amniga Kombuyuutarka) iyo NIST SP 800-53 (Integrity DNS and Cloud Access Control Standards).