The service automatically resolves hostnames to IP addresses for resources within the virtual network, allowing resources to communicate using hostnames instead of IP addresses.
Built-in DNS Resolution
CCC.VPC.CP14
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.VPC.TH11 | DNS Resolution is Hijacked to Redirect Traffic | Private DNS zones, resolver forwarding rules, or the DNS servers handed out through DHCP may be created or modified so that names resolve to addresses controlled by an unauthorized entity. Resources connect to the wrong destination and credentials or data are exposed to that destination, impacting the confidentiality and integrity of data. |
| CCC.VPC.TH12 | DNS Queries are Used as a Covert Exfiltration Channel | The built-in resolver forwards queries for any external domain, so a compromised resource can encode data in DNS queries to a domain it controls even when other outbound traffic is blocked. Data leaves the network without traversing the filtered egress path, impacting the confidentiality of data. |