It has the same cost as a successful response which can quickly add up to a few hundred dollars per month with a couple of DNS enumeration scans.
Google Cloud and Azure also bill DNS like this. Unless you need some of the advanced features you really shouldn't host your DNS in the big cloud providers.
Comments
I just searched for this and this documentation entry came up:
https://docs.aws.amazon.com/whitepapers/latest/aws-best-prac...
I can't believe that their 'fix' is to set a wildcard dns entry, this feels somewhat like a joke.
Does this mean that a NXDOMAIN response costs more than a successful response?
It has the same cost as a successful response which can quickly add up to a few hundred dollars per month with a couple of DNS enumeration scans.
Google Cloud and Azure also bill DNS like this. Unless you need some of the advanced features you really shouldn't host your DNS in the big cloud providers.
Cloudflare don't bill like this, part of why I moved off route 53.
Neither does Digital Ocean, for that matter.
That’s not entirely true - aliases to AWS resources are free (their suggested “workaround”).