r53-dangling-dns — catch subdomain-takeover risk in Route53 before an attacker does

A Go CLI that scans Route53 zones and cross-checks every record against live AWS inventory to flag dangling records pointing at deprovisioned resources.