AWS Security ChangesHomeSearch

AWS Route53 documentation change

Service: Route53 · 2026-03-28 · Documentation low

File: Route53/latest/DeveloperGuide/domain-transfer-from-route-53.md

Summary

Updated domain transfer confirmation process documentation with more specific details about confirmation email domains and clearer instructions for approving/rejecting transfers.

Security assessment

This change improves documentation about domain transfer security procedures by specifying exact domains used for confirmation emails (registrar.amazon, approvemove.com, etc.) and clarifying the authorization process. This helps prevent phishing and confusion during domain transfers, but doesn't address a specific security vulnerability.

Diff

diff --git a/Route53/latest/DeveloperGuide/domain-transfer-from-route-53.md b/Route53/latest/DeveloperGuide/domain-transfer-from-route-53.md
index e598a54da..a34c1f5af 100644
--- a//Route53/latest/DeveloperGuide/domain-transfer-from-route-53.md
+++ b//Route53/latest/DeveloperGuide/domain-transfer-from-route-53.md
@@ -153 +153 @@ _All domains except .co.za, .uk, .co.uk, .me.uk, and .org.uk domains_ – You'll
-  11. Respond to the confirmation email:
+  11. Act on the confirmation email:
@@ -158 +158 @@ _All domains except .co.za, .uk, .co.uk, .me.uk, and .org.uk domains_ – You'll
-Route 53 sends a confirmation email to the email address for the registrant contact for the domain:
+Route 53 sends a confirmation email to the registrant contact for the domain:
@@ -160 +160 @@ Route 53 sends a confirmation email to the email address for the registrant cont
-     * If you don't respond to the email, the transfer happens automatically on the specified date.
+     * Depending on the TLD, the confirmation email includes a link from one of the following domains. Use this link to approve or reject the transfer.
@@ -162 +162 @@ Route 53 sends a confirmation email to the email address for the registrant cont
-     * If you want the transfer to happen sooner or you want to cancel the transfer, choose the link in the email to go to the Route 53 website, and choose the applicable option.
+       * registrar.amazon
@@ -164 +164,9 @@ Route 53 sends a confirmation email to the email address for the registrant cont
-     * Depending on the TLD, the confirmation email may contain a link to https://approvemove.com where you can approve or reject the transfer. When privacy protection is enabled for the domain contacts, the email will be delivered from identity-protect.org addresses for TLDs registered with Amazon Registrar. To determine who the registrar is for your TLD, see [Finding your registrar](./find-your-registrar.html). 
+       * approvemove.com
+
+       * domainnameverification.net
+
+       * emailverification.info
+
+       * key-systems.net
+
+     * If you don't take action, the transfer will proceed automatically on the specified date.
@@ -169 +177 @@ Route 53 sends a confirmation email to the email address for the registrant cont
-Route 53 sends a confirmation email to the email address for the registrant contact for the domain from address [email protected]_ or [email protected]_ with a link to confirm the transfer:
+Route 53 sends a confirmation email to the registrant contact for the domain from address [email protected]_ or [email protected]_ with a link to confirm the transfer:
@@ -171 +179 @@ Route 53 sends a confirmation email to the email address for the registrant cont
-     * If you don't respond to the email, the transfer is canceled on the specified date.
+     * Use this link to approve or reject the transfer. You will need to provide the domain authorization code that you obtained in step 7.
@@ -173 +181 @@ Route 53 sends a confirmation email to the email address for the registrant cont
-     * If you want the transfer to happen sooner or you want to cancel the transfer, choose the link in the email to go to the Route 53 website, and choose the applicable option. You will be required to provide the domain authorization code that you obtained in step 7.
+     * If you don't take action, the transfer will be canceled on the specified date.