services / Google Cloud / Resource Record Set

A resource record set either contains a DNS record managed by Cloud DNS or a routing policy. This includes both public and private DNS records.

dns.​resourceRecordSets.​update

Edit access to DNS records.

Risks

1. Domain takeover (CRITICAL)
2. Denial-of-service (HIGH)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links