DNS Provider Setup
Connecting Cloudflare, Route 53, or cPanel/WHM for automatic DNS management
DNS Provider Setup
Connecting your DNS provider allows DMARC Busta to automatically create and update DNS records on your behalf — SPF records, DMARC records, DKIM keys, and delegation CNAMEs — without you needing to log into your DNS control panel for every change.
Supported Providers
Cloudflare
Connect via API token (recommended) or your account email and global API key. DMARC Busta automatically disables Cloudflare's proxy (orange cloud) for email authentication records, which must not be proxied.
Required token permission: Zone → DNS → Edit
AWS Route 53
Connect using an AWS access key and secret key. DMARC Busta lists your hosted zones and lets you select which domains to manage. Works with both public and private hosted zones.
Required IAM permissions: route53:ChangeResourceRecordSets, route53:ListHostedZones, route53:ListResourceRecordSets
cPanel / WHM
Connect to your WHM server using the hostname and a WHM API token (recommended over username and password). DMARC Busta uses the cPanel UAPI to edit DNS zones for all accounts on the server. Ideal for hosting providers and web hosts managing many client domains.
Requires: WHM root or reseller access with DNS management permissions
How to Connect a Provider
- Go to your domain's overview page and click Connect DNS Provider, or go to Settings → DNS Providers
- Select your provider from the list
- Enter the required credentials (API token, keys, or hostname)
- Click Test Connection to verify the credentials work before saving
- Save. DMARC Busta will detect which domains are managed by this provider automatically.
What DMARC Busta Can Do With a Connected Provider
- Create and update SPF TXT records automatically when sources are approved
- Create the DMARC
_dmarcTXT record with the correct policy and RUA address - Create the SPF delegation CNAME (
_spf.yourdomain.com) for managed SPF - Publish DKIM public keys when new selectors are configured
- Advance DMARC policy automatically (when automation level is Managed or Autopilot)
Without a Connected Provider
DMARC Busta still works without a connected DNS provider — you simply need to apply recommended DNS changes manually. The platform provides the exact record values to copy into your DNS control panel. Once changes propagate (typically 5–15 minutes for short TTLs, up to several hours for longer ones), DMARC Busta detects them automatically.
Security Note: Use Scoped Tokens
Always use scoped API tokens rather than global or root credentials. For Cloudflare, create a token with Zone → DNS → Edit for specific zones only. For AWS, use a dedicated IAM user with only the required Route 53 permissions. This limits the blast radius if credentials are ever compromised.