DNSControl is an open-source tool for managing DNS as code. You describe records in a JavaScript-compatible configuration file, preview the changes with dnscontrol preview and apply them with dnscontrol push. One configuration can target several DNS providers and registrars, including Amazon Route 53, Cloudflare and Google Cloud DNS, through plugins that call their APIs. Because zone data lives in version control, teams can review changes and apply CI/CD practices to DNS; a GitHub Action is available. DNSControl is written in Go and runs on Linux, macOS and Windows, as a command-line tool or Docker image.
The project is MIT-licensed and developed in the open on GitHub by a community of contributors; the Stack Overflow network uses it for its domains. DNSControl does not host DNS itself: it is software that you run locally or in your own pipeline. Where DNS data is served therefore depends on the providers you configure, which can include European ones such as deSEC, and the tool is not tied to a single vendor. Your provider credentials stay in your own environment.