Table: aws_route53_domain - Query AWS Route 53 Domains using SQL
The AWS Route 53 Domain service is a scalable and highly available domain name system (DNS) web service. It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating human readable names like www.example.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other. Route 53 effectively connects user requests to infrastructure running in AWS, such as Amazon EC2 instances, ELB load balancers, or Amazon S3 buckets, and can also be used to route users to infrastructure outside of AWS.
Table Usage Guide
The aws_route53_domain
table in Steampipe allows you to query detailed information about domain names registered with Route 53, a scalable Domain Name System (DNS) web service in AWS. This table provides you, as a DevOps engineer, with domain-specific details such as domain name, status, expiration date, and associated tags. You can utilize this table to retrieve details about domain names, including their registration, renewal, and transfer status, and also to verify the associated tags. The schema outlines various attributes of the domain, including the domain name, auto renew, transfer lock, expiry date, and associated tags.
Examples
Basic info
Determine the status of domain renewals in your AWS Route53 service to anticipate and manage upcoming expiration dates. This query is useful for maintaining domain continuity and avoiding unexpected service disruptions.
select domain_name, auto_renew, expiration_datefrom aws_route53_domain;
select domain_name, auto_renew, expiration_datefrom aws_route53_domain;
List domains with auto-renewal enabled
Discover the domains that have the auto-renewal feature enabled to understand the areas that may need attention for timely renewals, thus preventing any potential service disruptions. This can be particularly useful in managing domain registrations and ensuring continuity of web services.
select domain_name, auto_renew, expiration_datefrom aws_route53_domainwhere auto_renew;
select domain_name, auto_renew, expiration_datefrom aws_route53_domainwhere auto_renew = 1;
List domains with transfer lock enabled
Explore which domains have the transfer lock feature enabled, which is useful for maintaining domain security by preventing unauthorized transfers. This can be particularly beneficial for organizations looking to safeguard their domains from potential cyber threats or unauthorized changes.
select domain_name, expiration_date, transfer_lockfrom aws_route53_domainwhere transfer_lock;
select domain_name, expiration_date, transfer_lockfrom aws_route53_domainwhere transfer_lock = 1;
Control examples
- All Controls > Route 53 > Route 53 domains auto renew should be enabled
- All Controls > Route 53 > Route 53 domains should have transfer lock enabled
- All Controls > Route 53 > Route 53 domains should not be expired
- All Controls > Route 53 > Route 53 domains should not expire within next 30 days
- All Controls > Route 53 > Route 53 domains should not expire within next 7 days
- All Controls > Route 53 > Route53 domains privacy protection should be enabled
Schema for aws_route53_domain
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
abuse_contact_email | text | Email address to contact to report incorrect contact information for a domain,to report that the domain is being used to send spam, to report that someone is cyber squatting on a domain name, or report some other type of abuse. | |
abuse_contact_phone | text | Phone number for reporting abuse. | |
account_id | text | =, !=, ~~, ~~*, !~~, !~~* | The AWS Account ID in which the resource is located. |
admin_contact | jsonb | Provides details about the domain administrative contact. | |
admin_privacy | boolean | Specifies whether contact information is concealed from WHOIS queries. | |
akas | jsonb | Array of globally unique identifier strings (also known as) for the resource. | |
arn | text | The Amazon Resource Name (ARN) specifying the domain. | |
auto_renew | boolean | Indicates whether the domain is automatically renewed upon expiration. | |
billing_contact | jsonb | Provides details about the domain billing contact. | |
billing_privacy | boolean | Specifies whether contact information is concealed from WHOIS queries. | |
creation_date | timestamp with time zone | The date when the domain was created as found in the response to a WHOIS query. | |
dnssec_keys | jsonb | A complex type that contains information about the DNSSEC configuration. | |
domain_name | text | = | The name of the domain. |
expiration_date | timestamp with time zone | The date when the registration for the domain is set to expire. The date and time is in Unix time format and Coordinated Universal time (UTC). | |
nameservers | jsonb | The name of the domain. | |
partition | text | The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov). | |
region | text | The AWS Region in which the resource is located. | |
registrant_contact | jsonb | Provides details about the domain registrant. | |
registrant_privacy | boolean | Specifies whether contact information is concealed from WHOIS queries. | |
registrar_name | text | Name of the registrar of the domain as identified in the registry. Domains with a .com, .net, or .org TLD are registered by Amazon Registrar. | |
registrar_url | text | Web address of the registrar. | |
registry_domain_id | text | Reserved for future use. | |
reseller | text | Reseller of the domain. Domains registered or transferred using Route 53 domains will have Amazon as the reseller. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
status_list | jsonb | An array of domain name status codes, also known as Extensible Provisioning Protocol (EPP) status codes. | |
tags | jsonb | A map of tags for the resource. | |
tags_src | jsonb | A list of tags assigned to the resource. | |
tech_contact | jsonb | Provides details about the domain technical contact. | |
tech_privacy | boolean | Specifies whether contact information is concealed from WHOIS queries. | |
title | text | Title of the resource. | |
transfer_lock | boolean | Indicates whether a domain is locked from unauthorized transfer to another party. | |
updated_date | timestamp with time zone | The last updated date of the domain as found in the response to a WHOIS query.The date and time is in Unix time format and Coordinated Universal time (UTC). | |
who_is_server | text | The fully qualified name of the WHOIS server that can answer the WHOIS query for the domain. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws
You can pass the configuration to the command with the --config
argument:
steampipe_export_aws --config '<your_config>' aws_route53_domain