Table: aws_route53_resolver_endpoint - Query AWS Route 53 Resolver Endpoints using SQL
The AWS Route 53 Resolver Endpoint is a component of Amazon's Route 53 service, which provides highly scalable and reliable domain name system (DNS) web services. The Resolver Endpoint specifically enables recursive DNS for your Amazon VPCs and your on-premises networks over a Direct Connect or VPN connection. It offers DNS resolution between virtual networks, improved response times, and manageability of DNS data.
Table Usage Guide
The aws_route53_resolver_endpoint
table in Steampipe provides you with information about Resolver Endpoints within AWS Route 53. This table allows you, as a DevOps engineer, to query endpoint-specific details, including the endpoint's direction (INBOUND or OUTBOUND), IP addresses, status, and associated metadata. You can utilize this table to gather insights on endpoints, such as their security status, IP address associations, and more. The schema outlines the various attributes of the Resolver Endpoint for you, including the endpoint ID, ARN, direction, IP address count, and associated tags.
Examples
List all endpoints
Explore the various endpoints in your AWS Route53 Resolver to assess their status and direction, which aids in managing your network traffic effectively.
select name, id, direction, ip_address_count statusfrom aws_route53_resolver_endpoint;
select name, id, direction, ip_address_count, statusfrom aws_route53_resolver_endpoint;
Get a specific endpoint
Determine the details of a specific network traffic flow direction, the number of IP addresses, and the current status within your Amazon Route 53 Resolver. This can be particularly useful to troubleshoot or optimize your DNS resolution strategy.
select name, id, direction, ip_address_count statusfrom aws_route53_resolver_endpointwhere id = 'rslvr-out-ebb7db0b7498463eb';
select name, id, direction, ip_address_count, statusfrom aws_route53_resolver_endpointwhere id = 'rslvr-out-ebb7db0b7498463eb';
List unhealthy endpoints
Determine the areas in which your AWS Route53 Resolver endpoints require action. This query helps in identifying endpoints that are experiencing issues, enabling you to address them promptly for a smoother network operation.
select name, id, direction, status, status_messagefrom aws_route53_resolver_endpointwhere status = 'ACTION_NEEDED';
select name, id, direction, status, status_messagefrom aws_route53_resolver_endpointwhere status = 'ACTION_NEEDED';
Get IP address details for each endpoint
Determine the status and location of each endpoint in your network by analyzing their IP addresses. This can help in network troubleshooting and optimization.
select name, p ->> 'Ip' as ip, p ->> 'Status' as status, p ->> 'SubnetId' as subnet_idfrom aws_route53_resolver_endpoint, jsonb_array_elements(ip_addresses) as p;
select name, json_extract(p.value, '$.Ip') as ip, json_extract(p.value, '$.Status') as status, json_extract(p.value, '$.SubnetId') as subnet_idfrom aws_route53_resolver_endpoint, json_each(ip_addresses) as p;
Schema for aws_route53_resolver_endpoint
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
account_id | text | =, !=, ~~, ~~*, !~~, !~~* | The AWS Account ID in which the resource is located. |
akas | jsonb | Array of globally unique identifier strings (also known as) for the resource. | |
arn | text | The ARN (Amazon Resource Name) for the Resolver endpoint. | |
creation_time | text | The date and time that the endpoint was created, in Unix time format and Coordinated Universal Time (UTC). | |
creator_request_id | text | = | A unique string that identifies the request that created the Resolver endpoint.The CreatorRequestId allows failed requests to be retried without the risk of executing the operation twice. |
direction | text | = | Indicates whether the Resolver endpoint allows inbound or outbound DNS queries. |
host_vpc_id | text | = | The ID of the VPC that you want to create the Resolver endpoint in. |
id | text | = | The ID of the Resolver endpoint. |
ip_address_count | bigint | = | The number of IP addresses that the Resolver endpoint can use for DNS queries. |
ip_addresses | jsonb | Information about the IP addresses in your VPC that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). | |
modification_time | text | The date and time that the endpoint was last modified, in Unix time format and Coordinated Universal Time (UTC). | |
name | text | = | The name that you assigned to the Resolver endpoint when you submitted a CreateResolverEndpoint. |
outpost_arn | text | The ARN (Amazon Resource Name) for the Outpost. | |
partition | text | The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov). | |
preferred_instance_type | text | The Amazon EC2 instance type. | |
protocols | jsonb | Protocols used for the endpoint. | |
region | text | The AWS Region in which the resource is located. | |
resolver_endpoint_type | text | The Resolver endpoint IP address type. | |
security_group_ids | jsonb | The ID of one or more security groups that control access to this VPC. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
status | text | = | A code that specifies the current status of the Resolver endpoint. |
status_message | text | A detailed description of the status of the Resolver endpoint. | |
tags | jsonb | A map of tags for the resource. | |
tags_src | jsonb | A list of tags assigned to the Resolver endpoint. | |
title | text | Title of the resource. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws
You can pass the configuration to the command with the --config
argument:
steampipe_export_aws --config '<your_config>' aws_route53_resolver_endpoint