steampipe plugin install awssteampipe plugin install aws

Table: aws_route53_zone

A hosted zone is analogous to a traditional DNS zone file; it represents a collection of records that can be managed together, belonging to a single parent domain name. All resource record sets within a hosted zone must have the hosted zone’s domain name as a suffix.

Examples

Basic Zone Info

select
  name,
  id,
  private_zone,
  resource_record_set_count
from
  aws_route53_zone;

List private zones

select
  name,
  id,
  comment,
  private_zone,
  resource_record_set_count
from
  aws_route53_zone
where
  private_zone;

List public zones

select
  name,
  id,
  comment,
  private_zone,
  resource_record_set_count
from
  aws_route53_zone
where
  not private_zone;

Find zones by subdomain name

select
  name,
  id,
  private_zone,
  resource_record_set_count
from
  aws_route53_zone
where
  name like '%.turbot.com.'

List VPCs associated with zones

select
  name,
  id,
  v ->> 'VPCId' as vpc_id,
  v ->> 'VPCRegion' as vpc_region
from
  aws_route53_zone,
  jsonb_array_elements(vpcs) as v;

Get VPC details associated with zones

select
  name,
  id,
  v.vpc_id as vpc_id,
  v.cidr_block as cidr_block,
  v.is_default as is_default,
  v.dhcp_options_id as dhcp_options_id
from
  aws_route53_zone,
  jsonb_array_elements(vpcs) as p,
  aws_vpc as v
where
  p ->> 'VPCId' = v.vpc_id;

Control examples

.inspect aws_route53_zone

AWS Route53 Zone

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
caller_reference	text	The value that you specified for CallerReference when you created the hosted zone.
comment	text	A comment for the zone.
dnssec_key_signing_keys	jsonb	The key-signing keys (KSKs) in AWS account.
dnssec_status	jsonb	The status of DNSSEC.
id	text	The ID that Amazon Route 53 assigned to the hosted zone when it was created.
linked_service_description	text	If the health check or hosted zone was created by another service, an optional description that can be provided by the other service.
linked_service_principal	text	If the health check or hosted zone was created by another service, the service that created the resource.
name	text	The name of the domain. For public hosted zones, this is the name that is registered with your DNS registrar.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
private_zone	boolean	If true, the zone is Private hosted Zone, otherwise it is public.
query_logging_configs	jsonb	A list of configuration for DNS query logging that is associated with the current AWS account.
region	text	The AWS Region in which the resource is located.
resource_record_set_count	bigint	The number of resource record sets in the hosted zone.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A map of tags for the resource.
title	text	Title of the resource.
vpcs	jsonb	The list of VPCs that are authorized to be associated with the specified hosted zone.

turbot/aws