Route 53 Resolver Query Logging Configuration

Docs > DDSQL Reference > Data Directory > Route 53 Resolver Query Logging Configuration

Route 53 Resolver Query Logging Configuration in AWS allows you to capture and log DNS queries that originate from your VPCs. This helps with troubleshooting, security analysis, and compliance by sending query logs to destinations such as CloudWatch Logs, S3, or Kinesis Data Firehose.

aws.route53resolver_resolver_query_log_config

Fields

ID	Type	Data Type	Description
_key	core	string
account_id	core	string
arn	core	string	The ARN for the query logging configuration.
association_count	core	int64	The number of VPCs that are associated with the query logging configuration.
creation_time	core	string	The date and time that the query logging configuration was created, in Unix time format and Coordinated Universal Time (UTC).
creator_request_id	core	string	A unique string that identifies the request that created the query logging configuration. The CreatorRequestId allows failed requests to be retried without the risk of running the operation twice.
destination_arn	core	string	The ARN of the resource that you want Resolver to send query logs: an Amazon S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream.
id	core	string	The ID for the query logging configuration.
name	core	string	The name of the query logging configuration.
owner_id	core	string	The Amazon Web Services account ID for the account that created the query logging configuration.
share_status	core	string	An indication of whether the query logging configuration is shared with other Amazon Web Services accounts, or was shared with the current account by another Amazon Web Services account. Sharing is configured through Resource Access Manager (RAM).
status	core	string	The status of the specified query logging configuration. Valid values include the following: CREATING: Resolver is creating the query logging configuration. CREATED: The query logging configuration was successfully created. Resolver is logging queries that originate in the specified VPC. DELETING: Resolver is deleting this query logging configuration. FAILED: Resolver can't deliver logs to the location that is specified in the query logging configuration. Here are two common causes: The specified destination (for example, an Amazon S3 bucket) was deleted. Permissions don't allow sending logs to the destination.
tags	core	hstore