Route 53 Resolver Rule

A Route 53 Resolver Rule in AWS defines how DNS queries are handled for a VPC. It allows you to forward DNS queries for specific domains to custom DNS servers, or to resolve them using AWS’s default DNS. This enables hybrid cloud DNS resolution, integration with on-premises environments, and fine-grained control over query routing.

aws.route53resolver_resolver_rule

Fields

TitleIDTypeData TypeDescription
_keycorestring
account_idcorestring
arncorestringThe ARN (Amazon Resource Name) for the Resolver rule specified by Id.
creation_timecorestringThe date and time that the Resolver rule was created, in Unix time format and Coordinated Universal Time (UTC).
creator_request_idcorestringA unique string that you specified when you created the Resolver rule. CreatorRequestId identifies the request and allows failed requests to be retried without the risk of running the operation twice.
delegation_recordcorestringDNS queries with delegation records that point to this domain name are forwarded to resolvers on your network.
domain_namecorestringDNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps. If a query matches multiple Resolver rules (example.com and www.example.com), the query is routed using the Resolver rule that contains the most specific domain name (www.example.com).
idcorestringThe ID that Resolver assigned to the Resolver rule when you created it.
modification_timecorestringThe date and time that the Resolver rule was last updated, in Unix time format and Coordinated Universal Time (UTC).
namecorestringThe name for the Resolver rule, which you specified when you created the Resolver rule.
owner_idcorestringWhen a rule is shared with another Amazon Web Services account, the account ID of the account that the rule is shared with.
resolver_endpoint_idcorestringThe ID of the endpoint that the rule is associated with.
rule_typecorestringWhen you want to forward DNS queries for specified domain name to resolvers on your network, specify FORWARD or DELEGATE. If a query matches multiple Resolver rules (example.com and www.example.com), outbound DNS queries are routed using the Resolver rule that contains the most specific domain name (www.example.com). When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify SYSTEM. For example, to forward DNS queries for example.com to resolvers on your network, you create a rule and specify FORWARD for RuleType. To then have Resolver process queries for apex.example.com, you create a rule and specify SYSTEM for RuleType. Currently, only Resolver can create rules that have a value of RECURSIVE for RuleType.
share_statuscorestringWhether the rule is shared and, if so, whether the current account is sharing the rule with another account, or another account is sharing the rule with the current account.
statuscorestringA code that specifies the current status of the Resolver rule.
status_messagecorestringA detailed description of the status of a Resolver rule.
tagscorehstore
target_ipscorejsonAn array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network.