Skip to content

Resource: awsRoute53ResolverEndpoint

Provides a Route 53 Resolver endpoint resource.

Example Usage

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.route53ResolverEndpoint.Route53ResolverEndpoint(this, "foo", {
  direction: "INBOUND",
  ipAddress: [
    {
      subnetId: "${aws_subnet.sn1.id}",
    },
    {
      ip: "10.0.64.4",
      subnetId: "${aws_subnet.sn2.id}",
    },
  ],
  name: "foo",
  securityGroupIds: [
    "${aws_security_group.sg1.id}",
    "${aws_security_group.sg2.id}",
  ],
  tags: {
    Environment: "Prod",
  },
});

Argument Reference

The following arguments are supported:

  • direction - (Required) The direction of DNS queries to or from the Route 53 Resolver endpoint. Valid values are inbound (resolver forwards DNS queries to the DNS service for a VPC from your network or another VPC) or outbound (resolver forwards DNS queries from the DNS service for a VPC to your network or another VPC).
  • ipAddress - (Required) The subnets and IP addresses in your VPC that you want DNS queries to pass through on the way from your VPCs to your network (for outbound endpoints) or on the way from your network to your VPCs (for inbound endpoints). Described below.
  • securityGroupIds - (Required) The ID of one or more security groups that you want to use to control access to this VPC.
  • name - (Optional) The friendly name of the Route 53 Resolver endpoint.
  • tags - (Optional) A map of tags to assign to the resource. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

The ipAddress object supports the following:

  • subnetId - (Required) The ID of the subnet that contains the IP address.
  • ip - (Optional) The IP address in the subnet that you want to use for DNS queries.

Attributes Reference

In addition to all arguments above, the following attributes are exported:

  • id - The ID of the Route 53 Resolver endpoint.
  • arn - The ARN of the Route 53 Resolver endpoint.
  • hostVpcId - The ID of the VPC that you want to create the resolver endpoint in.
  • tagsAll - A map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

Timeouts

Configuration options:

  • create - (Default 10M)
  • update - (Default 10M)
  • delete - (Default 10M)

Import

Route 53 Resolver endpoints can be imported using the Route 53 Resolver endpoint ID, e.g.,

$ terraform import aws_route53_resolver_endpoint.foo rslvr-in-abcdef01234567890