Table of Contents
Route53.Client¶A low-level client representing Amazon Route 53
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web service.
You can use Route 53 to:
import boto3
client = boto3.client('route53')
These are the available methods:
activate_key_signing_key()associate_vpc_with_hosted_zone()can_paginate()change_cidr_collection()change_resource_record_sets()change_tags_for_resource()close()create_cidr_collection()create_health_check()create_hosted_zone()create_key_signing_key()create_query_logging_config()create_reusable_delegation_set()create_traffic_policy()create_traffic_policy_instance()create_traffic_policy_version()create_vpc_association_authorization()deactivate_key_signing_key()delete_cidr_collection()delete_health_check()delete_hosted_zone()delete_key_signing_key()delete_query_logging_config()delete_reusable_delegation_set()delete_traffic_policy()delete_traffic_policy_instance()delete_vpc_association_authorization()disable_hosted_zone_dnssec()disassociate_vpc_from_hosted_zone()enable_hosted_zone_dnssec()get_account_limit()get_change()get_checker_ip_ranges()get_dnssec()get_geo_location()get_health_check()get_health_check_count()get_health_check_last_failure_reason()get_health_check_status()get_hosted_zone()get_hosted_zone_count()get_hosted_zone_limit()get_paginator()get_query_logging_config()get_reusable_delegation_set()get_reusable_delegation_set_limit()get_traffic_policy()get_traffic_policy_instance()get_traffic_policy_instance_count()get_waiter()list_cidr_blocks()list_cidr_collections()list_cidr_locations()list_geo_locations()list_health_checks()list_hosted_zones()list_hosted_zones_by_name()list_hosted_zones_by_vpc()list_query_logging_configs()list_resource_record_sets()list_reusable_delegation_sets()list_tags_for_resource()list_tags_for_resources()list_traffic_policies()list_traffic_policy_instances()list_traffic_policy_instances_by_hosted_zone()list_traffic_policy_instances_by_policy()list_traffic_policy_versions()list_vpc_association_authorizations()test_dns_answer()update_health_check()update_hosted_zone_comment()update_traffic_policy_comment()update_traffic_policy_instance()activate_key_signing_key(**kwargs)¶Activates a key-signing key (KSK) so that it can be used for signing by DNSSEC. This operation changes the KSK status to ACTIVE .
See also: AWS API Documentation
Request Syntax
response = client.activate_key_signing_key(
HostedZoneId='string',
Name='string'
)
[REQUIRED]
A unique string used to identify a hosted zone.
[REQUIRED]
A string used to identify a key-signing key (KSK). Name can include numbers, letters, and underscores (_). Name must be unique for each key-signing key in the same hosted zone.
dict
Response Syntax
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
(dict) --
ChangeInfo (dict) --
A complex type that describes change information about changes made to your hosted zone.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
Exceptions
Route53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.NoSuchKeySigningKeyRoute53.Client.exceptions.InvalidKeySigningKeyStatusRoute53.Client.exceptions.InvalidSigningStatusRoute53.Client.exceptions.InvalidKMSArnRoute53.Client.exceptions.InvalidInputassociate_vpc_with_hosted_zone(**kwargs)¶Associates an Amazon VPC with a private hosted zone.
Warning
To perform the association, the VPC and the private hosted zone must already exist. You can't convert a public hosted zone into a private hosted zone.
Note
If you want to associate a VPC that was created by using one Amazon Web Services account with a private hosted zone that was created by using a different account, the Amazon Web Services account that created the private hosted zone must first submit a CreateVPCAssociationAuthorization request. Then the account that created the VPC must submit an AssociateVPCWithHostedZone request.
Note
When granting access, the hosted zone and the Amazon VPC must belong to the same partition. A partition is a group of Amazon Web Services Regions. Each Amazon Web Services account is scoped to one partition.
The following are the supported partitions:
aws - Amazon Web Services Regionsaws-cn - China Regionsaws-us-gov - Amazon Web Services GovCloud (US) RegionFor more information, see Access Management in the Amazon Web Services General Reference .
See also: AWS API Documentation
Request Syntax
response = client.associate_vpc_with_hosted_zone(
HostedZoneId='string',
VPC={
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
},
Comment='string'
)
[REQUIRED]
The ID of the private hosted zone that you want to associate an Amazon VPC with.
Note that you can't associate a VPC with a hosted zone that doesn't have an existing VPC association.
[REQUIRED]
A complex type that contains information about the VPC that you want to associate with a private hosted zone.
(Private hosted zones only) The region that an Amazon VPC was created in.
(Private hosted zones only) The ID of an Amazon VPC.
dict
Response Syntax
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
(dict) --
A complex type that contains the response information for the AssociateVPCWithHostedZone request.
ChangeInfo (dict) --
A complex type that describes the changes made to your hosted zone.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.NotAuthorizedExceptionRoute53.Client.exceptions.InvalidVPCIdRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.PublicZoneVPCAssociationRoute53.Client.exceptions.ConflictingDomainExistsRoute53.Client.exceptions.LimitsExceededRoute53.Client.exceptions.PriorRequestNotCompleteExamples
The following example associates the VPC with ID vpc-1a2b3c4d with the hosted zone with ID Z3M3LMPEXAMPLE.
response = client.associate_vpc_with_hosted_zone(
Comment='',
HostedZoneId='Z3M3LMPEXAMPLE',
VPC={
'VPCId': 'vpc-1a2b3c4d',
'VPCRegion': 'us-east-2',
},
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': '',
'Id': '/change/C3HC6WDB2UANE2',
'Status': 'INSYNC',
'SubmittedAt': datetime(2017, 1, 31, 1, 36, 41, 1, 31, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
can_paginate(operation_name)¶Check if an operation can be paginated.
create_foo, and you'd normally invoke the
operation as client.create_foo(**kwargs), if the
create_foo operation can be paginated, you can use the
call client.get_paginator("create_foo").True if the operation can be paginated,
False otherwise.change_cidr_collection(**kwargs)¶Creates, changes, or deletes CIDR blocks within a collection. Contains authoritative IP information mapping blocks to one or multiple locations.
A change request can update multiple locations in a collection at a time, which is helpful if you want to move one or more CIDR blocks from one location to another in one transaction, without downtime.
Limits
The max number of CIDR blocks included in the request is 1000. As a result, big updates require multiple API calls.
PUT and DELETE_IF_EXISTS
Use ChangeCidrCollection to perform the following actions:
PUT : Create a CIDR block within the specified collection.DELETE_IF_EXISTS : Delete an existing CIDR block from the collection.See also: AWS API Documentation
Request Syntax
response = client.change_cidr_collection(
Id='string',
CollectionVersion=123,
Changes=[
{
'LocationName': 'string',
'Action': 'PUT'|'DELETE_IF_EXISTS',
'CidrList': [
'string',
]
},
]
)
[REQUIRED]
The UUID of the CIDR collection to update.
A sequential counter that Amazon Route 53 sets to 1 when you create a collection and increments it by 1 each time you update the collection.
We recommend that you use ListCidrCollection to get the current value of CollectionVersion for the collection that you want to update, and then include that value with the change request. This prevents Route 53 from overwriting an intervening update:
CollectionVersion in the collection, Route 53 updates the collection.CollectionVersion in the collection is greater than the value in the request, the collection was changed after you got the version number. Route 53 does not update the collection, and it returns a CidrCollectionVersionMismatch error.[REQUIRED]
Information about changes to a CIDR collection.
A complex type that contains information about the CIDR collection change.
Name of the location that is associated with the CIDR collection.
CIDR collection change action.
List of CIDR blocks.
dict
Response Syntax
{
'Id': 'string'
}
Response Structure
(dict) --
Id (string) --
The ID that is returned by ChangeCidrCollection . You can use it as input to GetChange to see if a CIDR collection change has propagated or not.
Exceptions
Route53.Client.exceptions.NoSuchCidrCollectionExceptionRoute53.Client.exceptions.CidrCollectionVersionMismatchExceptionRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.CidrBlockInUseExceptionRoute53.Client.exceptions.LimitsExceededRoute53.Client.exceptions.ConcurrentModificationchange_resource_record_sets(**kwargs)¶Creates, changes, or deletes a resource record set, which contains authoritative DNS information for a specified domain name or subdomain name. For example, you can use ChangeResourceRecordSets to create a resource record set that routes traffic for test.example.com to a web server that has an IP address of 192.0.2.44.
Deleting Resource Record Sets
To delete a resource record set, you must specify all the same values that you specified when you created it.
Change Batches and Transactional Changes
The request body must include a document with a ChangeResourceRecordSetsRequest element. The request body contains a list of change items, known as a change batch. Change batches are considered transactional changes. Route 53 validates the changes in the request and then either makes all or none of the changes in the change batch request. This ensures that DNS routing isn't adversely affected by partial changes to the resource record sets in a hosted zone.
For example, suppose a change batch request contains two changes: it deletes the CNAME resource record set for www.example.com and creates an alias resource record set for www.example.com. If validation for both records succeeds, Route 53 deletes the first resource record set and creates the second resource record set in a single operation. If validation for either the DELETE or the CREATE action fails, then the request is canceled, and the original CNAME record continues to exist.
Note
If you try to delete the same resource record set more than once in a single change batch, Route 53 returns anInvalidChangeBatcherror.
Traffic Flow
To create resource record sets for complex routing configurations, use either the traffic flow visual editor in the Route 53 console or the API actions for traffic policies and traffic policy instances. Save the configuration as a traffic policy, then associate the traffic policy with one or more domain names (such as example.com) or subdomain names (such as www.example.com), in the same hosted zone or in multiple hosted zones. You can roll back the updates if the new configuration isn't performing as expected. For more information, see Using Traffic Flow to Route DNS Traffic in the Amazon Route 53 Developer Guide .
Create, Delete, and Upsert
Use ChangeResourceRecordsSetsRequest to perform the following actions:
CREATE : Creates a resource record set that has the specified values.DELETE : Deletes an existing resource record set that has the specified values.UPSERT : If a resource set exists Route 53 updates it with the values in the request.Syntaxes for Creating, Updating, and Deleting Resource Record Sets
The syntax for a request depends on the type of resource record set that you want to create, delete, or update, such as weighted, alias, or failover. The XML elements in your request must appear in the order listed in the syntax.
For an example for each type of resource record set, see "Examples."
Don't refer to the syntax in the "Parameter Syntax" section, which includes all of the elements for every kind of resource record set that you can create, delete, or update by using ChangeResourceRecordSets .
Change Propagation to Route 53 DNS Servers
When you submit a ChangeResourceRecordSets request, Route 53 propagates your changes to all of the Route 53 authoritative DNS servers. While your changes are propagating, GetChange returns a status of PENDING . When propagation is complete, GetChange returns a status of INSYNC . Changes generally propagate to all Route 53 name servers within 60 seconds. For more information, see GetChange.
Limits on ChangeResourceRecordSets Requests
For information about the limits on a ChangeResourceRecordSets request, see Limits in the Amazon Route 53 Developer Guide .
See also: AWS API Documentation
Request Syntax
response = client.change_resource_record_sets(
HostedZoneId='string',
ChangeBatch={
'Comment': 'string',
'Changes': [
{
'Action': 'CREATE'|'DELETE'|'UPSERT',
'ResourceRecordSet': {
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'SetIdentifier': 'string',
'Weight': 123,
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-north-1'|'cn-northwest-1'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'af-south-1'|'eu-south-1'|'eu-south-2',
'GeoLocation': {
'ContinentCode': 'string',
'CountryCode': 'string',
'SubdivisionCode': 'string'
},
'Failover': 'PRIMARY'|'SECONDARY',
'MultiValueAnswer': True|False,
'TTL': 123,
'ResourceRecords': [
{
'Value': 'string'
},
],
'AliasTarget': {
'HostedZoneId': 'string',
'DNSName': 'string',
'EvaluateTargetHealth': True|False
},
'HealthCheckId': 'string',
'TrafficPolicyInstanceId': 'string',
'CidrRoutingConfig': {
'CollectionId': 'string',
'LocationName': 'string'
}
}
},
]
}
)
[REQUIRED]
The ID of the hosted zone that contains the resource record sets that you want to change.
[REQUIRED]
A complex type that contains an optional comment and the Changes element.
Optional: Any comments you want to include about a change batch request.
Information about the changes to make to the record sets.
The information for each resource record set that you want to change.
The action to perform:
CREATE : Creates a resource record set that has the specified values.DELETE : Deletes a existing resource record set.Warning
To delete the resource record set that is associated with a traffic policy instance, use DeleteTrafficPolicyInstance. Amazon Route 53 will delete the resource record set automatically. If you delete the resource record set by using ChangeResourceRecordSets , Route 53 doesn't automatically delete the traffic policy instance, and you'll continue to be charged for it even though it's no longer in use.
UPSERT : If a resource record set doesn't already exist, Route 53 creates it. If a resource record set does exist, Route 53 updates it with the values in the request.Information about the resource record set to create, delete, or update.
For ChangeResourceRecordSets requests, the name of the record that you want to create, update, or delete. For ListResourceRecordSets responses, the name of a record in the specified hosted zone.
ChangeResourceRecordSets Only
Enter a fully qualified domain name, for example, www.example.com . You can optionally include a trailing dot. If you omit the trailing dot, Amazon Route 53 assumes that the domain name that you specify is fully qualified. This means that Route 53 treats www.example.com (without a trailing dot) and www.example.com. (with a trailing dot) as identical.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see DNS Domain Name Format in the Amazon Route 53 Developer Guide .
You can use the asterisk (*) wildcard to replace the leftmost label in a domain name, for example, *.example.com . Note the following:
*prod.example.com or prod*.example.com .Warning
You can't use the * wildcard for resource records sets that have a type of NS.
You can use the * wildcard as the leftmost label in a domain name, for example, *.example.com . You can't use an * for one of the middle labels, for example, marketing.*.example.com . In addition, the * must replace the entire label; for example, you can't specify prod*.example.com .
The DNS record type. For information about different record types and how data is encoded for them, see Supported DNS Resource Record Types in the Amazon Route 53 Developer Guide .
Valid values for basic resource record sets: A | AAAA | CAA | CNAME | DS | MX | NAPTR | NS | PTR | SOA | SPF | SRV | TXT
Values for weighted, latency, geolocation, and failover resource record sets: A | AAAA | CAA | CNAME | MX | NAPTR | PTR | SPF | SRV | TXT . When creating a group of weighted, latency, geolocation, or failover resource record sets, specify the same value for all of the resource record sets in the group.
Valid values for multivalue answer resource record sets: A | AAAA | MX | NAPTR | PTR | SPF | SRV | TXT
Note
SPF records were formerly used to verify the identity of the sender of email messages. However, we no longer recommend that you create resource record sets for which the value of Type is SPF . RFC 7208, Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1 , has been updated to say, "...[I]ts existence and mechanism defined in [RFC4408] have led to some interoperability issues. Accordingly, its use is no longer appropriate for SPF version 1; implementations are not to use it." In RFC 7208, see section 14.1, The SPF DNS Record Type.
Values for alias resource record sets:
AA If IPv6 is enabled for the distribution, create two resource record sets to route traffic to your distribution, one with a value of A and one with a value of AAAA .AA | AAAAAANS and SOA .Note
If you're creating an alias record that has the same name as the hosted zone (known as the zone apex), you can't route traffic to a record for which the value of Type is CNAME . This is because the alias record must have the same type as the record you're routing traffic to, and creating a CNAME record for the zone apex isn't supported even for an alias record.
Resource record sets that have a routing policy other than simple: An identifier that differentiates among multiple resource record sets that have the same combination of name and type, such as multiple weighted resource record sets named acme.example.com that have a type of A. In a group of resource record sets that have the same name and type, the value ofSetIdentifiermust be unique for each resource record set.
For information about routing policies, see Choosing a Routing Policy in the Amazon Route 53 Developer Guide .
Weighted resource record sets only: Among resource record sets that have the same combination of DNS name and type, a value that determines the proportion of DNS queries that Amazon Route 53 responds to using the current resource record set. Route 53 calculates the sum of the weights for the resource record sets that have the same combination of DNS name and type. Route 53 then responds to queries based on the ratio of a resource's weight to the total. Note the following:
Weight element for every weighted resource record set.ResourceRecord per weighted resource record set.Name and Type elements as weighted resource record sets.Name and Type elements.Weight to 0 for a resource record set, Route 53 never responds to queries with the applicable value for that resource record set. However, if you set Weight to 0 for all resource record sets that have the same combination of DNS name and type, traffic is routed to all resources with equal probability. The effect of setting Weight to 0 is different when you associate health checks with weighted resource record sets. For more information, see Options for Configuring Route 53 Active-Active and Active-Passive Failover in the Amazon Route 53 Developer Guide .Latency-based resource record sets only: The Amazon EC2 Region where you created the resource that this resource record set refers to. The resource typically is an Amazon Web Services resource, such as an EC2 instance or an ELB load balancer, and is referred to by an IP address or a DNS domain name, depending on the record type.
When Amazon Route 53 receives a DNS query for a domain name and type for which you have created latency resource record sets, Route 53 selects the latency resource record set that has the lowest latency between the end user and the associated Amazon EC2 Region. Route 53 then returns the value that is associated with the selected resource record set.
Note the following:
ResourceRecord per latency resource record set.Name and Type elements as latency resource record sets.Geolocation resource record sets only: A complex type that lets you control how Amazon Route 53 responds to DNS queries based on the geographic origin of the query. For example, if you want all queries from Africa to be routed to a web server with an IP address of192.0.2.111, create a resource record set with aTypeofAand aContinentCodeofAF.
Note
Although creating geolocation and geolocation alias resource record sets in a private hosted zone is allowed, it's not supported.
If you create separate resource record sets for overlapping geographic regions (for example, one resource record set for a continent and one for a country on the same continent), priority goes to the smallest geographic region. This allows you to route most queries for a continent to one resource and to route queries for a country on that continent to a different resource.
You can't create two geolocation resource record sets that specify the same geographic location.
The value * in the CountryCode element matches all geographic locations that aren't specified in other geolocation resource record sets that have the same values for the Name and Type elements.
Warning
Geolocation works by mapping IP addresses to locations. However, some IP addresses aren't mapped to geographic locations, so even if you create geolocation resource record sets that cover all seven continents, Route 53 will receive some DNS queries from locations that it can't identify. We recommend that you create a resource record set for which the value of CountryCode is * . Two groups of queries are routed to the resource that you specify in this record: queries that come from locations for which you haven't created geolocation resource record sets and queries from IP addresses that aren't mapped to a location. If you don't create a * resource record set, Route 53 returns a "no answer" response for queries from those locations.
You can't create non-geolocation resource record sets that have the same values for the Name and Type elements as geolocation resource record sets.
The two-letter code for the continent.
Amazon Route 53 supports the following continent codes:
Constraint: Specifying ContinentCode with either CountryCode or SubdivisionCode returns an InvalidInput error.
For geolocation resource record sets, the two-letter code for a country.
Amazon Route 53 uses the two-letter country codes that are specified in ISO standard 3166-1 alpha-2.
For geolocation resource record sets, the two-letter code for a state of the United States. Route 53 doesn't support any other values for SubdivisionCode . For a list of state abbreviations, see Appendix B: Two–Letter State and Possession Abbreviations on the United States Postal Service website.
If you specify subdivisioncode , you must also specify US for CountryCode .
Failover resource record sets only: To configure failover, you add theFailoverelement to two resource record sets. For one resource record set, you specifyPRIMARYas the value forFailover; for the other resource record set, you specifySECONDARY. In addition, you include theHealthCheckIdelement and specify the health check that you want Amazon Route 53 to perform for each resource record set.
Except where noted, the following failover behaviors assume that you have included the HealthCheckId element in both resource record sets:
HealthCheckId element for the secondary resource record set, and if the primary resource record set is unhealthy, Route 53 always responds to DNS queries with the applicable value from the secondary resource record set. This is true regardless of the health of the associated endpoint.You can't create non-failover resource record sets that have the same values for the Name and Type elements as failover resource record sets.
For failover alias resource record sets, you must also include the EvaluateTargetHealth element and set the value to true.
For more information about configuring failover for Route 53, see the following topics in the Amazon Route 53 Developer Guide :
Multivalue answer resource record sets only : To route traffic approximately randomly to multiple resources, such as web servers, create one multivalue answer record for each resource and specifytrueforMultiValueAnswer. Note the following:
You can't create multivalue answer alias records.
The resource record cache time to live (TTL), in seconds. Note the following:
TTL . Amazon Route 53 uses the value of TTL for the alias target.HealthCheckId element), we recommend that you specify a TTL of 60 seconds or less so clients respond quickly to changes in health status.TTL .TTL of 60 seconds for all of the non-alias weighted resource record sets that have the same name and type. Values other than 60 seconds (the TTL for load balancers) will change the effect of the values that you specify for Weight .Information about the resource records to act upon.
Note
If you're creating an alias resource record set, omit ResourceRecords .
Information specific to the resource record.
Note
If you're creating an alias resource record set, omit ResourceRecord .
The current or new DNS record value, not to exceed 4,000 characters. In the case of a DELETE action, if the current value does not match the actual value, an error is returned. For descriptions about how to format Value for different record types, see Supported DNS Resource Record Types in the Amazon Route 53 Developer Guide .
You can specify more than one value for all record types except CNAME and SOA .
Note
If you're creating an alias resource record set, omit Value .
Alias resource record sets only: Information about the Amazon Web Services resource, such as a CloudFront distribution or an Amazon S3 bucket, that you want to route traffic to.
If you're creating resource records sets for a private hosted zone, note the following:
Alias resource records sets only : The value used depends on where you want to route traffic:Amazon API Gateway custom regional APIs and edge-optimized APIs
Specify the hosted zone ID for your API. You can get the applicable value using the CLI command get-domain-names:
regionalHostedZoneId .distributionHostedZoneId .Amazon Virtual Private Cloud interface VPC endpoint
Specify the hosted zone ID for your interface endpoint. You can get the value of HostedZoneId using the CLI command describe-vpc-endpoints.
CloudFront distribution
Specify Z2FDTNDATAQYW2 .
Note
Alias resource record sets for CloudFront can't be created in a private zone.
Elastic Beanstalk environment
Specify the hosted zone ID for the region that you created the environment in. The environment must have a regionalized subdomain. For a list of regions and the corresponding hosted zone IDs, see Elastic Beanstalk endpoints and quotas in the the Amazon Web Services General Reference .
ELB load balancer
Specify the value of the hosted zone ID for the load balancer. Use the following methods to get the hosted zone ID:
DescribeLoadBalancers to get the applicable value. For more information, see the applicable guide:CanonicalHostedZoneNameId .CanonicalHostedZoneId .describe-load-balancers to get the applicable value. For more information, see the applicable guide:CanonicalHostedZoneNameId .CanonicalHostedZoneId .Global Accelerator accelerator
Specify Z2BJ6XQ5FK7U4H .
An Amazon S3 bucket configured as a static website
Specify the hosted zone ID for the region that you created the bucket in. For more information about valid values, see the table Amazon S3 Website Endpoints in the Amazon Web Services General Reference .
Another Route 53 resource record set in your hosted zone
Specify the hosted zone ID of your hosted zone. (An alias resource record set can't reference a resource record set in a different hosted zone.)
Alias resource record sets only: The value that you specify depends on where you want to route queries:Amazon API Gateway custom regional APIs and edge-optimized APIs
Specify the applicable domain name for your API. You can get the applicable value using the CLI command get-domain-names:
regionalDomainName .distributionDomainName . This is the name of the associated CloudFront distribution, such as da1b2c3d4e5.cloudfront.net .Note
The name of the record that you're creating must match a custom domain name for your API, such as api.example.com .
Amazon Virtual Private Cloud interface VPC endpoint
Enter the API endpoint for the interface endpoint, such as vpce-123456789abcdef01-example-us-east-1a.elasticloadbalancing.us-east-1.vpce.amazonaws.com . For edge-optimized APIs, this is the domain name for the corresponding CloudFront distribution. You can get the value of DnsName using the CLI command describe-vpc-endpoints.
CloudFront distribution
Specify the domain name that CloudFront assigned when you created your distribution.
Your CloudFront distribution must include an alternate domain name that matches the name of the resource record set. For example, if the name of the resource record set is acme.example.com , your CloudFront distribution must include acme.example.com as one of the alternate domain names. For more information, see Using Alternate Domain Names (CNAMEs) in the Amazon CloudFront Developer Guide .
You can't create a resource record set in a private hosted zone to route traffic to a CloudFront distribution.
Note
For failover alias records, you can't specify a CloudFront distribution for both the primary and secondary records. A distribution must include an alternate domain name that matches the name of the record. However, the primary and secondary records have the same name, and you can't include the same alternate domain name in more than one distribution.
Elastic Beanstalk environment
If the domain name for your Elastic Beanstalk environment includes the region that you deployed the environment in, you can create an alias record that routes traffic to the environment. For example, the domain name my-environment.us-west-2.elasticbeanstalk.com is a regionalized domain name.
Warning
For environments that were created before early 2016, the domain name doesn't include the region. To route traffic to these environments, you must create a CNAME record instead of an alias record. Note that you can't create a CNAME record for the root domain name. For example, if your domain name is example.com, you can create a record that routes traffic for acme.example.com to your Elastic Beanstalk environment, but you can't create a record that routes traffic for example.com to your Elastic Beanstalk environment.
For Elastic Beanstalk environments that have regionalized subdomains, specify the CNAME attribute for the environment. You can use the following methods to get the value of the CNAME attribute:
DescribeEnvironments action to get the value of the CNAME attribute. For more information, see DescribeEnvironments in the Elastic Beanstalk API Reference .describe-environments command to get the value of the CNAME attribute. For more information, see describe-environments in the CLI Command Reference .ELB load balancer
Specify the DNS name that is associated with the load balancer. Get the DNS name by using the Amazon Web Services Management Console, the ELB API, or the CLI.
DescribeLoadBalancers to get the value of DNSName . For more information, see the applicable guide:describe-load-balancers to get the value of DNSName . For more information, see the applicable guide:Global Accelerator accelerator
Specify the DNS name for your accelerator:
Amazon S3 bucket that is configured as a static website
Specify the domain name of the Amazon S3 website endpoint that you created the bucket in, for example, s3-website.us-east-2.amazonaws.com . For more information about valid values, see the table Amazon S3 Website Endpoints in the Amazon Web Services General Reference . For more information about using S3 buckets for websites, see Getting Started with Amazon Route 53 in the Amazon Route 53 Developer Guide.
Another Route 53 resource record set
Specify the value of the Name element for a resource record set in the current hosted zone.
Note
If you're creating an alias record that has the same name as the hosted zone (known as the zone apex), you can't specify the domain name for a record for which the value of Type is CNAME . This is because the alias record must have the same type as the record that you're routing traffic to, and creating a CNAME record for the zone apex isn't supported even for an alias record.
Applies only to alias, failover alias, geolocation alias, latency alias, and weighted alias resource record sets: WhenEvaluateTargetHealthistrue, an alias resource record set inherits the health of the referenced Amazon Web Services resource, such as an ELB load balancer or another resource record set in the hosted zone.
Note the following:
CloudFront distributions
You can't set EvaluateTargetHealth to true when the alias target is a CloudFront distribution.
Elastic Beanstalk environments that have regionalized subdomains
If you specify an Elastic Beanstalk environment in DNSName and the environment contains an ELB load balancer, Elastic Load Balancing routes queries only to the healthy Amazon EC2 instances that are registered with the load balancer. (An environment automatically contains an ELB load balancer if it includes more than one Amazon EC2 instance.) If you set EvaluateTargetHealth to true and either no Amazon EC2 instances are healthy or the load balancer itself is unhealthy, Route 53 routes queries to other available resources that are healthy, if any.
If the environment contains a single Amazon EC2 instance, there are no special requirements.
ELB load balancers
Health checking behavior depends on the type of load balancer:
DNSName , Elastic Load Balancing routes queries only to the healthy Amazon EC2 instances that are registered with the load balancer. If you set EvaluateTargetHealth to true and either no EC2 instances are healthy or the load balancer itself is unhealthy, Route 53 routes queries to other resources.EvaluateTargetHealth to true , Route 53 routes queries to the load balancer based on the health of the target groups that are associated with the load balancer:Note
When you create a load balancer, you configure settings for Elastic Load Balancing health checks; they're not Route 53 health checks, but they perform a similar function. Do not create Route 53 health checks for the EC2 instances that you register with an ELB load balancer.
S3 buckets
There are no special requirements for setting EvaluateTargetHealth to true when the alias target is an S3 bucket.
Other records in the same hosted zone
If the Amazon Web Services resource that you specify in DNSName is a record or a group of records (for example, a group of weighted records) but is not another alias record, we recommend that you associate a health check with all of the records in the alias target. For more information, see What Happens When You Omit Health Checks? in the Amazon Route 53 Developer Guide .
For more information and examples, see Amazon Route 53 Health Checks and DNS Failover in the Amazon Route 53 Developer Guide .
If you want Amazon Route 53 to return this resource record set in response to a DNS query only when the status of a health check is healthy, include the HealthCheckId element and specify the ID of the applicable health check.
Route 53 determines whether a resource record set is healthy based on one of the following:
Warning
Route 53 doesn't check the health of the endpoint that is specified in the resource record set, for example, the endpoint specified by the IP address in the Value element. When you add a HealthCheckId element to a resource record set, Route 53 checks the health of the endpoint that you specified in the health check.
For more information, see the following topics in the Amazon Route 53 Developer Guide :
When to Specify HealthCheckId
Specifying a value for HealthCheckId is useful only when Route 53 is choosing between two or more resource record sets to respond to a DNS query, and you want Route 53 to base the choice in part on the status of a health check. Configuring health checks makes sense only in the following configurations:
EvaluateTargetHealth to true for an alias resource record set in a group of resource record sets that have the same routing policy, name, and type (such as multiple weighted records named www.example.com with a type of A).If the health check status is healthy, Route 53 considers the alias resource record set to be healthy and includes the alias record among the records that it responds to DNS queries with.
If the health check status is unhealthy, Route 53 stops responding to DNS queries using the alias resource record set.
Note
The alias resource record set can also route traffic to a group of non-alias resource record sets that have the same routing policy, name, and type. In that configuration, associate health checks with all of the resource record sets in the group of non-alias resource record sets.
Geolocation Routing
For geolocation resource record sets, if an endpoint is unhealthy, Route 53 looks for a resource record set for the larger, associated geographic region. For example, suppose you have resource record sets for a state in the United States, for the entire United States, for North America, and a resource record set that has * for CountryCode is * , which applies to all locations. If the endpoint for the state resource record set is unhealthy, Route 53 checks for healthy resource record sets in the following order until it finds a resource record set for which the endpoint is healthy:
Specifying the Health Check Endpoint by Domain Name
If your health checks specify the endpoint only by domain name, we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com . For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com ), not the name of the resource record sets ( www.example.com ).
Warning
Health check results will be unpredictable if you do the following:
FullyQualifiedDomainName as the name of a resource record set.When you create a traffic policy instance, Amazon Route 53 automatically creates a resource record set. TrafficPolicyInstanceId is the ID of the traffic policy instance that Route 53 created this resource record set for.
Warning
To delete the resource record set that is associated with a traffic policy instance, use DeleteTrafficPolicyInstance . Route 53 will delete the resource record set automatically. If you delete the resource record set by using ChangeResourceRecordSets , Route 53 doesn't automatically delete the traffic policy instance, and you'll continue to be charged for it even though it's no longer in use.
The object that is specified in resource record set object when you are linking a resource record set to a CIDR location.
A LocationName with an asterisk “*” can be used to create a default CIDR record. CollectionId is still required for default record.
The CIDR collection ID.
The CIDR collection location name.
dict
Response Syntax
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
(dict) --
A complex type containing the response for the request.
ChangeInfo (dict) --
A complex type that contains information about changes made to your hosted zone.
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.InvalidChangeBatchRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.PriorRequestNotCompleteExamples
The following example creates a resource record set that routes Internet traffic to a resource with an IP address of 192.0.2.44.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.44',
},
],
'TTL': 60,
'Type': 'A',
},
},
],
'Comment': 'Web server for example.com',
},
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'Web server for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates two weighted resource record sets. The resource with a Weight of 100 will get 1/3rd of traffic (100/100+200), and the other resource will get the rest of the traffic for example.com.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'HealthCheckId': 'abcdef11-2222-3333-4444-555555fedcba',
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.44',
},
],
'SetIdentifier': 'Seattle data center',
'TTL': 60,
'Type': 'A',
'Weight': 100,
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'HealthCheckId': 'abcdef66-7777-8888-9999-000000fedcba',
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.45',
},
],
'SetIdentifier': 'Portland data center',
'TTL': 60,
'Type': 'A',
'Weight': 200,
},
},
],
'Comment': 'Web servers for example.com',
},
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'Web servers for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates an alias resource record set that routes traffic to a CloudFront distribution.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'd123rk29d0stfj.cloudfront.net',
'EvaluateTargetHealth': False,
'HostedZoneId': 'Z2FDTNDATAQYW2',
},
'Name': 'example.com',
'Type': 'A',
},
},
],
'Comment': 'CloudFront distribution for example.com',
},
# Depends on the type of resource that you want to route traffic to
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'CloudFront distribution for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates two weighted alias resource record sets that route traffic to ELB load balancers. The resource with a Weight of 100 will get 1/3rd of traffic (100/100+200), and the other resource will get the rest of the traffic for example.com.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-123456789.us-east-2.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z3AADJGX6KTTL2',
},
'Name': 'example.com',
'SetIdentifier': 'Ohio region',
'Type': 'A',
'Weight': 100,
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-987654321.us-west-2.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z1H1FL5HABSF5',
},
'Name': 'example.com',
'SetIdentifier': 'Oregon region',
'Type': 'A',
'Weight': 200,
},
},
],
'Comment': 'ELB load balancers for example.com',
},
# Depends on the type of resource that you want to route traffic to
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'ELB load balancers for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates two latency resource record sets that route traffic to EC2 instances. Traffic for example.com is routed either to the Ohio region or the Oregon region, depending on the latency between the user and those regions.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'HealthCheckId': 'abcdef11-2222-3333-4444-555555fedcba',
'Name': 'example.com',
'Region': 'us-east-2',
'ResourceRecords': [
{
'Value': '192.0.2.44',
},
],
'SetIdentifier': 'Ohio region',
'TTL': 60,
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'HealthCheckId': 'abcdef66-7777-8888-9999-000000fedcba',
'Name': 'example.com',
'Region': 'us-west-2',
'ResourceRecords': [
{
'Value': '192.0.2.45',
},
],
'SetIdentifier': 'Oregon region',
'TTL': 60,
'Type': 'A',
},
},
],
'Comment': 'EC2 instances for example.com',
},
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'EC2 instances for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates two latency alias resource record sets that route traffic for example.com to ELB load balancers. Requests are routed either to the Ohio region or the Oregon region, depending on the latency between the user and those regions.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-123456789.us-east-2.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z3AADJGX6KTTL2',
},
'Name': 'example.com',
'Region': 'us-east-2',
'SetIdentifier': 'Ohio region',
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-987654321.us-west-2.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z1H1FL5HABSF5',
},
'Name': 'example.com',
'Region': 'us-west-2',
'SetIdentifier': 'Oregon region',
'Type': 'A',
},
},
],
'Comment': 'ELB load balancers for example.com',
},
# Depends on the type of resource that you want to route traffic to
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'ELB load balancers for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates primary and secondary failover resource record sets that route traffic to EC2 instances. Traffic is generally routed to the primary resource, in the Ohio region. If that resource is unavailable, traffic is routed to the secondary resource, in the Oregon region.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'Failover': 'PRIMARY',
'HealthCheckId': 'abcdef11-2222-3333-4444-555555fedcba',
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.44',
},
],
'SetIdentifier': 'Ohio region',
'TTL': 60,
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'Failover': 'SECONDARY',
'HealthCheckId': 'abcdef66-7777-8888-9999-000000fedcba',
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.45',
},
],
'SetIdentifier': 'Oregon region',
'TTL': 60,
'Type': 'A',
},
},
],
'Comment': 'Failover configuration for example.com',
},
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'Failover configuration for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates primary and secondary failover alias resource record sets that route traffic to ELB load balancers. Traffic is generally routed to the primary resource, in the Ohio region. If that resource is unavailable, traffic is routed to the secondary resource, in the Oregon region.
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-123456789.us-east-2.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z3AADJGX6KTTL2',
},
'Failover': 'PRIMARY',
'Name': 'example.com',
'SetIdentifier': 'Ohio region',
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-987654321.us-west-2.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z1H1FL5HABSF5',
},
'Failover': 'SECONDARY',
'Name': 'example.com',
'SetIdentifier': 'Oregon region',
'Type': 'A',
},
},
],
'Comment': 'Failover alias configuration for example.com',
},
# Depends on the type of resource that you want to route traffic to
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'Failover alias configuration for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates four geolocation resource record sets that use IPv4 addresses to route traffic to resources such as web servers running on EC2 instances. Traffic is routed to one of four IP addresses, for North America (NA), for South America (SA), for Europe (EU), and for all other locations (*).
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'GeoLocation': {
'ContinentCode': 'NA',
},
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.44',
},
],
'SetIdentifier': 'North America',
'TTL': 60,
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'GeoLocation': {
'ContinentCode': 'SA',
},
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.45',
},
],
'SetIdentifier': 'South America',
'TTL': 60,
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'GeoLocation': {
'ContinentCode': 'EU',
},
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.46',
},
],
'SetIdentifier': 'Europe',
'TTL': 60,
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'GeoLocation': {
'CountryCode': '*',
},
'Name': 'example.com',
'ResourceRecords': [
{
'Value': '192.0.2.47',
},
],
'SetIdentifier': 'Other locations',
'TTL': 60,
'Type': 'A',
},
},
],
'Comment': 'Geolocation configuration for example.com',
},
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'Geolocation configuration for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
The following example creates four geolocation alias resource record sets that route traffic to ELB load balancers. Traffic is routed to one of four IP addresses, for North America (NA), for South America (SA), for Europe (EU), and for all other locations (*).
response = client.change_resource_record_sets(
ChangeBatch={
'Changes': [
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-123456789.us-east-2.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z3AADJGX6KTTL2',
},
'GeoLocation': {
'ContinentCode': 'NA',
},
'Name': 'example.com',
'SetIdentifier': 'North America',
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-234567890.sa-east-1.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z2P70J7HTTTPLU',
},
'GeoLocation': {
'ContinentCode': 'SA',
},
'Name': 'example.com',
'SetIdentifier': 'South America',
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-234567890.eu-central-1.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z215JYRZR1TBD5',
},
'GeoLocation': {
'ContinentCode': 'EU',
},
'Name': 'example.com',
'SetIdentifier': 'Europe',
'Type': 'A',
},
},
{
'Action': 'CREATE',
'ResourceRecordSet': {
'AliasTarget': {
'DNSName': 'example-com-234567890.ap-southeast-1.elb.amazonaws.com ',
'EvaluateTargetHealth': True,
'HostedZoneId': 'Z1LMS91P8CMLE5',
},
'GeoLocation': {
'CountryCode': '*',
},
'Name': 'example.com',
'SetIdentifier': 'Other locations',
'Type': 'A',
},
},
],
'Comment': 'Geolocation alias configuration for example.com',
},
# Depends on the type of resource that you want to route traffic to
HostedZoneId='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'ChangeInfo': {
'Comment': 'Geolocation alias configuration for example.com',
'Id': '/change/C2682N5HXP0BZ4',
'Status': 'PENDING',
'SubmittedAt': datetime(2017, 2, 10, 1, 36, 41, 4, 41, 0),
},
'ResponseMetadata': {
'...': '...',
},
}
Adds, edits, or deletes tags for a health check or a hosted zone.
For information about using tags for cost allocation, see Using Cost Allocation Tags in the Billing and Cost Management User Guide .
See also: AWS API Documentation
Request Syntax
response = client.change_tags_for_resource(
ResourceType='healthcheck'|'hostedzone',
ResourceId='string',
AddTags=[
{
'Key': 'string',
'Value': 'string'
},
],
RemoveTagKeys=[
'string',
]
)
[REQUIRED]
The type of the resource.
healthcheck .hostedzone .[REQUIRED]
The ID of the resource for which you want to add, change, or delete tags.
A complex type that contains a list of the tags that you want to add to the specified health check or hosted zone and/or the tags that you want to edit Value for.
You can add a maximum of 10 tags to a health check or a hosted zone.
A complex type that contains information about a tag that you want to add or edit for the specified health check or hosted zone.
The value of Key depends on the operation that you want to perform:
Key is the name that you want to give the new tag.Key is the name of the tag that you want to change the Value for.Key is the name of the tag you want to remove.Name tag. In the Amazon Route 53 console, the list of your health checks includes a Name column that lets you see the name that you've given to each health check.The value of Value depends on the operation that you want to perform:
Value is the value that you want to give the new tag.Value is the new value that you want to assign the tag.A complex type that contains a list of the tags that you want to delete from the specified health check or hosted zone. You can specify up to 10 keys.
dict
Response Syntax
{}
Response Structure
(dict) --
Empty response for the request.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.PriorRequestNotCompleteRoute53.Client.exceptions.ThrottlingExceptionExamples
The following example adds two tags and removes one tag from the hosted zone with ID Z3M3LMPEXAMPLE.
response = client.change_tags_for_resource(
AddTags=[
{
'Key': 'apex',
'Value': '3874',
},
{
'Key': 'acme',
'Value': '4938',
},
],
RemoveTagKeys=[
'Nadir',
],
ResourceId='Z3M3LMPEXAMPLE',
# Valid values are healthcheck and hostedzone.
ResourceType='hostedzone',
)
print(response)
Expected Output:
{
'ResponseMetadata': {
'...': '...',
},
}
close()¶Closes underlying endpoint connections.
create_cidr_collection(**kwargs)¶Creates a CIDR collection in the current Amazon Web Services account.
See also: AWS API Documentation
Request Syntax
response = client.create_cidr_collection(
Name='string',
CallerReference='string'
)
[REQUIRED]
A unique identifier for the account that can be used to reference the collection from other API calls.
[REQUIRED]
A client-specific token that allows requests to be securely retried so that the intended outcome will only occur once, retries receive a similar response, and there are no additional edge cases to handle.
dict
Response Syntax
{
'Collection': {
'Arn': 'string',
'Id': 'string',
'Name': 'string',
'Version': 123
},
'Location': 'string'
}
Response Structure
(dict) --
Collection (dict) --
A complex type that contains information about the CIDR collection.
Arn (string) --
The ARN of the collection. Can be used to reference the collection in IAM policy or in another Amazon Web Services account.
Id (string) --
The unique ID of the CIDR collection.
Name (string) --
The name of a CIDR collection.
Version (integer) --
A sequential counter that Route 53 sets to 1 when you create a CIDR collection and increments by 1 each time you update settings for the CIDR collection.
Location (string) --
A unique URL that represents the location for the CIDR collection.
Exceptions
Route53.Client.exceptions.LimitsExceededRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.CidrCollectionAlreadyExistsExceptionRoute53.Client.exceptions.ConcurrentModificationcreate_health_check(**kwargs)¶Creates a new health check.
For information about adding health checks to resource record sets, see HealthCheckId in ChangeResourceRecordSets.
ELB Load Balancers
If you're registering EC2 instances with an Elastic Load Balancing (ELB) load balancer, do not create Amazon Route 53 health checks for the EC2 instances. When you register an EC2 instance with a load balancer, you configure settings for an ELB health check, which performs a similar function to a Route 53 health check.
Private Hosted Zones
You can associate health checks with failover resource record sets in a private hosted zone. Note the following:
StatusCheckFailed metric, add an alarm to the metric, and then create a health check that is based on the state of the alarm. For information about creating CloudWatch metrics and alarms by using the CloudWatch console, see the Amazon CloudWatch User Guide.See also: AWS API Documentation
Request Syntax
response = client.create_health_check(
CallerReference='string',
HealthCheckConfig={
'IPAddress': 'string',
'Port': 123,
'Type': 'HTTP'|'HTTPS'|'HTTP_STR_MATCH'|'HTTPS_STR_MATCH'|'TCP'|'CALCULATED'|'CLOUDWATCH_METRIC'|'RECOVERY_CONTROL',
'ResourcePath': 'string',
'FullyQualifiedDomainName': 'string',
'SearchString': 'string',
'RequestInterval': 123,
'FailureThreshold': 123,
'MeasureLatency': True|False,
'Inverted': True|False,
'Disabled': True|False,
'HealthThreshold': 123,
'ChildHealthChecks': [
'string',
],
'EnableSNI': True|False,
'Regions': [
'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
],
'AlarmIdentifier': {
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-central-1'|'eu-central-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-northwest-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1',
'Name': 'string'
},
'InsufficientDataHealthStatus': 'Healthy'|'Unhealthy'|'LastKnownStatus',
'RoutingControlArn': 'string'
}
)
[REQUIRED]
A unique string that identifies the request and that allows you to retry a failed CreateHealthCheck request without the risk of creating two identical health checks:
CreateHealthCheck request with the same CallerReference and settings as a previous request, and if the health check doesn't exist, Amazon Route 53 creates the health check. If the health check does exist, Route 53 returns the settings for the existing health check.CreateHealthCheck request with the same CallerReference as a deleted health check, regardless of the settings, Route 53 returns a HealthCheckAlreadyExists error.CreateHealthCheck request with the same CallerReference as an existing health check but with different settings, Route 53 returns a HealthCheckAlreadyExists error.CreateHealthCheck request with a unique CallerReference but settings identical to an existing health check, Route 53 creates the health check.[REQUIRED]
A complex type that contains settings for a new health check.
The IPv4 or IPv6 IP address of the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress , Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval . Using an IP address returned by DNS, Route 53 then checks the health of the endpoint.
Use one of the following formats for the value of IPAddress :
192.0.2.44 .2001:0db8:85a3:0000:0000:abcd:0001:2345 . You can also shorten IPv6 addresses as described in RFC 5952, for example, 2001:db8:85a3::abcd:1:2345 .If the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for IPAddress . This ensures that the IP address of your instance will never change.
For more information, see FullyQualifiedDomainName.
Constraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:
When the value of Type is CALCULATED or CLOUDWATCH_METRIC , omit IPAddress .
The port on the endpoint that you want Amazon Route 53 to perform health checks on.
Note
Don't specify a value for Port when you specify a value for Type of CLOUDWATCH_METRIC or CALCULATED .
The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.
Warning
You can't change the value of Type after you create a health check.
You can create the following types of health checks:
Warning
If you specify HTTPS for the value of Type , the endpoint must support TLS v1.0 or later.
SearchString .HTTPS request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString .OK , the health check is considered healthy. If the state is ALARM , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is OK or ALARM , the health check status depends on the setting for InsufficientDataHealthStatus : Healthy , Unhealthy , or LastKnownStatus .HealthThreshold .ON , the health check is considered healthy. If the state is OFF , the health check is considered unhealthy.For more information, see How Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
The path, if any, that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example, the file /docs/route53-health-check.html. You can also include query string parameters, for example, /welcome.html?language=jp&login=y .
Amazon Route 53 behavior depends on whether you specify a value for IPAddress .
If you specify a value forIPAddress:
Amazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
When Route 53 checks the health of an endpoint, here is how it constructs the Host header:
80 for Port and HTTP or HTTP_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.443 for Port and HTTPS or HTTPS_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.Port and any value except TCP for Type , Route 53 passes FullyQualifiedDomainName:Port to the endpoint in the Host header.If you don't specify a value for FullyQualifiedDomainName , Route 53 substitutes the value of IPAddress in the Host header in each of the preceding cases.
If you don't specify a value forIPAddress:
Route 53 sends a DNS request to the domain that you specify for FullyQualifiedDomainName at the interval that you specify for RequestInterval . Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
Note
If you don't specify a value for IPAddress , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no resource record set with a type of A for the name that you specify for FullyQualifiedDomainName , the health check fails with a "DNS resolution failed" error.
If you want to check the health of weighted, latency, or failover resource record sets and you choose to specify the endpoint only by FullyQualifiedDomainName , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com), not the name of the resource record sets (www.example.com).
Warning
In this configuration, if you create a health check for which the value of FullyQualifiedDomainName matches the name of the resource record sets and you then associate the health check with those resource record sets, health check results will be unpredictable.
In addition, if the value that you specify for Type is HTTP , HTTPS , HTTP_STR_MATCH , or HTTPS_STR_MATCH , Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify a value for IPAddress . If the value of Type is TCP , Route 53 doesn't pass a Host header.
If the value of Type is HTTP_STR_MATCH or HTTPS_STR_MATCH , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.
Route 53 considers case when searching for SearchString in the response body.
The number of seconds between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.
Warning
You can't change the value of RequestInterval after you create a health check.
If you don't specify a value for RequestInterval , the default value is 30 seconds.
The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see How Amazon Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
If you don't specify a value for FailureThreshold , the default value is three health checks.
Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple Amazon Web Services regions and your endpoint, and to display CloudWatch latency graphs on the Health Checks page in the Route 53 console.
Warning
You can't change the value of MeasureLatency after you create a health check.
Specify whether you want Amazon Route 53 to invert the status of a health check, for example, to consider a health check unhealthy when it otherwise would be considered healthy.
Stops Route 53 from performing health checks. When you disable a health check, here's what happens:
After you disable a health check, Route 53 considers the status of the health check to always be healthy. If you configured DNS failover, Route 53 continues to route traffic to the corresponding resources. If you want to stop routing traffic to a resource, change the value of Inverted.
Charges for a health check still apply when the health check is disabled. For more information, see Amazon Route 53 Pricing.
The number of child health checks that are associated with a CALCULATED health check that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy. To specify the child health checks that you want to associate with a CALCULATED health check, use the ChildHealthChecks element.
Note the following:
0 , Route 53 always considers this health check to be healthy.(CALCULATED Health Checks Only) A complex type that contains one ChildHealthCheck element for each health check that you want to associate with a CALCULATED health check.
Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
Some endpoints require that HTTPS requests include the host name in the client_hello message. If you don't enable SNI, the status of the health check will be SSL alert handshake_failure . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.
The SSL/TLS certificate on your endpoint includes a domain name in the Common Name field and possibly several more in the Subject Alternative Names field. One of the domain names in the certificate should match the value that you specify for FullyQualifiedDomainName . If the endpoint responds to the client_hello message with a certificate that does not include the domain name that you specified in FullyQualifiedDomainName , a health checker will retry the handshake. In the second attempt, the health checker will omit FullyQualifiedDomainName from the client_hello message.
A complex type that contains one Region element for each region from which you want Amazon Route 53 health checkers to check the specified endpoint.
If you don't specify any regions, Route 53 health checkers automatically performs checks from all of the regions that are listed under Valid Values .
If you update a health check to remove a region that has been performing health checks, Route 53 will briefly continue to perform checks from that region to ensure that some health checkers are always checking the endpoint (for example, if you replace three regions with four different regions).
A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in.
For the current list of CloudWatch regions, see Amazon CloudWatch endpoints and quotas in the Amazon Web Services General Reference .
The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
Note
Route 53 supports CloudWatch alarms with the following features:
When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:
Healthy : Route 53 considers the health check to be healthy.Unhealthy : Route 53 considers the health check to be unhealthy.LastKnownStatus : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy.The Amazon Resource Name (ARN) for the Route 53 Application Recovery Controller routing control.
For more information about Route 53 Application Recovery Controller, see Route 53 Application Recovery Controller Developer Guide..
dict
Response Syntax
{
'HealthCheck': {
'Id': 'string',
'CallerReference': 'string',
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
},
'HealthCheckConfig': {
'IPAddress': 'string',
'Port': 123,
'Type': 'HTTP'|'HTTPS'|'HTTP_STR_MATCH'|'HTTPS_STR_MATCH'|'TCP'|'CALCULATED'|'CLOUDWATCH_METRIC'|'RECOVERY_CONTROL',
'ResourcePath': 'string',
'FullyQualifiedDomainName': 'string',
'SearchString': 'string',
'RequestInterval': 123,
'FailureThreshold': 123,
'MeasureLatency': True|False,
'Inverted': True|False,
'Disabled': True|False,
'HealthThreshold': 123,
'ChildHealthChecks': [
'string',
],
'EnableSNI': True|False,
'Regions': [
'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
],
'AlarmIdentifier': {
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-central-1'|'eu-central-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-northwest-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1',
'Name': 'string'
},
'InsufficientDataHealthStatus': 'Healthy'|'Unhealthy'|'LastKnownStatus',
'RoutingControlArn': 'string'
},
'HealthCheckVersion': 123,
'CloudWatchAlarmConfiguration': {
'EvaluationPeriods': 123,
'Threshold': 123.0,
'ComparisonOperator': 'GreaterThanOrEqualToThreshold'|'GreaterThanThreshold'|'LessThanThreshold'|'LessThanOrEqualToThreshold',
'Period': 123,
'MetricName': 'string',
'Namespace': 'string',
'Statistic': 'Average'|'Sum'|'SampleCount'|'Maximum'|'Minimum',
'Dimensions': [
{
'Name': 'string',
'Value': 'string'
},
]
}
},
'Location': 'string'
}
Response Structure
(dict) --
A complex type containing the response information for the new health check.
HealthCheck (dict) --
A complex type that contains identifying information about the health check.
Id (string) --
The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long.
CallerReference (string) --
A unique string that you specified when you created the health check.
LinkedService (dict) --
If the health check was created by another service, the service that created the health check. When a health check is created by another service, you can't edit or delete it using Amazon Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
HealthCheckConfig (dict) --
A complex type that contains detailed information about one health check.
IPAddress (string) --
The IPv4 or IPv6 IP address of the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress , Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval . Using an IP address returned by DNS, Route 53 then checks the health of the endpoint.
Use one of the following formats for the value of IPAddress :
192.0.2.44 .2001:0db8:85a3:0000:0000:abcd:0001:2345 . You can also shorten IPv6 addresses as described in RFC 5952, for example, 2001:db8:85a3::abcd:1:2345 .If the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for IPAddress . This ensures that the IP address of your instance will never change.
For more information, see FullyQualifiedDomainName.
Constraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:
When the value of Type is CALCULATED or CLOUDWATCH_METRIC , omit IPAddress .
Port (integer) --
The port on the endpoint that you want Amazon Route 53 to perform health checks on.
Note
Don't specify a value for Port when you specify a value for Type of CLOUDWATCH_METRIC or CALCULATED .
Type (string) --
The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.
Warning
You can't change the value of Type after you create a health check.
You can create the following types of health checks:
Warning
If you specify HTTPS for the value of Type , the endpoint must support TLS v1.0 or later.
SearchString .HTTPS request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString .OK , the health check is considered healthy. If the state is ALARM , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is OK or ALARM , the health check status depends on the setting for InsufficientDataHealthStatus : Healthy , Unhealthy , or LastKnownStatus .HealthThreshold .ON , the health check is considered healthy. If the state is OFF , the health check is considered unhealthy.For more information, see How Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
ResourcePath (string) --
The path, if any, that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example, the file /docs/route53-health-check.html. You can also include query string parameters, for example, /welcome.html?language=jp&login=y .
FullyQualifiedDomainName (string) --
Amazon Route 53 behavior depends on whether you specify a value for IPAddress .
If you specify a value for
IPAddress:
Amazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
When Route 53 checks the health of an endpoint, here is how it constructs the Host header:
80 for Port and HTTP or HTTP_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.443 for Port and HTTPS or HTTPS_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.Port and any value except TCP for Type , Route 53 passes FullyQualifiedDomainName:Port to the endpoint in the Host header.If you don't specify a value for FullyQualifiedDomainName , Route 53 substitutes the value of IPAddress in the Host header in each of the preceding cases.
If you don't specify a value for
IPAddress:
Route 53 sends a DNS request to the domain that you specify for FullyQualifiedDomainName at the interval that you specify for RequestInterval . Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
Note
If you don't specify a value for IPAddress , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no resource record set with a type of A for the name that you specify for FullyQualifiedDomainName , the health check fails with a "DNS resolution failed" error.
If you want to check the health of weighted, latency, or failover resource record sets and you choose to specify the endpoint only by FullyQualifiedDomainName , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com), not the name of the resource record sets (www.example.com).
Warning
In this configuration, if you create a health check for which the value of FullyQualifiedDomainName matches the name of the resource record sets and you then associate the health check with those resource record sets, health check results will be unpredictable.
In addition, if the value that you specify for Type is HTTP , HTTPS , HTTP_STR_MATCH , or HTTPS_STR_MATCH , Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify a value for IPAddress . If the value of Type is TCP , Route 53 doesn't pass a Host header.
SearchString (string) --
If the value of Type is HTTP_STR_MATCH or HTTPS_STR_MATCH , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.
Route 53 considers case when searching for SearchString in the response body.
RequestInterval (integer) --
The number of seconds between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.
Warning
You can't change the value of RequestInterval after you create a health check.
If you don't specify a value for RequestInterval , the default value is 30 seconds.
FailureThreshold (integer) --
The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see How Amazon Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
If you don't specify a value for FailureThreshold , the default value is three health checks.
MeasureLatency (boolean) --
Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple Amazon Web Services regions and your endpoint, and to display CloudWatch latency graphs on the Health Checks page in the Route 53 console.
Warning
You can't change the value of MeasureLatency after you create a health check.
Inverted (boolean) --
Specify whether you want Amazon Route 53 to invert the status of a health check, for example, to consider a health check unhealthy when it otherwise would be considered healthy.
Disabled (boolean) --
Stops Route 53 from performing health checks. When you disable a health check, here's what happens:
After you disable a health check, Route 53 considers the status of the health check to always be healthy. If you configured DNS failover, Route 53 continues to route traffic to the corresponding resources. If you want to stop routing traffic to a resource, change the value of Inverted.
Charges for a health check still apply when the health check is disabled. For more information, see Amazon Route 53 Pricing.
HealthThreshold (integer) --
The number of child health checks that are associated with a CALCULATED health check that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy. To specify the child health checks that you want to associate with a CALCULATED health check, use the ChildHealthChecks element.
Note the following:
0 , Route 53 always considers this health check to be healthy.ChildHealthChecks (list) --
(CALCULATED Health Checks Only) A complex type that contains one ChildHealthCheck element for each health check that you want to associate with a CALCULATED health check.
EnableSNI (boolean) --
Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
Some endpoints require that HTTPS requests include the host name in the client_hello message. If you don't enable SNI, the status of the health check will be SSL alert handshake_failure . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.
The SSL/TLS certificate on your endpoint includes a domain name in the Common Name field and possibly several more in the Subject Alternative Names field. One of the domain names in the certificate should match the value that you specify for FullyQualifiedDomainName . If the endpoint responds to the client_hello message with a certificate that does not include the domain name that you specified in FullyQualifiedDomainName , a health checker will retry the handshake. In the second attempt, the health checker will omit FullyQualifiedDomainName from the client_hello message.
Regions (list) --
A complex type that contains one Region element for each region from which you want Amazon Route 53 health checkers to check the specified endpoint.
If you don't specify any regions, Route 53 health checkers automatically performs checks from all of the regions that are listed under Valid Values .
If you update a health check to remove a region that has been performing health checks, Route 53 will briefly continue to perform checks from that region to ensure that some health checkers are always checking the endpoint (for example, if you replace three regions with four different regions).
AlarmIdentifier (dict) --
A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
Region (string) --
For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in.
For the current list of CloudWatch regions, see Amazon CloudWatch endpoints and quotas in the Amazon Web Services General Reference .
Name (string) --
The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
Note
Route 53 supports CloudWatch alarms with the following features:
InsufficientDataHealthStatus (string) --
When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:
Healthy : Route 53 considers the health check to be healthy.Unhealthy : Route 53 considers the health check to be unhealthy.LastKnownStatus : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy.RoutingControlArn (string) --
The Amazon Resource Name (ARN) for the Route 53 Application Recovery Controller routing control.
For more information about Route 53 Application Recovery Controller, see Route 53 Application Recovery Controller Developer Guide..
HealthCheckVersion (integer) --
The version of the health check. You can optionally pass this value in a call to UpdateHealthCheck to prevent overwriting another change to the health check.
CloudWatchAlarmConfiguration (dict) --
A complex type that contains information about the CloudWatch alarm that Amazon Route 53 is monitoring for this health check.
EvaluationPeriods (integer) --
For the metric that the CloudWatch alarm is associated with, the number of periods that the metric is compared to the threshold.
Threshold (float) --
For the metric that the CloudWatch alarm is associated with, the value the metric is compared with.
ComparisonOperator (string) --
For the metric that the CloudWatch alarm is associated with, the arithmetic operation that is used for the comparison.
Period (integer) --
For the metric that the CloudWatch alarm is associated with, the duration of one evaluation period in seconds.
MetricName (string) --
The name of the CloudWatch metric that the alarm is associated with.
Namespace (string) --
The namespace of the metric that the alarm is associated with. For more information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
Statistic (string) --
For the metric that the CloudWatch alarm is associated with, the statistic that is applied to the metric.
Dimensions (list) --
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about the dimensions for the metric. For information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
(dict) --
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about one dimension.
Name (string) --
For the metric that the CloudWatch alarm is associated with, the name of one dimension.
Value (string) --
For the metric that the CloudWatch alarm is associated with, the value of one dimension.
Location (string) --
The unique URL representing the new health check.
Exceptions
Route53.Client.exceptions.TooManyHealthChecksRoute53.Client.exceptions.HealthCheckAlreadyExistsRoute53.Client.exceptions.InvalidInputcreate_hosted_zone(**kwargs)¶Creates a new public or private hosted zone. You create records in a public hosted zone to define how you want to route traffic on the internet for a domain, such as example.com, and its subdomains (apex.example.com, acme.example.com). You create records in a private hosted zone to define how you want to route traffic for a domain and its subdomains within one or more Amazon Virtual Private Clouds (Amazon VPCs).
Warning
You can't convert a public hosted zone to a private hosted zone or vice versa. Instead, you must create a new hosted zone with the same name and create new resource record sets.
For more information about charges for hosted zones, see Amazon Route 53 Pricing.
Note the following:
DelegationSetId element.When you submit a CreateHostedZone request, the initial status of the hosted zone is PENDING . For public hosted zones, this means that the NS and SOA records are not yet available on all Route 53 DNS servers. When the NS and SOA records are available, the status of the zone changes to INSYNC .
The CreateHostedZone request requires the caller to have an ec2:DescribeVpcs permission.
Note
When creating private hosted zones, the Amazon VPC must belong to the same partition where the hosted zone is created. A partition is a group of Amazon Web Services Regions. Each Amazon Web Services account is scoped to one partition.
The following are the supported partitions:
aws - Amazon Web Services Regionsaws-cn - China Regionsaws-us-gov - Amazon Web Services GovCloud (US) RegionFor more information, see Access Management in the Amazon Web Services General Reference .
See also: AWS API Documentation
Request Syntax
response = client.create_hosted_zone(
Name='string',
VPC={
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
},
CallerReference='string',
HostedZoneConfig={
'Comment': 'string',
'PrivateZone': True|False
},
DelegationSetId='string'
)
[REQUIRED]
The name of the domain. Specify a fully qualified domain name, for example, www.example.com . The trailing dot is optional; Amazon Route 53 assumes that the domain name is fully qualified. This means that Route 53 treats www.example.com (without a trailing dot) and www.example.com. (with a trailing dot) as identical.
If you're creating a public hosted zone, this is the name you have registered with your DNS registrar. If your domain name is registered with a registrar other than Route 53, change the name servers for your domain to the set of NameServers that CreateHostedZone returns in DelegationSet .
(Private hosted zones only) A complex type that contains information about the Amazon VPC that you're associating with this hosted zone.
You can specify only one Amazon VPC when you create a private hosted zone. If you are associating a VPC with a hosted zone with this request, the paramaters VPCId and VPCRegion are also required.
To associate additional Amazon VPCs with the hosted zone, use AssociateVPCWithHostedZone after you create a hosted zone.
(Private hosted zones only) The region that an Amazon VPC was created in.
(Private hosted zones only) The ID of an Amazon VPC.
[REQUIRED]
A unique string that identifies the request and that allows failed CreateHostedZone requests to be retried without the risk of executing the operation twice. You must use a unique CallerReference string every time you submit a CreateHostedZone request. CallerReference can be any unique string, for example, a date/time stamp.
(Optional) A complex type that contains the following optional values:
PrivateZone elementIf you don't specify a comment or the PrivateZone element, omit HostedZoneConfig and the other elements.
Any comments that you want to include about the hosted zone.
A value that indicates whether this is a private hosted zone.
dict
Response Syntax
{
'HostedZone': {
'Id': 'string',
'Name': 'string',
'CallerReference': 'string',
'Config': {
'Comment': 'string',
'PrivateZone': True|False
},
'ResourceRecordSetCount': 123,
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
}
},
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
},
'DelegationSet': {
'Id': 'string',
'CallerReference': 'string',
'NameServers': [
'string',
]
},
'VPC': {
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
},
'Location': 'string'
}
Response Structure
(dict) --
A complex type containing the response information for the hosted zone.
HostedZone (dict) --
A complex type that contains general information about the hosted zone.
Id (string) --
The ID that Amazon Route 53 assigned to the hosted zone when you created it.
Name (string) --
The name of the domain. For public hosted zones, this is the name that you have registered with your DNS registrar.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see CreateHostedZone.
CallerReference (string) --
The value that you specified for CallerReference when you created the hosted zone.
Config (dict) --
A complex type that includes the Comment and PrivateZone elements. If you omitted the HostedZoneConfig and Comment elements from the request, the Config and Comment elements don't appear in the response.
Comment (string) --
Any comments that you want to include about the hosted zone.
PrivateZone (boolean) --
A value that indicates whether this is a private hosted zone.
ResourceRecordSetCount (integer) --
The number of resource record sets in the hosted zone.
LinkedService (dict) --
If the hosted zone was created by another service, the service that created the hosted zone. When a hosted zone is created by another service, you can't edit or delete it using Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
ChangeInfo (dict) --
A complex type that contains information about the CreateHostedZone request.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
DelegationSet (dict) --
A complex type that describes the name servers for this hosted zone.
Id (string) --
The ID that Amazon Route 53 assigns to a reusable delegation set.
CallerReference (string) --
The value that you specified for CallerReference when you created the reusable delegation set.
NameServers (list) --
A complex type that contains a list of the authoritative name servers for a hosted zone or for a reusable delegation set.
VPC (dict) --
A complex type that contains information about an Amazon VPC that you associated with this hosted zone.
VPCRegion (string) --
(Private hosted zones only) The region that an Amazon VPC was created in.
VPCId (string) --
(Private hosted zones only) The ID of an Amazon VPC.
Location (string) --
The unique URL representing the new hosted zone.
Exceptions
Route53.Client.exceptions.InvalidDomainNameRoute53.Client.exceptions.HostedZoneAlreadyExistsRoute53.Client.exceptions.TooManyHostedZonesRoute53.Client.exceptions.InvalidVPCIdRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.DelegationSetNotAvailableRoute53.Client.exceptions.ConflictingDomainExistsRoute53.Client.exceptions.NoSuchDelegationSetRoute53.Client.exceptions.DelegationSetNotReusablecreate_key_signing_key(**kwargs)¶Creates a new key-signing key (KSK) associated with a hosted zone. You can only have two KSKs per hosted zone.
See also: AWS API Documentation
Request Syntax
response = client.create_key_signing_key(
CallerReference='string',
HostedZoneId='string',
KeyManagementServiceArn='string',
Name='string',
Status='string'
)
[REQUIRED]
A unique string that identifies the request.
[REQUIRED]
The unique string (ID) used to identify a hosted zone.
[REQUIRED]
The Amazon resource name (ARN) for a customer managed key in Key Management Service (KMS). The KeyManagementServiceArn must be unique for each key-signing key (KSK) in a single hosted zone. To see an example of KeyManagementServiceArn that grants the correct permissions for DNSSEC, scroll down to Example .
You must configure the customer managed customer managed key as follows:
Status
Enabled
Key spec
ECC_NIST_P256
Key usage
Sign and verify
Key policy
The key policy must give permission for the following actions:
The key policy must also include the Amazon Route 53 service in the principal for your account. Specify the following:
"Service": "dnssec-route53.amazonaws.com"For more information about working with a customer managed key in KMS, see Key Management Service concepts.
[REQUIRED]
A string used to identify a key-signing key (KSK). Name can include numbers, letters, and underscores (_). Name must be unique for each key-signing key in the same hosted zone.
[REQUIRED]
A string specifying the initial status of the key-signing key (KSK). You can set the value to ACTIVE or INACTIVE .
dict
Response Syntax
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
},
'KeySigningKey': {
'Name': 'string',
'KmsArn': 'string',
'Flag': 123,
'SigningAlgorithmMnemonic': 'string',
'SigningAlgorithmType': 123,
'DigestAlgorithmMnemonic': 'string',
'DigestAlgorithmType': 123,
'KeyTag': 123,
'DigestValue': 'string',
'PublicKey': 'string',
'DSRecord': 'string',
'DNSKEYRecord': 'string',
'Status': 'string',
'StatusMessage': 'string',
'CreatedDate': datetime(2015, 1, 1),
'LastModifiedDate': datetime(2015, 1, 1)
},
'Location': 'string'
}
Response Structure
(dict) --
ChangeInfo (dict) --
A complex type that describes change information about changes made to your hosted zone.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
KeySigningKey (dict) --
The key-signing key (KSK) that the request creates.
Name (string) --
A string used to identify a key-signing key (KSK). Name can include numbers, letters, and underscores (_). Name must be unique for each key-signing key in the same hosted zone.
KmsArn (string) --
The Amazon resource name (ARN) used to identify the customer managed key in Key Management Service (KMS). The KmsArn must be unique for each key-signing key (KSK) in a single hosted zone.
You must configure the customer managed key as follows:
Status
Enabled
Key spec
ECC_NIST_P256
Key usage
Sign and verify
Key policy
The key policy must give permission for the following actions:
The key policy must also include the Amazon Route 53 service in the principal for your account. Specify the following:
"Service": "dnssec-route53.amazonaws.com"For more information about working with the customer managed key in KMS, see Key Management Service concepts.
Flag (integer) --
An integer that specifies how the key is used. For key-signing key (KSK), this value is always 257.
SigningAlgorithmMnemonic (string) --
A string used to represent the signing algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.1.
SigningAlgorithmType (integer) --
An integer used to represent the signing algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.1.
DigestAlgorithmMnemonic (string) --
A string used to represent the delegation signer digest algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.3.
DigestAlgorithmType (integer) --
An integer used to represent the delegation signer digest algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.3.
KeyTag (integer) --
An integer used to identify the DNSSEC record for the domain name. The process used to calculate the value is described in RFC-4034 Appendix B.
DigestValue (string) --
A cryptographic digest of a DNSKEY resource record (RR). DNSKEY records are used to publish the public key that resolvers can use to verify DNSSEC signatures that are used to secure certain kinds of information provided by the DNS system.
PublicKey (string) --
The public key, represented as a Base64 encoding, as required by RFC-4034 Page 5.
DSRecord (string) --
A string that represents a delegation signer (DS) record.
DNSKEYRecord (string) --
A string that represents a DNSKEY record.
Status (string) --
A string that represents the current key-signing key (KSK) status.
Status can have one of the following values:
ACTIVE
The KSK is being used for signing.
INACTIVE
The KSK is not being used for signing.
DELETING
The KSK is in the process of being deleted.
ACTION_NEEDED
There is a problem with the KSK that requires you to take action to resolve. For example, the customer managed key might have been deleted, or the permissions for the customer managed key might have been changed.
INTERNAL_FAILURE
There was an error during a request. Before you can continue to work with DNSSEC signing, including actions that involve this KSK, you must correct the problem. For example, you may need to activate or deactivate the KSK.
StatusMessage (string) --
The status message provided for the following key-signing key (KSK) statuses: ACTION_NEEDED or INTERNAL_FAILURE . The status message includes information about what the problem might be and steps that you can take to correct the issue.
CreatedDate (datetime) --
The date when the key-signing key (KSK) was created.
LastModifiedDate (datetime) --
The last time that the key-signing key (KSK) was changed.
Location (string) --
The unique URL representing the new key-signing key (KSK).
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidArgumentRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.InvalidKMSArnRoute53.Client.exceptions.InvalidKeySigningKeyStatusRoute53.Client.exceptions.InvalidSigningStatusRoute53.Client.exceptions.InvalidKeySigningKeyNameRoute53.Client.exceptions.KeySigningKeyAlreadyExistsRoute53.Client.exceptions.TooManyKeySigningKeysRoute53.Client.exceptions.ConcurrentModificationcreate_query_logging_config(**kwargs)¶Creates a configuration for DNS query logging. After you create a query logging configuration, Amazon Route 53 begins to publish log data to an Amazon CloudWatch Logs log group.
DNS query logs contain information about the queries that Route 53 receives for a specified public hosted zone, such as the following:
Route 53 edge location that responded to the DNS query
Domain or subdomain that was requested
DNS record type, such as A or AAAA
DNS response code, such as NoError or ServFail
Log Group and Resource Policy
Before you create a query logging configuration, perform the following operations.
Note
If you create a query logging configuration using the Route 53 console, Route 53 performs these operations automatically.
/aws/route53/hosted zone name In the next step, you'll create a resource policy, which controls access to one or more log groups and the associated Amazon Web Services resources, such as Route 53 hosted zones. There's a limit on the number of resource policies that you can create, so we recommend that you use a consistent prefix so you can use the same resource policy for all the log groups that you create for query logging.Resource , specify the ARN for the log group that you created in the previous step. To use the same resource policy for all the CloudWatch Logs log groups that you created for query logging configurations, replace the hosted zone name with * , for example: arn:aws:logs:us-east-1:123412341234:log-group:/aws/route53/* To avoid the confused deputy problem, a security issue where an entity without a permission for an action can coerce a more-privileged entity to perform it, you can optionally limit the permissions that a service has to a resource in a resource-based policy by supplying the following values:aws:SourceArn , supply the hosted zone ARN used in creating the query logging configuration. For example, aws:SourceArn: arn:aws:route53:::hostedzone/hosted zone ID .aws:SourceAccount , supply the account ID for the account that creates the query logging configuration. For example, aws:SourceAccount:111111111111 .For more information, see The confused deputy problem in the Amazon Web Services IAM User Guide .
Note
You can't use the CloudWatch console to create or edit a resource policy. You must use the CloudWatch API, one of the Amazon Web Services SDKs, or the CLI.
Log Streams and Edge Locations
When Route 53 finishes creating the configuration for DNS query logging, it does the following:
The name of each log stream is in the following format:
hosted zone ID/edge location code
The edge location code is a three-letter code and an arbitrarily assigned number, for example, DFW3. The three-letter code typically corresponds with the International Air Transport Association airport code for an airport near the edge location. (These abbreviations might change in the future.) For a list of edge locations, see "The Route 53 Global Network" on the Route 53 Product Details page.
Queries That Are Logged
Query logs contain only the queries that DNS resolvers forward to Route 53. If a DNS resolver has already cached the response to a query (such as the IP address for a load balancer for example.com), the resolver will continue to return the cached response. It doesn't forward another query to Route 53 until the TTL for the corresponding resource record set expires. Depending on how many DNS queries are submitted for a resource record set, and depending on the TTL for that resource record set, query logs might contain information about only one query out of every several thousand queries that are submitted to DNS. For more information about how DNS works, see Routing Internet Traffic to Your Website or Web Application in the Amazon Route 53 Developer Guide .
Log File Format
For a list of the values in each query log and the format of each value, see Logging DNS Queries in the Amazon Route 53 Developer Guide .
Pricing
For information about charges for query logs, see Amazon CloudWatch Pricing.
How to Stop Logging
If you want Route 53 to stop sending query logs to CloudWatch Logs, delete the query logging configuration. For more information, see DeleteQueryLoggingConfig.
See also: AWS API Documentation
Request Syntax
response = client.create_query_logging_config(
HostedZoneId='string',
CloudWatchLogsLogGroupArn='string'
)
[REQUIRED]
The ID of the hosted zone that you want to log queries for. You can log queries only for public hosted zones.
[REQUIRED]
The Amazon Resource Name (ARN) for the log group that you want to Amazon Route 53 to send query logs to. This is the format of the ARN:
arn:aws:logs:region :account-id :log-group:log_group_name
To get the ARN for a log group, you can use the CloudWatch console, the DescribeLogGroups API action, the describe-log-groups command, or the applicable command in one of the Amazon Web Services SDKs.
dict
Response Syntax
{
'QueryLoggingConfig': {
'Id': 'string',
'HostedZoneId': 'string',
'CloudWatchLogsLogGroupArn': 'string'
},
'Location': 'string'
}
Response Structure
(dict) --
QueryLoggingConfig (dict) --
A complex type that contains the ID for a query logging configuration, the ID of the hosted zone that you want to log queries for, and the ARN for the log group that you want Amazon Route 53 to send query logs to.
Id (string) --
The ID for a configuration for DNS query logging.
HostedZoneId (string) --
The ID of the hosted zone that CloudWatch Logs is logging queries for.
CloudWatchLogsLogGroupArn (string) --
The Amazon Resource Name (ARN) of the CloudWatch Logs log group that Amazon Route 53 is publishing logs to.
Location (string) --
The unique URL representing the new query logging configuration.
Exceptions
Route53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.NoSuchCloudWatchLogsLogGroupRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.QueryLoggingConfigAlreadyExistsRoute53.Client.exceptions.InsufficientCloudWatchLogsResourcePolicycreate_reusable_delegation_set(**kwargs)¶Creates a delegation set (a group of four name servers) that can be reused by multiple hosted zones that were created by the same Amazon Web Services account.
You can also create a reusable delegation set that uses the four name servers that are associated with an existing hosted zone. Specify the hosted zone ID in the CreateReusableDelegationSet request.
Note
You can't associate a reusable delegation set with a private hosted zone.
For information about using a reusable delegation set to configure white label name servers, see Configuring White Label Name Servers.
The process for migrating existing hosted zones to use a reusable delegation set is comparable to the process for configuring white label name servers. You need to perform the following steps:
If you want to migrate existing hosted zones to use a reusable delegation set, the existing hosted zones can't use any of the name servers that are assigned to the reusable delegation set. If one or more hosted zones do use one or more name servers that are assigned to the reusable delegation set, you can do one of the following:
See also: AWS API Documentation
Request Syntax
response = client.create_reusable_delegation_set(
CallerReference='string',
HostedZoneId='string'
)
[REQUIRED]
A unique string that identifies the request, and that allows you to retry failed CreateReusableDelegationSet requests without the risk of executing the operation twice. You must use a unique CallerReference string every time you submit a CreateReusableDelegationSet request. CallerReference can be any unique string, for example a date/time stamp.
dict
Response Syntax
{
'DelegationSet': {
'Id': 'string',
'CallerReference': 'string',
'NameServers': [
'string',
]
},
'Location': 'string'
}
Response Structure
(dict) --
DelegationSet (dict) --
A complex type that contains name server information.
Id (string) --
The ID that Amazon Route 53 assigns to a reusable delegation set.
CallerReference (string) --
The value that you specified for CallerReference when you created the reusable delegation set.
NameServers (list) --
A complex type that contains a list of the authoritative name servers for a hosted zone or for a reusable delegation set.
Location (string) --
The unique URL representing the new reusable delegation set.
Exceptions
Route53.Client.exceptions.DelegationSetAlreadyCreatedRoute53.Client.exceptions.LimitsExceededRoute53.Client.exceptions.HostedZoneNotFoundRoute53.Client.exceptions.InvalidArgumentRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.DelegationSetNotAvailableRoute53.Client.exceptions.DelegationSetAlreadyReusablecreate_traffic_policy(**kwargs)¶Creates a traffic policy, which you use to create multiple DNS resource record sets for one domain name (such as example.com) or one subdomain name (such as www.example.com).
See also: AWS API Documentation
Request Syntax
response = client.create_traffic_policy(
Name='string',
Document='string',
Comment='string'
)
[REQUIRED]
The name of the traffic policy.
[REQUIRED]
The definition of this traffic policy in JSON format. For more information, see Traffic Policy Document Format.
dict
Response Syntax
{
'TrafficPolicy': {
'Id': 'string',
'Version': 123,
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'Document': 'string',
'Comment': 'string'
},
'Location': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the CreateTrafficPolicy request.
TrafficPolicy (dict) --
A complex type that contains settings for the new traffic policy.
Id (string) --
The ID that Amazon Route 53 assigned to a traffic policy when you created it.
Version (integer) --
The version number that Amazon Route 53 assigns to a traffic policy. For a new traffic policy, the value of Version is always 1.
Name (string) --
The name that you specified when you created the traffic policy.
Type (string) --
The DNS type of the resource record sets that Amazon Route 53 creates when you use a traffic policy to create a traffic policy instance.
Document (string) --
The definition of a traffic policy in JSON format. You specify the JSON document to use for a new traffic policy in the CreateTrafficPolicy request. For more information about the JSON format, see Traffic Policy Document Format.
Comment (string) --
The comment that you specify in the CreateTrafficPolicy request, if any.
Location (string) --
A unique URL that represents a new traffic policy.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.TooManyTrafficPoliciesRoute53.Client.exceptions.TrafficPolicyAlreadyExistsRoute53.Client.exceptions.InvalidTrafficPolicyDocumentcreate_traffic_policy_instance(**kwargs)¶Creates resource record sets in a specified hosted zone based on the settings in a specified traffic policy version. In addition, CreateTrafficPolicyInstance associates the resource record sets with a specified domain name (such as example.com) or subdomain name (such as www.example.com). Amazon Route 53 responds to DNS queries for the domain or subdomain name by using the resource record sets that CreateTrafficPolicyInstance created.
See also: AWS API Documentation
Request Syntax
response = client.create_traffic_policy_instance(
HostedZoneId='string',
Name='string',
TTL=123,
TrafficPolicyId='string',
TrafficPolicyVersion=123
)
[REQUIRED]
The ID of the hosted zone that you want Amazon Route 53 to create resource record sets in by using the configuration in a traffic policy.
[REQUIRED]
The domain name (such as example.com) or subdomain name (such as www.example.com) for which Amazon Route 53 responds to DNS queries by using the resource record sets that Route 53 creates for this traffic policy instance.
[REQUIRED]
(Optional) The TTL that you want Amazon Route 53 to assign to all of the resource record sets that it creates in the specified hosted zone.
[REQUIRED]
The ID of the traffic policy that you want to use to create resource record sets in the specified hosted zone.
[REQUIRED]
The version of the traffic policy that you want to use to create resource record sets in the specified hosted zone.
dict
Response Syntax
{
'TrafficPolicyInstance': {
'Id': 'string',
'HostedZoneId': 'string',
'Name': 'string',
'TTL': 123,
'State': 'string',
'Message': 'string',
'TrafficPolicyId': 'string',
'TrafficPolicyVersion': 123,
'TrafficPolicyType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS'
},
'Location': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the CreateTrafficPolicyInstance request.
TrafficPolicyInstance (dict) --
A complex type that contains settings for the new traffic policy instance.
Id (string) --
The ID that Amazon Route 53 assigned to the new traffic policy instance.
HostedZoneId (string) --
The ID of the hosted zone that Amazon Route 53 created resource record sets in.
Name (string) --
The DNS name, such as www.example.com, for which Amazon Route 53 responds to queries by using the resource record sets that are associated with this traffic policy instance.
TTL (integer) --
The TTL that Amazon Route 53 assigned to all of the resource record sets that it created in the specified hosted zone.
State (string) --
The value of State is one of the following values:
Applied
Amazon Route 53 has finished creating resource record sets, and changes have propagated to all Route 53 edge locations.
Creating
Route 53 is creating the resource record sets. Use GetTrafficPolicyInstance to confirm that the CreateTrafficPolicyInstance request completed successfully.
Failed
Route 53 wasn't able to create or update the resource record sets. When the value of State is Failed , see Message for an explanation of what caused the request to fail.
Message (string) --
If State is Failed , an explanation of the reason for the failure. If State is another value, Message is empty.
TrafficPolicyId (string) --
The ID of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyVersion (integer) --
The version of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyType (string) --
The DNS type that Amazon Route 53 assigned to all of the resource record sets that it created for this traffic policy instance.
Location (string) --
A unique URL that represents a new traffic policy instance.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.TooManyTrafficPolicyInstancesRoute53.Client.exceptions.NoSuchTrafficPolicyRoute53.Client.exceptions.TrafficPolicyInstanceAlreadyExistscreate_traffic_policy_version(**kwargs)¶Creates a new version of an existing traffic policy. When you create a new version of a traffic policy, you specify the ID of the traffic policy that you want to update and a JSON-formatted document that describes the new version. You use traffic policies to create multiple DNS resource record sets for one domain name (such as example.com) or one subdomain name (such as www.example.com). You can create a maximum of 1000 versions of a traffic policy. If you reach the limit and need to create another version, you'll need to start a new traffic policy.
See also: AWS API Documentation
Request Syntax
response = client.create_traffic_policy_version(
Id='string',
Document='string',
Comment='string'
)
[REQUIRED]
The ID of the traffic policy for which you want to create a new version.
[REQUIRED]
The definition of this version of the traffic policy, in JSON format. You specified the JSON in the CreateTrafficPolicyVersion request. For more information about the JSON format, see CreateTrafficPolicy.
CreateTrafficPolicyVersion request, if any.dict
Response Syntax
{
'TrafficPolicy': {
'Id': 'string',
'Version': 123,
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'Document': 'string',
'Comment': 'string'
},
'Location': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the CreateTrafficPolicyVersion request.
TrafficPolicy (dict) --
A complex type that contains settings for the new version of the traffic policy.
Id (string) --
The ID that Amazon Route 53 assigned to a traffic policy when you created it.
Version (integer) --
The version number that Amazon Route 53 assigns to a traffic policy. For a new traffic policy, the value of Version is always 1.
Name (string) --
The name that you specified when you created the traffic policy.
Type (string) --
The DNS type of the resource record sets that Amazon Route 53 creates when you use a traffic policy to create a traffic policy instance.
Document (string) --
The definition of a traffic policy in JSON format. You specify the JSON document to use for a new traffic policy in the CreateTrafficPolicy request. For more information about the JSON format, see Traffic Policy Document Format.
Comment (string) --
The comment that you specify in the CreateTrafficPolicy request, if any.
Location (string) --
A unique URL that represents a new traffic policy version.
Exceptions
Route53.Client.exceptions.NoSuchTrafficPolicyRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.TooManyTrafficPolicyVersionsForCurrentPolicyRoute53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.InvalidTrafficPolicyDocumentAuthorizes the Amazon Web Services account that created a specified VPC to submit an AssociateVPCWithHostedZone request to associate the VPC with a specified hosted zone that was created by a different account. To submit a CreateVPCAssociationAuthorization request, you must use the account that created the hosted zone. After you authorize the association, use the account that created the VPC to submit an AssociateVPCWithHostedZone request.
Note
If you want to associate multiple VPCs that you created by using one account with a hosted zone that you created by using a different account, you must submit one authorization request for each VPC.
See also: AWS API Documentation
Request Syntax
response = client.create_vpc_association_authorization(
HostedZoneId='string',
VPC={
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
}
)
[REQUIRED]
The ID of the private hosted zone that you want to authorize associating a VPC with.
[REQUIRED]
A complex type that contains the VPC ID and region for the VPC that you want to authorize associating with your hosted zone.
(Private hosted zones only) The region that an Amazon VPC was created in.
(Private hosted zones only) The ID of an Amazon VPC.
dict
Response Syntax
{
'HostedZoneId': 'string',
'VPC': {
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
}
}
Response Structure
(dict) --
A complex type that contains the response information from a CreateVPCAssociationAuthorization request.
HostedZoneId (string) --
The ID of the hosted zone that you authorized associating a VPC with.
VPC (dict) --
The VPC that you authorized associating with a hosted zone.
VPCRegion (string) --
(Private hosted zones only) The region that an Amazon VPC was created in.
VPCId (string) --
(Private hosted zones only) The ID of an Amazon VPC.
Exceptions
Route53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.TooManyVPCAssociationAuthorizationsRoute53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidVPCIdRoute53.Client.exceptions.InvalidInputdeactivate_key_signing_key(**kwargs)¶Deactivates a key-signing key (KSK) so that it will not be used for signing by DNSSEC. This operation changes the KSK status to INACTIVE .
See also: AWS API Documentation
Request Syntax
response = client.deactivate_key_signing_key(
HostedZoneId='string',
Name='string'
)
[REQUIRED]
A unique string used to identify a hosted zone.
[REQUIRED]
A string used to identify a key-signing key (KSK).
dict
Response Syntax
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
(dict) --
ChangeInfo (dict) --
A complex type that describes change information about changes made to your hosted zone.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
Exceptions
Route53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.NoSuchKeySigningKeyRoute53.Client.exceptions.InvalidKeySigningKeyStatusRoute53.Client.exceptions.InvalidSigningStatusRoute53.Client.exceptions.KeySigningKeyInUseRoute53.Client.exceptions.KeySigningKeyInParentDSRecordRoute53.Client.exceptions.InvalidInputdelete_cidr_collection(**kwargs)¶Deletes a CIDR collection in the current Amazon Web Services account. The collection must be empty before it can be deleted.
See also: AWS API Documentation
Request Syntax
response = client.delete_cidr_collection(
Id='string'
)
[REQUIRED]
The UUID of the collection to delete.
{}
Response Structure
Exceptions
Route53.Client.exceptions.NoSuchCidrCollectionExceptionRoute53.Client.exceptions.CidrCollectionInUseExceptionRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.ConcurrentModificationdelete_health_check(**kwargs)¶Deletes a health check.
Warning
Amazon Route 53 does not prevent you from deleting a health check even if the health check is associated with one or more resource record sets. If you delete a health check and you don't update the associated resource record sets, the future status of the health check can't be predicted and may change. This will affect the routing of DNS queries for your DNS failover configuration. For more information, see Replacing and Deleting Health Checks in the Amazon Route 53 Developer Guide .
If you're using Cloud Map and you configured Cloud Map to create a Route 53 health check when you register an instance, you can't use the Route 53 DeleteHealthCheck command to delete the health check. The health check is deleted automatically when you deregister the instance; there can be a delay of several hours before the health check is deleted from Route 53.
See also: AWS API Documentation
Request Syntax
response = client.delete_health_check(
HealthCheckId='string'
)
[REQUIRED]
The ID of the health check that you want to delete.
{}
Response Structure
An empty element.
Exceptions
Route53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.HealthCheckInUseRoute53.Client.exceptions.InvalidInputdelete_hosted_zone(**kwargs)¶Deletes a hosted zone.
If the hosted zone was created by another service, such as Cloud Map, see Deleting Public Hosted Zones That Were Created by Another Service in the Amazon Route 53 Developer Guide for information about how to delete it. (The process is the same for public and private hosted zones that were created by another service.)
If you want to keep your domain registration but you want to stop routing internet traffic to your website or web application, we recommend that you delete resource record sets in the hosted zone instead of deleting the hosted zone.
Warning
If you delete a hosted zone, you can't undelete it. You must create a new hosted zone and update the name servers for your domain registration, which can require up to 48 hours to take effect. (If you delegated responsibility for a subdomain to a hosted zone and you delete the child hosted zone, you must update the name servers in the parent hosted zone.) In addition, if you delete a hosted zone, someone could hijack the domain and route traffic to their own resources using your domain name.
If you want to avoid the monthly charge for the hosted zone, you can transfer DNS service for the domain to a free DNS service. When you transfer DNS service, you have to update the name servers for the domain registration. If the domain is registered with Route 53, see UpdateDomainNameservers for information about how to replace Route 53 name servers with name servers for the new DNS service. If the domain is registered with another registrar, use the method provided by the registrar to update name servers for the domain registration. For more information, perform an internet search on "free DNS service."
You can delete a hosted zone only if it contains only the default SOA record and NS resource record sets. If the hosted zone contains other resource record sets, you must delete them before you can delete the hosted zone. If you try to delete a hosted zone that contains other resource record sets, the request fails, and Route 53 returns a HostedZoneNotEmpty error. For information about deleting records from your hosted zone, see ChangeResourceRecordSets.
To verify that the hosted zone has been deleted, do one of the following:
GetHostedZone action to request information about the hosted zone.ListHostedZones action to get a list of the hosted zones associated with the current Amazon Web Services account.See also: AWS API Documentation
Request Syntax
response = client.delete_hosted_zone(
Id='string'
)
[REQUIRED]
The ID of the hosted zone you want to delete.
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
A complex type that contains the response to a DeleteHostedZone request.
A complex type that contains the ID, the status, and the date and time of a request to delete a hosted zone.
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
A comment you can provide.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.HostedZoneNotEmptyRoute53.Client.exceptions.PriorRequestNotCompleteRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.InvalidDomainNamedelete_key_signing_key(**kwargs)¶Deletes a key-signing key (KSK). Before you can delete a KSK, you must deactivate it. The KSK must be deactivated before you can delete it regardless of whether the hosted zone is enabled for DNSSEC signing.
You can use DeactivateKeySigningKey to deactivate the key before you delete it.
Use GetDNSSEC to verify that the KSK is in an INACTIVE status.
See also: AWS API Documentation
Request Syntax
response = client.delete_key_signing_key(
HostedZoneId='string',
Name='string'
)
[REQUIRED]
A unique string used to identify a hosted zone.
[REQUIRED]
A string used to identify a key-signing key (KSK).
dict
Response Syntax
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
(dict) --
ChangeInfo (dict) --
A complex type that describes change information about changes made to your hosted zone.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
Exceptions
Route53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.NoSuchKeySigningKeyRoute53.Client.exceptions.InvalidKeySigningKeyStatusRoute53.Client.exceptions.InvalidSigningStatusRoute53.Client.exceptions.InvalidKMSArnRoute53.Client.exceptions.InvalidInputdelete_query_logging_config(**kwargs)¶Deletes a configuration for DNS query logging. If you delete a configuration, Amazon Route 53 stops sending query logs to CloudWatch Logs. Route 53 doesn't delete any logs that are already in CloudWatch Logs.
For more information about DNS query logs, see CreateQueryLoggingConfig.
See also: AWS API Documentation
Request Syntax
response = client.delete_query_logging_config(
Id='string'
)
[REQUIRED]
The ID of the configuration that you want to delete.
{}
Response Structure
Exceptions
Route53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.NoSuchQueryLoggingConfigRoute53.Client.exceptions.InvalidInputdelete_reusable_delegation_set(**kwargs)¶Deletes a reusable delegation set.
Warning
You can delete a reusable delegation set only if it isn't associated with any hosted zones.
To verify that the reusable delegation set is not associated with any hosted zones, submit a GetReusableDelegationSet request and specify the ID of the reusable delegation set that you want to delete.
See also: AWS API Documentation
Request Syntax
response = client.delete_reusable_delegation_set(
Id='string'
)
[REQUIRED]
The ID of the reusable delegation set that you want to delete.
{}
Response Structure
An empty element.
Exceptions
Route53.Client.exceptions.NoSuchDelegationSetRoute53.Client.exceptions.DelegationSetInUseRoute53.Client.exceptions.DelegationSetNotReusableRoute53.Client.exceptions.InvalidInputdelete_traffic_policy(**kwargs)¶Deletes a traffic policy.
When you delete a traffic policy, Route 53 sets a flag on the policy to indicate that it has been deleted. However, Route 53 never fully deletes the traffic policy. Note the following:
See also: AWS API Documentation
Request Syntax
response = client.delete_traffic_policy(
Id='string',
Version=123
)
[REQUIRED]
The ID of the traffic policy that you want to delete.
[REQUIRED]
The version number of the traffic policy that you want to delete.
dict
Response Syntax
{}
Response Structure
(dict) --
An empty element.
Exceptions
Route53.Client.exceptions.NoSuchTrafficPolicyRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.TrafficPolicyInUseRoute53.Client.exceptions.ConcurrentModificationdelete_traffic_policy_instance(**kwargs)¶Deletes a traffic policy instance and all of the resource record sets that Amazon Route 53 created when you created the instance.
Note
In the Route 53 console, traffic policy instances are known as policy records.
See also: AWS API Documentation
Request Syntax
response = client.delete_traffic_policy_instance(
Id='string'
)
[REQUIRED]
The ID of the traffic policy instance that you want to delete.
Warning
When you delete a traffic policy instance, Amazon Route 53 also deletes all of the resource record sets that were created when you created the traffic policy instance.
{}
Response Structure
An empty element.
Exceptions
Route53.Client.exceptions.NoSuchTrafficPolicyInstanceRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.PriorRequestNotCompleteRemoves authorization to submit an AssociateVPCWithHostedZone request to associate a specified VPC with a hosted zone that was created by a different account. You must use the account that created the hosted zone to submit a DeleteVPCAssociationAuthorization request.
Warning
Sending this request only prevents the Amazon Web Services account that created the VPC from associating the VPC with the Amazon Route 53 hosted zone in the future. If the VPC is already associated with the hosted zone, DeleteVPCAssociationAuthorization won't disassociate the VPC from the hosted zone. If you want to delete an existing association, use DisassociateVPCFromHostedZone .
See also: AWS API Documentation
Request Syntax
response = client.delete_vpc_association_authorization(
HostedZoneId='string',
VPC={
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
}
)
[REQUIRED]
When removing authorization to associate a VPC that was created by one Amazon Web Services account with a hosted zone that was created with a different Amazon Web Services account, the ID of the hosted zone.
[REQUIRED]
When removing authorization to associate a VPC that was created by one Amazon Web Services account with a hosted zone that was created with a different Amazon Web Services account, a complex type that includes the ID and region of the VPC.
(Private hosted zones only) The region that an Amazon VPC was created in.
(Private hosted zones only) The ID of an Amazon VPC.
dict
Response Syntax
{}
Response Structure
(dict) --
Empty response for the request.
Exceptions
Route53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.VPCAssociationAuthorizationNotFoundRoute53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidVPCIdRoute53.Client.exceptions.InvalidInputdisable_hosted_zone_dnssec(**kwargs)¶Disables DNSSEC signing in a specific hosted zone. This action does not deactivate any key-signing keys (KSKs) that are active in the hosted zone.
See also: AWS API Documentation
Request Syntax
response = client.disable_hosted_zone_dnssec(
HostedZoneId='string'
)
[REQUIRED]
A unique string used to identify a hosted zone.
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
A complex type that describes change information about changes made to your hosted zone.
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
A comment you can provide.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidArgumentRoute53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.KeySigningKeyInParentDSRecordRoute53.Client.exceptions.DNSSECNotFoundRoute53.Client.exceptions.InvalidKeySigningKeyStatusRoute53.Client.exceptions.InvalidKMSArnRoute53.Client.exceptions.InvalidInputdisassociate_vpc_from_hosted_zone(**kwargs)¶Disassociates an Amazon Virtual Private Cloud (Amazon VPC) from an Amazon Route 53 private hosted zone. Note the following:
DisassociateVPCFromHostedZone request using either the account that created the hosted zone or the account that created the Amazon VPC.OwningAccount , you can use DisassociateVPCFromHostedZone . If the hosted zone has a value for OwningService , you can't use DisassociateVPCFromHostedZone .Note
When revoking access, the hosted zone and the Amazon VPC must belong to the same partition. A partition is a group of Amazon Web Services Regions. Each Amazon Web Services account is scoped to one partition.
The following are the supported partitions:
aws - Amazon Web Services Regionsaws-cn - China Regionsaws-us-gov - Amazon Web Services GovCloud (US) RegionFor more information, see Access Management in the Amazon Web Services General Reference .
See also: AWS API Documentation
Request Syntax
response = client.disassociate_vpc_from_hosted_zone(
HostedZoneId='string',
VPC={
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
},
Comment='string'
)
[REQUIRED]
The ID of the private hosted zone that you want to disassociate a VPC from.
[REQUIRED]
A complex type that contains information about the VPC that you're disassociating from the specified hosted zone.
(Private hosted zones only) The region that an Amazon VPC was created in.
(Private hosted zones only) The ID of an Amazon VPC.
dict
Response Syntax
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
(dict) --
A complex type that contains the response information for the disassociate request.
ChangeInfo (dict) --
A complex type that describes the changes made to the specified private hosted zone.
Id (string) --
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
Status (string) --
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
SubmittedAt (datetime) --
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Comment (string) --
A comment you can provide.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidVPCIdRoute53.Client.exceptions.VPCAssociationNotFoundRoute53.Client.exceptions.LastVPCAssociationRoute53.Client.exceptions.InvalidInputenable_hosted_zone_dnssec(**kwargs)¶Enables DNSSEC signing in a specific hosted zone.
See also: AWS API Documentation
Request Syntax
response = client.enable_hosted_zone_dnssec(
HostedZoneId='string'
)
[REQUIRED]
A unique string used to identify a hosted zone.
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
A complex type that describes change information about changes made to your hosted zone.
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
A comment you can provide.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidArgumentRoute53.Client.exceptions.ConcurrentModificationRoute53.Client.exceptions.KeySigningKeyWithActiveStatusNotFoundRoute53.Client.exceptions.InvalidKMSArnRoute53.Client.exceptions.HostedZonePartiallyDelegatedRoute53.Client.exceptions.DNSSECNotFoundRoute53.Client.exceptions.InvalidKeySigningKeyStatusRoute53.Client.exceptions.InvalidInputget_account_limit(**kwargs)¶Gets the specified limit for the current account, for example, the maximum number of health checks that you can create using the account.
For the default limit, see Limits in the Amazon Route 53 Developer Guide . To request a higher limit, open a case.
Note
You can also view account limits in Amazon Web Services Trusted Advisor. Sign in to the Amazon Web Services Management Console and open the Trusted Advisor console at https://console.aws.amazon.com/trustedadvisor/. Then choose Service limits in the navigation pane.
See also: AWS API Documentation
Request Syntax
response = client.get_account_limit(
Type='MAX_HEALTH_CHECKS_BY_OWNER'|'MAX_HOSTED_ZONES_BY_OWNER'|'MAX_TRAFFIC_POLICY_INSTANCES_BY_OWNER'|'MAX_REUSABLE_DELEGATION_SETS_BY_OWNER'|'MAX_TRAFFIC_POLICIES_BY_OWNER'
)
[REQUIRED]
The limit that you want to get. Valid values include the following:
{
'Limit': {
'Type': 'MAX_HEALTH_CHECKS_BY_OWNER'|'MAX_HOSTED_ZONES_BY_OWNER'|'MAX_TRAFFIC_POLICY_INSTANCES_BY_OWNER'|'MAX_REUSABLE_DELEGATION_SETS_BY_OWNER'|'MAX_TRAFFIC_POLICIES_BY_OWNER',
'Value': 123
},
'Count': 123
}
Response Structure
A complex type that contains the requested limit.
The current setting for the specified limit. For example, if you specified MAX_HEALTH_CHECKS_BY_OWNER for the value of Type in the request, the value of Limit is the maximum number of health checks that you can create using the current account.
The limit that you requested. Valid values include the following:
The current value for the limit that is specified by Type.
The current number of entities that you have created of the specified type. For example, if you specified MAX_HEALTH_CHECKS_BY_OWNER for the value of Type in the request, the value of Count is the current number of health checks that you have created using the current account.
Exceptions
Route53.Client.exceptions.InvalidInputget_change(**kwargs)¶Returns the current status of a change batch request. The status is one of the following values:
PENDING indicates that the changes in this request have not propagated to all Amazon Route 53 DNS servers. This is the initial status of all change batch requests.INSYNC indicates that the changes have propagated to all Route 53 DNS servers.See also: AWS API Documentation
Request Syntax
response = client.get_change(
Id='string'
)
[REQUIRED]
The ID of the change batch request. The value that you specify here is the value that ChangeResourceRecordSets returned in the Id element when you submitted the request.
{
'ChangeInfo': {
'Id': 'string',
'Status': 'PENDING'|'INSYNC',
'SubmittedAt': datetime(2015, 1, 1),
'Comment': 'string'
}
}
Response Structure
A complex type that contains the ChangeInfo element.
A complex type that contains information about the specified change batch.
This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
A comment you can provide.
Exceptions
Route53.Client.exceptions.NoSuchChangeRoute53.Client.exceptions.InvalidInputget_checker_ip_ranges()¶Route 53 does not perform authorization for this API because it retrieves information that is already available to the public.
Warning
GetCheckerIpRanges still works, but we recommend that you download ip-ranges.json, which includes IP address ranges for all Amazon Web Services services. For more information, see IP Address Ranges of Amazon Route 53 Servers in the Amazon Route 53 Developer Guide .
See also: AWS API Documentation
Request Syntax
response = client.get_checker_ip_ranges()
{
'CheckerIpRanges': [
'string',
]
}
Response Structure
A complex type that contains the CheckerIpRanges element.
A complex type that contains sorted list of IP ranges in CIDR format for Amazon Route 53 health checkers.
get_dnssec(**kwargs)¶Returns information about DNSSEC for a specific hosted zone, including the key-signing keys (KSKs) in the hosted zone.
See also: AWS API Documentation
Request Syntax
response = client.get_dnssec(
HostedZoneId='string'
)
[REQUIRED]
A unique string used to identify a hosted zone.
{
'Status': {
'ServeSignature': 'string',
'StatusMessage': 'string'
},
'KeySigningKeys': [
{
'Name': 'string',
'KmsArn': 'string',
'Flag': 123,
'SigningAlgorithmMnemonic': 'string',
'SigningAlgorithmType': 123,
'DigestAlgorithmMnemonic': 'string',
'DigestAlgorithmType': 123,
'KeyTag': 123,
'DigestValue': 'string',
'PublicKey': 'string',
'DSRecord': 'string',
'DNSKEYRecord': 'string',
'Status': 'string',
'StatusMessage': 'string',
'CreatedDate': datetime(2015, 1, 1),
'LastModifiedDate': datetime(2015, 1, 1)
},
]
}
Response Structure
A string repesenting the status of DNSSEC.
A string that represents the current hosted zone signing status.
Status can have one of the following values:
SIGNING
DNSSEC signing is enabled for the hosted zone.
NOT_SIGNING
DNSSEC signing is not enabled for the hosted zone.
DELETING
DNSSEC signing is in the process of being removed for the hosted zone.
ACTION_NEEDED
There is a problem with signing in the hosted zone that requires you to take action to resolve. For example, the customer managed key might have been deleted, or the permissions for the customer managed key might have been changed.
INTERNAL_FAILURE
There was an error during a request. Before you can continue to work with DNSSEC signing, including with key-signing keys (KSKs), you must correct the problem by enabling or disabling DNSSEC signing for the hosted zone.
The status message provided for the following DNSSEC signing status: INTERNAL_FAILURE . The status message includes information about what the problem might be and steps that you can take to correct the issue.
The key-signing keys (KSKs) in your account.
A key-signing key (KSK) is a complex type that represents a public/private key pair. The private key is used to generate a digital signature for the zone signing key (ZSK). The public key is stored in the DNS and is used to authenticate the ZSK. A KSK is always associated with a hosted zone; it cannot exist by itself.
A string used to identify a key-signing key (KSK). Name can include numbers, letters, and underscores (_). Name must be unique for each key-signing key in the same hosted zone.
The Amazon resource name (ARN) used to identify the customer managed key in Key Management Service (KMS). The KmsArn must be unique for each key-signing key (KSK) in a single hosted zone.
You must configure the customer managed key as follows:
Status
Enabled
Key spec
ECC_NIST_P256
Key usage
Sign and verify
Key policy
The key policy must give permission for the following actions:
The key policy must also include the Amazon Route 53 service in the principal for your account. Specify the following:
"Service": "dnssec-route53.amazonaws.com"For more information about working with the customer managed key in KMS, see Key Management Service concepts.
An integer that specifies how the key is used. For key-signing key (KSK), this value is always 257.
A string used to represent the signing algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.1.
An integer used to represent the signing algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.1.
A string used to represent the delegation signer digest algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.3.
An integer used to represent the delegation signer digest algorithm. This value must follow the guidelines provided by RFC-8624 Section 3.3.
An integer used to identify the DNSSEC record for the domain name. The process used to calculate the value is described in RFC-4034 Appendix B.
A cryptographic digest of a DNSKEY resource record (RR). DNSKEY records are used to publish the public key that resolvers can use to verify DNSSEC signatures that are used to secure certain kinds of information provided by the DNS system.
The public key, represented as a Base64 encoding, as required by RFC-4034 Page 5.
A string that represents a delegation signer (DS) record.
A string that represents a DNSKEY record.
A string that represents the current key-signing key (KSK) status.
Status can have one of the following values:
ACTIVE
The KSK is being used for signing.
INACTIVE
The KSK is not being used for signing.
DELETING
The KSK is in the process of being deleted.
ACTION_NEEDED
There is a problem with the KSK that requires you to take action to resolve. For example, the customer managed key might have been deleted, or the permissions for the customer managed key might have been changed.
INTERNAL_FAILURE
There was an error during a request. Before you can continue to work with DNSSEC signing, including actions that involve this KSK, you must correct the problem. For example, you may need to activate or deactivate the KSK.
The status message provided for the following key-signing key (KSK) statuses: ACTION_NEEDED or INTERNAL_FAILURE . The status message includes information about what the problem might be and steps that you can take to correct the issue.
The date when the key-signing key (KSK) was created.
The last time that the key-signing key (KSK) was changed.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidArgumentRoute53.Client.exceptions.InvalidInputget_geo_location(**kwargs)¶Gets information about whether a specified geographic location is supported for Amazon Route 53 geolocation resource record sets.
Route 53 does not perform authorization for this API because it retrieves information that is already available to the public.
Use the following syntax to determine whether a continent is supported for geolocation:
GET /2013-04-01/geolocation?continentcode=two-letter abbreviation for a continent
Use the following syntax to determine whether a country is supported for geolocation:
GET /2013-04-01/geolocation?countrycode=two-character country code
Use the following syntax to determine whether a subdivision of a country is supported for geolocation:
GET /2013-04-01/geolocation?countrycode=two-character country code&subdivisioncode=subdivision code
See also: AWS API Documentation
Request Syntax
response = client.get_geo_location(
ContinentCode='string',
CountryCode='string',
SubdivisionCode='string'
)
For geolocation resource record sets, a two-letter abbreviation that identifies a continent. Amazon Route 53 supports the following continent codes:
dict
Response Syntax
{
'GeoLocationDetails': {
'ContinentCode': 'string',
'ContinentName': 'string',
'CountryCode': 'string',
'CountryName': 'string',
'SubdivisionCode': 'string',
'SubdivisionName': 'string'
}
}
Response Structure
(dict) --
A complex type that contains the response information for the specified geolocation code.
GeoLocationDetails (dict) --
A complex type that contains the codes and full continent, country, and subdivision names for the specified geolocation code.
ContinentCode (string) --
The two-letter code for the continent.
ContinentName (string) --
The full name of the continent.
CountryCode (string) --
The two-letter code for the country.
CountryName (string) --
The name of the country.
SubdivisionCode (string) --
The code for the subdivision, such as a particular state within the United States. For a list of US state abbreviations, see Appendix B: Two–Letter State and Possession Abbreviations on the United States Postal Service website. For a list of all supported subdivision codes, use the ListGeoLocations API.
SubdivisionName (string) --
The full name of the subdivision. Route 53 currently supports only states in the United States.
Exceptions
Route53.Client.exceptions.NoSuchGeoLocationRoute53.Client.exceptions.InvalidInputget_health_check(**kwargs)¶Gets information about a specified health check.
See also: AWS API Documentation
Request Syntax
response = client.get_health_check(
HealthCheckId='string'
)
[REQUIRED]
The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long.
{
'HealthCheck': {
'Id': 'string',
'CallerReference': 'string',
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
},
'HealthCheckConfig': {
'IPAddress': 'string',
'Port': 123,
'Type': 'HTTP'|'HTTPS'|'HTTP_STR_MATCH'|'HTTPS_STR_MATCH'|'TCP'|'CALCULATED'|'CLOUDWATCH_METRIC'|'RECOVERY_CONTROL',
'ResourcePath': 'string',
'FullyQualifiedDomainName': 'string',
'SearchString': 'string',
'RequestInterval': 123,
'FailureThreshold': 123,
'MeasureLatency': True|False,
'Inverted': True|False,
'Disabled': True|False,
'HealthThreshold': 123,
'ChildHealthChecks': [
'string',
],
'EnableSNI': True|False,
'Regions': [
'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
],
'AlarmIdentifier': {
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-central-1'|'eu-central-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-northwest-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1',
'Name': 'string'
},
'InsufficientDataHealthStatus': 'Healthy'|'Unhealthy'|'LastKnownStatus',
'RoutingControlArn': 'string'
},
'HealthCheckVersion': 123,
'CloudWatchAlarmConfiguration': {
'EvaluationPeriods': 123,
'Threshold': 123.0,
'ComparisonOperator': 'GreaterThanOrEqualToThreshold'|'GreaterThanThreshold'|'LessThanThreshold'|'LessThanOrEqualToThreshold',
'Period': 123,
'MetricName': 'string',
'Namespace': 'string',
'Statistic': 'Average'|'Sum'|'SampleCount'|'Maximum'|'Minimum',
'Dimensions': [
{
'Name': 'string',
'Value': 'string'
},
]
}
}
}
Response Structure
A complex type that contains the response to a GetHealthCheck request.
A complex type that contains information about one health check that is associated with the current Amazon Web Services account.
The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long.
A unique string that you specified when you created the health check.
If the health check was created by another service, the service that created the health check. When a health check is created by another service, you can't edit or delete it using Amazon Route 53.
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
A complex type that contains detailed information about one health check.
The IPv4 or IPv6 IP address of the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress , Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval . Using an IP address returned by DNS, Route 53 then checks the health of the endpoint.
Use one of the following formats for the value of IPAddress :
192.0.2.44 .2001:0db8:85a3:0000:0000:abcd:0001:2345 . You can also shorten IPv6 addresses as described in RFC 5952, for example, 2001:db8:85a3::abcd:1:2345 .If the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for IPAddress . This ensures that the IP address of your instance will never change.
For more information, see FullyQualifiedDomainName.
Constraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:
When the value of Type is CALCULATED or CLOUDWATCH_METRIC , omit IPAddress .
The port on the endpoint that you want Amazon Route 53 to perform health checks on.
Note
Don't specify a value for Port when you specify a value for Type of CLOUDWATCH_METRIC or CALCULATED .
The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.
Warning
You can't change the value of Type after you create a health check.
You can create the following types of health checks:
Warning
If you specify HTTPS for the value of Type , the endpoint must support TLS v1.0 or later.
SearchString .HTTPS request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString .OK , the health check is considered healthy. If the state is ALARM , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is OK or ALARM , the health check status depends on the setting for InsufficientDataHealthStatus : Healthy , Unhealthy , or LastKnownStatus .HealthThreshold .ON , the health check is considered healthy. If the state is OFF , the health check is considered unhealthy.For more information, see How Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
The path, if any, that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example, the file /docs/route53-health-check.html. You can also include query string parameters, for example, /welcome.html?language=jp&login=y .
Amazon Route 53 behavior depends on whether you specify a value for IPAddress .
If you specify a value forIPAddress:
Amazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
When Route 53 checks the health of an endpoint, here is how it constructs the Host header:
80 for Port and HTTP or HTTP_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.443 for Port and HTTPS or HTTPS_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.Port and any value except TCP for Type , Route 53 passes FullyQualifiedDomainName:Port to the endpoint in the Host header.If you don't specify a value for FullyQualifiedDomainName , Route 53 substitutes the value of IPAddress in the Host header in each of the preceding cases.
If you don't specify a value forIPAddress:
Route 53 sends a DNS request to the domain that you specify for FullyQualifiedDomainName at the interval that you specify for RequestInterval . Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
Note
If you don't specify a value for IPAddress , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no resource record set with a type of A for the name that you specify for FullyQualifiedDomainName , the health check fails with a "DNS resolution failed" error.
If you want to check the health of weighted, latency, or failover resource record sets and you choose to specify the endpoint only by FullyQualifiedDomainName , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com), not the name of the resource record sets (www.example.com).
Warning
In this configuration, if you create a health check for which the value of FullyQualifiedDomainName matches the name of the resource record sets and you then associate the health check with those resource record sets, health check results will be unpredictable.
In addition, if the value that you specify for Type is HTTP , HTTPS , HTTP_STR_MATCH , or HTTPS_STR_MATCH , Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify a value for IPAddress . If the value of Type is TCP , Route 53 doesn't pass a Host header.
If the value of Type is HTTP_STR_MATCH or HTTPS_STR_MATCH , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.
Route 53 considers case when searching for SearchString in the response body.
The number of seconds between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.
Warning
You can't change the value of RequestInterval after you create a health check.
If you don't specify a value for RequestInterval , the default value is 30 seconds.
The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see How Amazon Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
If you don't specify a value for FailureThreshold , the default value is three health checks.
Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple Amazon Web Services regions and your endpoint, and to display CloudWatch latency graphs on the Health Checks page in the Route 53 console.
Warning
You can't change the value of MeasureLatency after you create a health check.
Specify whether you want Amazon Route 53 to invert the status of a health check, for example, to consider a health check unhealthy when it otherwise would be considered healthy.
Stops Route 53 from performing health checks. When you disable a health check, here's what happens:
After you disable a health check, Route 53 considers the status of the health check to always be healthy. If you configured DNS failover, Route 53 continues to route traffic to the corresponding resources. If you want to stop routing traffic to a resource, change the value of Inverted.
Charges for a health check still apply when the health check is disabled. For more information, see Amazon Route 53 Pricing.
The number of child health checks that are associated with a CALCULATED health check that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy. To specify the child health checks that you want to associate with a CALCULATED health check, use the ChildHealthChecks element.
Note the following:
0 , Route 53 always considers this health check to be healthy.(CALCULATED Health Checks Only) A complex type that contains one ChildHealthCheck element for each health check that you want to associate with a CALCULATED health check.
Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
Some endpoints require that HTTPS requests include the host name in the client_hello message. If you don't enable SNI, the status of the health check will be SSL alert handshake_failure . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.
The SSL/TLS certificate on your endpoint includes a domain name in the Common Name field and possibly several more in the Subject Alternative Names field. One of the domain names in the certificate should match the value that you specify for FullyQualifiedDomainName . If the endpoint responds to the client_hello message with a certificate that does not include the domain name that you specified in FullyQualifiedDomainName , a health checker will retry the handshake. In the second attempt, the health checker will omit FullyQualifiedDomainName from the client_hello message.
A complex type that contains one Region element for each region from which you want Amazon Route 53 health checkers to check the specified endpoint.
If you don't specify any regions, Route 53 health checkers automatically performs checks from all of the regions that are listed under Valid Values .
If you update a health check to remove a region that has been performing health checks, Route 53 will briefly continue to perform checks from that region to ensure that some health checkers are always checking the endpoint (for example, if you replace three regions with four different regions).
A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in.
For the current list of CloudWatch regions, see Amazon CloudWatch endpoints and quotas in the Amazon Web Services General Reference .
The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
Note
Route 53 supports CloudWatch alarms with the following features:
When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:
Healthy : Route 53 considers the health check to be healthy.Unhealthy : Route 53 considers the health check to be unhealthy.LastKnownStatus : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy.The Amazon Resource Name (ARN) for the Route 53 Application Recovery Controller routing control.
For more information about Route 53 Application Recovery Controller, see Route 53 Application Recovery Controller Developer Guide..
The version of the health check. You can optionally pass this value in a call to UpdateHealthCheck to prevent overwriting another change to the health check.
A complex type that contains information about the CloudWatch alarm that Amazon Route 53 is monitoring for this health check.
For the metric that the CloudWatch alarm is associated with, the number of periods that the metric is compared to the threshold.
For the metric that the CloudWatch alarm is associated with, the value the metric is compared with.
For the metric that the CloudWatch alarm is associated with, the arithmetic operation that is used for the comparison.
For the metric that the CloudWatch alarm is associated with, the duration of one evaluation period in seconds.
The name of the CloudWatch metric that the alarm is associated with.
The namespace of the metric that the alarm is associated with. For more information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
For the metric that the CloudWatch alarm is associated with, the statistic that is applied to the metric.
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about the dimensions for the metric. For information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about one dimension.
For the metric that the CloudWatch alarm is associated with, the name of one dimension.
For the metric that the CloudWatch alarm is associated with, the value of one dimension.
Exceptions
Route53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.IncompatibleVersionget_health_check_count()¶Retrieves the number of health checks that are associated with the current Amazon Web Services account.
See also: AWS API Documentation
Request Syntax
response = client.get_health_check_count()
{
'HealthCheckCount': 123
}
Response Structure
A complex type that contains the response to a GetHealthCheckCount request.
The number of health checks associated with the current Amazon Web Services account.
get_health_check_last_failure_reason(**kwargs)¶Gets the reason that a specified health check failed most recently.
See also: AWS API Documentation
Request Syntax
response = client.get_health_check_last_failure_reason(
HealthCheckId='string'
)
[REQUIRED]
The ID for the health check for which you want the last failure reason. When you created the health check, CreateHealthCheck returned the ID in the response, in the HealthCheckId element.
Note
If you want to get the last failure reason for a calculated health check, you must use the Amazon Route 53 console or the CloudWatch console. You can't use GetHealthCheckLastFailureReason for a calculated health check.
{
'HealthCheckObservations': [
{
'Region': 'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
'IPAddress': 'string',
'StatusReport': {
'Status': 'string',
'CheckedTime': datetime(2015, 1, 1)
}
},
]
}
Response Structure
A complex type that contains the response to a GetHealthCheckLastFailureReason request.
A list that contains one Observation element for each Amazon Route 53 health checker that is reporting a last failure reason.
A complex type that contains the last failure reason as reported by one Amazon Route 53 health checker.
The region of the Amazon Route 53 health checker that provided the status in StatusReport .
The IP address of the Amazon Route 53 health checker that provided the failure reason in StatusReport .
A complex type that contains the last failure reason as reported by one Amazon Route 53 health checker and the time of the failed health check.
A description of the status of the health check endpoint as reported by one of the Amazon Route 53 health checkers.
The date and time that the health checker performed the health check in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Exceptions
Route53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.InvalidInputget_health_check_status(**kwargs)¶Gets status of a specified health check.
Warning
This API is intended for use during development to diagnose behavior. It doesn’t support production use-cases with high query rates that require immediate and actionable responses.
See also: AWS API Documentation
Request Syntax
response = client.get_health_check_status(
HealthCheckId='string'
)
[REQUIRED]
The ID for the health check that you want the current status for. When you created the health check, CreateHealthCheck returned the ID in the response, in the HealthCheckId element.
Note
If you want to check the status of a calculated health check, you must use the Amazon Route 53 console or the CloudWatch console. You can't use GetHealthCheckStatus to get the status of a calculated health check.
{
'HealthCheckObservations': [
{
'Region': 'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
'IPAddress': 'string',
'StatusReport': {
'Status': 'string',
'CheckedTime': datetime(2015, 1, 1)
}
},
]
}
Response Structure
A complex type that contains the response to a GetHealthCheck request.
A list that contains one HealthCheckObservation element for each Amazon Route 53 health checker that is reporting a status about the health check endpoint.
A complex type that contains the last failure reason as reported by one Amazon Route 53 health checker.
The region of the Amazon Route 53 health checker that provided the status in StatusReport .
The IP address of the Amazon Route 53 health checker that provided the failure reason in StatusReport .
A complex type that contains the last failure reason as reported by one Amazon Route 53 health checker and the time of the failed health check.
A description of the status of the health check endpoint as reported by one of the Amazon Route 53 health checkers.
The date and time that the health checker performed the health check in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
Exceptions
Route53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.InvalidInputget_hosted_zone(**kwargs)¶Gets information about a specified hosted zone including the four name servers assigned to the hosted zone.
See also: AWS API Documentation
Request Syntax
response = client.get_hosted_zone(
Id='string'
)
[REQUIRED]
The ID of the hosted zone that you want to get information about.
{
'HostedZone': {
'Id': 'string',
'Name': 'string',
'CallerReference': 'string',
'Config': {
'Comment': 'string',
'PrivateZone': True|False
},
'ResourceRecordSetCount': 123,
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
}
},
'DelegationSet': {
'Id': 'string',
'CallerReference': 'string',
'NameServers': [
'string',
]
},
'VPCs': [
{
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
},
]
}
Response Structure
A complex type that contain the response to a GetHostedZone request.
A complex type that contains general information about the specified hosted zone.
The ID that Amazon Route 53 assigned to the hosted zone when you created it.
The name of the domain. For public hosted zones, this is the name that you have registered with your DNS registrar.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see CreateHostedZone.
The value that you specified for CallerReference when you created the hosted zone.
A complex type that includes the Comment and PrivateZone elements. If you omitted the HostedZoneConfig and Comment elements from the request, the Config and Comment elements don't appear in the response.
Any comments that you want to include about the hosted zone.
A value that indicates whether this is a private hosted zone.
The number of resource record sets in the hosted zone.
If the hosted zone was created by another service, the service that created the hosted zone. When a hosted zone is created by another service, you can't edit or delete it using Route 53.
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
A complex type that lists the Amazon Route 53 name servers for the specified hosted zone.
The ID that Amazon Route 53 assigns to a reusable delegation set.
The value that you specified for CallerReference when you created the reusable delegation set.
A complex type that contains a list of the authoritative name servers for a hosted zone or for a reusable delegation set.
A complex type that contains information about the VPCs that are associated with the specified hosted zone.
(Private hosted zones only) A complex type that contains information about an Amazon VPC.
If you associate a private hosted zone with an Amazon VPC when you make a CreateHostedZone request, the following parameters are also required.
(Private hosted zones only) The region that an Amazon VPC was created in.
(Private hosted zones only) The ID of an Amazon VPC.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidInputExamples
The following example gets information about the Z3M3LMPEXAMPLE hosted zone.
response = client.get_hosted_zone(
Id='Z3M3LMPEXAMPLE',
)
print(response)
Expected Output:
{
'DelegationSet': {
'NameServers': [
'ns-2048.awsdns-64.com',
'ns-2049.awsdns-65.net',
'ns-2050.awsdns-66.org',
'ns-2051.awsdns-67.co.uk',
],
},
'HostedZone': {
'CallerReference': 'C741617D-04E4-F8DE-B9D7-0D150FC61C2E',
'Config': {
'PrivateZone': False,
},
'Id': '/hostedzone/Z3M3LMPEXAMPLE',
'Name': 'myawsbucket.com.',
'ResourceRecordSetCount': 8,
},
'ResponseMetadata': {
'...': '...',
},
}
get_hosted_zone_count()¶Retrieves the number of hosted zones that are associated with the current Amazon Web Services account.
See also: AWS API Documentation
Request Syntax
response = client.get_hosted_zone_count()
{
'HostedZoneCount': 123
}
Response Structure
A complex type that contains the response to a GetHostedZoneCount request.
The total number of public and private hosted zones that are associated with the current Amazon Web Services account.
Exceptions
Route53.Client.exceptions.InvalidInputget_hosted_zone_limit(**kwargs)¶Gets the specified limit for a specified hosted zone, for example, the maximum number of records that you can create in the hosted zone.
For the default limit, see Limits in the Amazon Route 53 Developer Guide . To request a higher limit, open a case.
See also: AWS API Documentation
Request Syntax
response = client.get_hosted_zone_limit(
Type='MAX_RRSETS_BY_ZONE'|'MAX_VPCS_ASSOCIATED_BY_ZONE',
HostedZoneId='string'
)
[REQUIRED]
The limit that you want to get. Valid values include the following:
[REQUIRED]
The ID of the hosted zone that you want to get a limit for.
dict
Response Syntax
{
'Limit': {
'Type': 'MAX_RRSETS_BY_ZONE'|'MAX_VPCS_ASSOCIATED_BY_ZONE',
'Value': 123
},
'Count': 123
}
Response Structure
(dict) --
A complex type that contains the requested limit.
Limit (dict) --
The current setting for the specified limit. For example, if you specified MAX_RRSETS_BY_ZONE for the value of Type in the request, the value of Limit is the maximum number of records that you can create in the specified hosted zone.
Type (string) --
The limit that you requested. Valid values include the following:
Value (integer) --
The current value for the limit that is specified by Type .
Count (integer) --
The current number of entities that you have created of the specified type. For example, if you specified MAX_RRSETS_BY_ZONE for the value of Type in the request, the value of Count is the current number of records that you have created in the specified hosted zone.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.HostedZoneNotPrivateget_paginator(operation_name)¶Create a paginator for an operation.
create_foo, and you'd normally invoke the
operation as client.create_foo(**kwargs), if the
create_foo operation can be paginated, you can use the
call client.get_paginator("create_foo").client.can_paginate method to
check if an operation is pageable.get_query_logging_config(**kwargs)¶Gets information about a specified configuration for DNS query logging.
For more information about DNS query logs, see CreateQueryLoggingConfig and Logging DNS Queries.
See also: AWS API Documentation
Request Syntax
response = client.get_query_logging_config(
Id='string'
)
[REQUIRED]
The ID of the configuration for DNS query logging that you want to get information about.
{
'QueryLoggingConfig': {
'Id': 'string',
'HostedZoneId': 'string',
'CloudWatchLogsLogGroupArn': 'string'
}
}
Response Structure
A complex type that contains information about the query logging configuration that you specified in a GetQueryLoggingConfig request.
The ID for a configuration for DNS query logging.
The ID of the hosted zone that CloudWatch Logs is logging queries for.
The Amazon Resource Name (ARN) of the CloudWatch Logs log group that Amazon Route 53 is publishing logs to.
Exceptions
Route53.Client.exceptions.NoSuchQueryLoggingConfigRoute53.Client.exceptions.InvalidInputget_reusable_delegation_set(**kwargs)¶Retrieves information about a specified reusable delegation set, including the four name servers that are assigned to the delegation set.
See also: AWS API Documentation
Request Syntax
response = client.get_reusable_delegation_set(
Id='string'
)
[REQUIRED]
The ID of the reusable delegation set that you want to get a list of name servers for.
{
'DelegationSet': {
'Id': 'string',
'CallerReference': 'string',
'NameServers': [
'string',
]
}
}
Response Structure
A complex type that contains the response to the GetReusableDelegationSet request.
A complex type that contains information about the reusable delegation set.
The ID that Amazon Route 53 assigns to a reusable delegation set.
The value that you specified for CallerReference when you created the reusable delegation set.
A complex type that contains a list of the authoritative name servers for a hosted zone or for a reusable delegation set.
Exceptions
Route53.Client.exceptions.NoSuchDelegationSetRoute53.Client.exceptions.DelegationSetNotReusableRoute53.Client.exceptions.InvalidInputget_reusable_delegation_set_limit(**kwargs)¶Gets the maximum number of hosted zones that you can associate with the specified reusable delegation set.
For the default limit, see Limits in the Amazon Route 53 Developer Guide . To request a higher limit, open a case.
See also: AWS API Documentation
Request Syntax
response = client.get_reusable_delegation_set_limit(
Type='MAX_ZONES_BY_REUSABLE_DELEGATION_SET',
DelegationSetId='string'
)
[REQUIRED]
Specify MAX_ZONES_BY_REUSABLE_DELEGATION_SET to get the maximum number of hosted zones that you can associate with the specified reusable delegation set.
[REQUIRED]
The ID of the delegation set that you want to get the limit for.
dict
Response Syntax
{
'Limit': {
'Type': 'MAX_ZONES_BY_REUSABLE_DELEGATION_SET',
'Value': 123
},
'Count': 123
}
Response Structure
(dict) --
A complex type that contains the requested limit.
Limit (dict) --
The current setting for the limit on hosted zones that you can associate with the specified reusable delegation set.
Type (string) --
The limit that you requested: MAX_ZONES_BY_REUSABLE_DELEGATION_SET , the maximum number of hosted zones that you can associate with the specified reusable delegation set.
Value (integer) --
The current value for the MAX_ZONES_BY_REUSABLE_DELEGATION_SET limit.
Count (integer) --
The current number of hosted zones that you can associate with the specified reusable delegation set.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchDelegationSetget_traffic_policy(**kwargs)¶Gets information about a specific traffic policy version.
For information about how of deleting a traffic policy affects the response from GetTrafficPolicy , see DeleteTrafficPolicy.
See also: AWS API Documentation
Request Syntax
response = client.get_traffic_policy(
Id='string',
Version=123
)
[REQUIRED]
The ID of the traffic policy that you want to get information about.
[REQUIRED]
The version number of the traffic policy that you want to get information about.
dict
Response Syntax
{
'TrafficPolicy': {
'Id': 'string',
'Version': 123,
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'Document': 'string',
'Comment': 'string'
}
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
TrafficPolicy (dict) --
A complex type that contains settings for the specified traffic policy.
Id (string) --
The ID that Amazon Route 53 assigned to a traffic policy when you created it.
Version (integer) --
The version number that Amazon Route 53 assigns to a traffic policy. For a new traffic policy, the value of Version is always 1.
Name (string) --
The name that you specified when you created the traffic policy.
Type (string) --
The DNS type of the resource record sets that Amazon Route 53 creates when you use a traffic policy to create a traffic policy instance.
Document (string) --
The definition of a traffic policy in JSON format. You specify the JSON document to use for a new traffic policy in the CreateTrafficPolicy request. For more information about the JSON format, see Traffic Policy Document Format.
Comment (string) --
The comment that you specify in the CreateTrafficPolicy request, if any.
Exceptions
Route53.Client.exceptions.NoSuchTrafficPolicyRoute53.Client.exceptions.InvalidInputget_traffic_policy_instance(**kwargs)¶Gets information about a specified traffic policy instance.
Note
After you submit a CreateTrafficPolicyInstance or an UpdateTrafficPolicyInstance request, there's a brief delay while Amazon Route 53 creates the resource record sets that are specified in the traffic policy definition. For more information, see the State response element.
Note
In the Route 53 console, traffic policy instances are known as policy records.
See also: AWS API Documentation
Request Syntax
response = client.get_traffic_policy_instance(
Id='string'
)
[REQUIRED]
The ID of the traffic policy instance that you want to get information about.
{
'TrafficPolicyInstance': {
'Id': 'string',
'HostedZoneId': 'string',
'Name': 'string',
'TTL': 123,
'State': 'string',
'Message': 'string',
'TrafficPolicyId': 'string',
'TrafficPolicyVersion': 123,
'TrafficPolicyType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS'
}
}
Response Structure
A complex type that contains information about the resource record sets that Amazon Route 53 created based on a specified traffic policy.
A complex type that contains settings for the traffic policy instance.
The ID that Amazon Route 53 assigned to the new traffic policy instance.
The ID of the hosted zone that Amazon Route 53 created resource record sets in.
The DNS name, such as www.example.com, for which Amazon Route 53 responds to queries by using the resource record sets that are associated with this traffic policy instance.
The TTL that Amazon Route 53 assigned to all of the resource record sets that it created in the specified hosted zone.
The value of State is one of the following values:
Applied
Amazon Route 53 has finished creating resource record sets, and changes have propagated to all Route 53 edge locations.
Creating
Route 53 is creating the resource record sets. Use GetTrafficPolicyInstance to confirm that the CreateTrafficPolicyInstance request completed successfully.
Failed
Route 53 wasn't able to create or update the resource record sets. When the value of State is Failed , see Message for an explanation of what caused the request to fail.
If State is Failed , an explanation of the reason for the failure. If State is another value, Message is empty.
The ID of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
The version of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
The DNS type that Amazon Route 53 assigned to all of the resource record sets that it created for this traffic policy instance.
Exceptions
Route53.Client.exceptions.NoSuchTrafficPolicyInstanceRoute53.Client.exceptions.InvalidInputget_traffic_policy_instance_count()¶Gets the number of traffic policy instances that are associated with the current Amazon Web Services account.
See also: AWS API Documentation
Request Syntax
response = client.get_traffic_policy_instance_count()
{
'TrafficPolicyInstanceCount': 123
}
Response Structure
A complex type that contains information about the resource record sets that Amazon Route 53 created based on a specified traffic policy.
The number of traffic policy instances that are associated with the current Amazon Web Services account.
get_waiter(waiter_name)¶Returns an object that can wait for some condition.
list_cidr_blocks(**kwargs)¶Returns a paginated list of location objects and their CIDR blocks.
See also: AWS API Documentation
Request Syntax
response = client.list_cidr_blocks(
CollectionId='string',
LocationName='string',
NextToken='string',
MaxResults='string'
)
[REQUIRED]
The UUID of the CIDR collection.
dict
Response Syntax
{
'NextToken': 'string',
'CidrBlocks': [
{
'CidrBlock': 'string',
'LocationName': 'string'
},
]
}
Response Structure
(dict) --
NextToken (string) --
An opaque pagination token to indicate where the service is to begin enumerating results.
If no value is provided, the listing of results starts from the beginning.
CidrBlocks (list) --
A complex type that contains information about the CIDR blocks.
(dict) --
A complex type that lists the CIDR blocks.
CidrBlock (string) --
Value for the CIDR block.
LocationName (string) --
The location name of the CIDR block.
Exceptions
Route53.Client.exceptions.NoSuchCidrCollectionExceptionRoute53.Client.exceptions.NoSuchCidrLocationExceptionRoute53.Client.exceptions.InvalidInputlist_cidr_collections(**kwargs)¶Returns a paginated list of CIDR collections in the Amazon Web Services account (metadata only).
See also: AWS API Documentation
Request Syntax
response = client.list_cidr_collections(
NextToken='string',
MaxResults='string'
)
An opaque pagination token to indicate where the service is to begin enumerating results.
If no value is provided, the listing of results starts from the beginning.
dict
Response Syntax
{
'NextToken': 'string',
'CidrCollections': [
{
'Arn': 'string',
'Id': 'string',
'Name': 'string',
'Version': 123
},
]
}
Response Structure
(dict) --
NextToken (string) --
An opaque pagination token to indicate where the service is to begin enumerating results.
If no value is provided, the listing of results starts from the beginning.
CidrCollections (list) --
A complex type with information about the CIDR collection.
(dict) --
A complex type that is an entry in an CidrCollection array.
Arn (string) --
The ARN of the collection summary. Can be used to reference the collection in IAM policy or cross-account.
Id (string) --
Unique ID for the CIDR collection.
Name (string) --
The name of a CIDR collection.
Version (integer) --
A sequential counter that Route 53 sets to 1 when you create a CIDR collection and increments by 1 each time you update settings for the CIDR collection.
Exceptions
Route53.Client.exceptions.InvalidInputlist_cidr_locations(**kwargs)¶Returns a paginated list of CIDR locations for the given collection (metadata only, does not include CIDR blocks).
See also: AWS API Documentation
Request Syntax
response = client.list_cidr_locations(
CollectionId='string',
NextToken='string',
MaxResults='string'
)
[REQUIRED]
The CIDR collection ID.
An opaque pagination token to indicate where the service is to begin enumerating results.
If no value is provided, the listing of results starts from the beginning.
dict
Response Syntax
{
'NextToken': 'string',
'CidrLocations': [
{
'LocationName': 'string'
},
]
}
Response Structure
(dict) --
NextToken (string) --
An opaque pagination token to indicate where the service is to begin enumerating results.
If no value is provided, the listing of results starts from the beginning.
CidrLocations (list) --
A complex type that contains information about the list of CIDR locations.
(dict) --
A complex type that contains information about the CIDR location.
LocationName (string) --
A string that specifies a location name.
Exceptions
Route53.Client.exceptions.NoSuchCidrCollectionExceptionRoute53.Client.exceptions.InvalidInputlist_geo_locations(**kwargs)¶Retrieves a list of supported geographic locations.
Countries are listed first, and continents are listed last. If Amazon Route 53 supports subdivisions for a country (for example, states or provinces), the subdivisions for that country are listed in alphabetical order immediately after the corresponding country.
Route 53 does not perform authorization for this API because it retrieves information that is already available to the public.
For a list of supported geolocation codes, see the GeoLocation data type.
See also: AWS API Documentation
Request Syntax
response = client.list_geo_locations(
StartContinentCode='string',
StartCountryCode='string',
StartSubdivisionCode='string',
MaxItems='string'
)
The code for the continent with which you want to start listing locations that Amazon Route 53 supports for geolocation. If Route 53 has already returned a page or more of results, if IsTruncated is true, and if NextContinentCode from the previous response has a value, enter that value in startcontinentcode to return the next page of results.
Include startcontinentcode only if you want to list continents. Don't include startcontinentcode when you're listing countries or countries with their subdivisions.
IsTruncated is true , and if NextCountryCode from the previous response has a value, enter that value in startcountrycode to return the next page of results.The code for the state of the United States with which you want to start listing locations that Amazon Route 53 supports for geolocation. If Route 53 has already returned a page or more of results, if IsTruncated is true , and if NextSubdivisionCode from the previous response has a value, enter that value in startsubdivisioncode to return the next page of results.
To list subdivisions (U.S. states), you must include both startcountrycode and startsubdivisioncode .
maxitems geolocations remain to be listed, then the value of the IsTruncated element in the response is true .dict
Response Syntax
{
'GeoLocationDetailsList': [
{
'ContinentCode': 'string',
'ContinentName': 'string',
'CountryCode': 'string',
'CountryName': 'string',
'SubdivisionCode': 'string',
'SubdivisionName': 'string'
},
],
'IsTruncated': True|False,
'NextContinentCode': 'string',
'NextCountryCode': 'string',
'NextSubdivisionCode': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type containing the response information for the request.
GeoLocationDetailsList (list) --
A complex type that contains one GeoLocationDetails element for each location that Amazon Route 53 supports for geolocation.
(dict) --
A complex type that contains the codes and full continent, country, and subdivision names for the specified geolocation code.
ContinentCode (string) --
The two-letter code for the continent.
ContinentName (string) --
The full name of the continent.
CountryCode (string) --
The two-letter code for the country.
CountryName (string) --
The name of the country.
SubdivisionCode (string) --
The code for the subdivision, such as a particular state within the United States. For a list of US state abbreviations, see Appendix B: Two–Letter State and Possession Abbreviations on the United States Postal Service website. For a list of all supported subdivision codes, use the ListGeoLocations API.
SubdivisionName (string) --
The full name of the subdivision. Route 53 currently supports only states in the United States.
IsTruncated (boolean) --
A value that indicates whether more locations remain to be listed after the last location in this response. If so, the value of IsTruncated is true . To get more values, submit another request and include the values of NextContinentCode , NextCountryCode , and NextSubdivisionCode in the startcontinentcode , startcountrycode , and startsubdivisioncode , as applicable.
NextContinentCode (string) --
If IsTruncated is true , you can make a follow-up request to display more locations. Enter the value of NextContinentCode in the startcontinentcode parameter in another ListGeoLocations request.
NextCountryCode (string) --
If IsTruncated is true , you can make a follow-up request to display more locations. Enter the value of NextCountryCode in the startcountrycode parameter in another ListGeoLocations request.
NextSubdivisionCode (string) --
If IsTruncated is true , you can make a follow-up request to display more locations. Enter the value of NextSubdivisionCode in the startsubdivisioncode parameter in another ListGeoLocations request.
MaxItems (string) --
The value that you specified for MaxItems in the request.
Exceptions
Route53.Client.exceptions.InvalidInputlist_health_checks(**kwargs)¶Retrieve a list of the health checks that are associated with the current Amazon Web Services account.
See also: AWS API Documentation
Request Syntax
response = client.list_health_checks(
Marker='string',
MaxItems='string'
)
If the value of IsTruncated in the previous response was true , you have more health checks. To get another group, submit another ListHealthChecks request.
For the value of marker , specify the value of NextMarker from the previous response, which is the ID of the first health check that Amazon Route 53 will return if you submit another request.
If the value of IsTruncated in the previous response was false , there are no more health checks to get.
ListHealthChecks to return in response to the current request. Amazon Route 53 returns a maximum of 100 items. If you set MaxItems to a value greater than 100, Route 53 returns only the first 100 health checks.dict
Response Syntax
{
'HealthChecks': [
{
'Id': 'string',
'CallerReference': 'string',
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
},
'HealthCheckConfig': {
'IPAddress': 'string',
'Port': 123,
'Type': 'HTTP'|'HTTPS'|'HTTP_STR_MATCH'|'HTTPS_STR_MATCH'|'TCP'|'CALCULATED'|'CLOUDWATCH_METRIC'|'RECOVERY_CONTROL',
'ResourcePath': 'string',
'FullyQualifiedDomainName': 'string',
'SearchString': 'string',
'RequestInterval': 123,
'FailureThreshold': 123,
'MeasureLatency': True|False,
'Inverted': True|False,
'Disabled': True|False,
'HealthThreshold': 123,
'ChildHealthChecks': [
'string',
],
'EnableSNI': True|False,
'Regions': [
'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
],
'AlarmIdentifier': {
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-central-1'|'eu-central-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-northwest-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1',
'Name': 'string'
},
'InsufficientDataHealthStatus': 'Healthy'|'Unhealthy'|'LastKnownStatus',
'RoutingControlArn': 'string'
},
'HealthCheckVersion': 123,
'CloudWatchAlarmConfiguration': {
'EvaluationPeriods': 123,
'Threshold': 123.0,
'ComparisonOperator': 'GreaterThanOrEqualToThreshold'|'GreaterThanThreshold'|'LessThanThreshold'|'LessThanOrEqualToThreshold',
'Period': 123,
'MetricName': 'string',
'Namespace': 'string',
'Statistic': 'Average'|'Sum'|'SampleCount'|'Maximum'|'Minimum',
'Dimensions': [
{
'Name': 'string',
'Value': 'string'
},
]
}
},
],
'Marker': 'string',
'IsTruncated': True|False,
'NextMarker': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains the response to a ListHealthChecks request.
HealthChecks (list) --
A complex type that contains one HealthCheck element for each health check that is associated with the current Amazon Web Services account.
(dict) --
A complex type that contains information about one health check that is associated with the current Amazon Web Services account.
Id (string) --
The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long.
CallerReference (string) --
A unique string that you specified when you created the health check.
LinkedService (dict) --
If the health check was created by another service, the service that created the health check. When a health check is created by another service, you can't edit or delete it using Amazon Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
HealthCheckConfig (dict) --
A complex type that contains detailed information about one health check.
IPAddress (string) --
The IPv4 or IPv6 IP address of the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress , Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval . Using an IP address returned by DNS, Route 53 then checks the health of the endpoint.
Use one of the following formats for the value of IPAddress :
192.0.2.44 .2001:0db8:85a3:0000:0000:abcd:0001:2345 . You can also shorten IPv6 addresses as described in RFC 5952, for example, 2001:db8:85a3::abcd:1:2345 .If the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for IPAddress . This ensures that the IP address of your instance will never change.
For more information, see FullyQualifiedDomainName.
Constraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:
When the value of Type is CALCULATED or CLOUDWATCH_METRIC , omit IPAddress .
Port (integer) --
The port on the endpoint that you want Amazon Route 53 to perform health checks on.
Note
Don't specify a value for Port when you specify a value for Type of CLOUDWATCH_METRIC or CALCULATED .
Type (string) --
The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.
Warning
You can't change the value of Type after you create a health check.
You can create the following types of health checks:
Warning
If you specify HTTPS for the value of Type , the endpoint must support TLS v1.0 or later.
SearchString .HTTPS request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString .OK , the health check is considered healthy. If the state is ALARM , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is OK or ALARM , the health check status depends on the setting for InsufficientDataHealthStatus : Healthy , Unhealthy , or LastKnownStatus .HealthThreshold .ON , the health check is considered healthy. If the state is OFF , the health check is considered unhealthy.For more information, see How Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
ResourcePath (string) --
The path, if any, that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example, the file /docs/route53-health-check.html. You can also include query string parameters, for example, /welcome.html?language=jp&login=y .
FullyQualifiedDomainName (string) --
Amazon Route 53 behavior depends on whether you specify a value for IPAddress .
If you specify a value for
IPAddress:
Amazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
When Route 53 checks the health of an endpoint, here is how it constructs the Host header:
80 for Port and HTTP or HTTP_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.443 for Port and HTTPS or HTTPS_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.Port and any value except TCP for Type , Route 53 passes FullyQualifiedDomainName:Port to the endpoint in the Host header.If you don't specify a value for FullyQualifiedDomainName , Route 53 substitutes the value of IPAddress in the Host header in each of the preceding cases.
If you don't specify a value for
IPAddress:
Route 53 sends a DNS request to the domain that you specify for FullyQualifiedDomainName at the interval that you specify for RequestInterval . Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
Note
If you don't specify a value for IPAddress , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no resource record set with a type of A for the name that you specify for FullyQualifiedDomainName , the health check fails with a "DNS resolution failed" error.
If you want to check the health of weighted, latency, or failover resource record sets and you choose to specify the endpoint only by FullyQualifiedDomainName , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com), not the name of the resource record sets (www.example.com).
Warning
In this configuration, if you create a health check for which the value of FullyQualifiedDomainName matches the name of the resource record sets and you then associate the health check with those resource record sets, health check results will be unpredictable.
In addition, if the value that you specify for Type is HTTP , HTTPS , HTTP_STR_MATCH , or HTTPS_STR_MATCH , Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify a value for IPAddress . If the value of Type is TCP , Route 53 doesn't pass a Host header.
SearchString (string) --
If the value of Type is HTTP_STR_MATCH or HTTPS_STR_MATCH , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.
Route 53 considers case when searching for SearchString in the response body.
RequestInterval (integer) --
The number of seconds between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.
Warning
You can't change the value of RequestInterval after you create a health check.
If you don't specify a value for RequestInterval , the default value is 30 seconds.
FailureThreshold (integer) --
The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see How Amazon Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
If you don't specify a value for FailureThreshold , the default value is three health checks.
MeasureLatency (boolean) --
Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple Amazon Web Services regions and your endpoint, and to display CloudWatch latency graphs on the Health Checks page in the Route 53 console.
Warning
You can't change the value of MeasureLatency after you create a health check.
Inverted (boolean) --
Specify whether you want Amazon Route 53 to invert the status of a health check, for example, to consider a health check unhealthy when it otherwise would be considered healthy.
Disabled (boolean) --
Stops Route 53 from performing health checks. When you disable a health check, here's what happens:
After you disable a health check, Route 53 considers the status of the health check to always be healthy. If you configured DNS failover, Route 53 continues to route traffic to the corresponding resources. If you want to stop routing traffic to a resource, change the value of Inverted.
Charges for a health check still apply when the health check is disabled. For more information, see Amazon Route 53 Pricing.
HealthThreshold (integer) --
The number of child health checks that are associated with a CALCULATED health check that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy. To specify the child health checks that you want to associate with a CALCULATED health check, use the ChildHealthChecks element.
Note the following:
0 , Route 53 always considers this health check to be healthy.ChildHealthChecks (list) --
(CALCULATED Health Checks Only) A complex type that contains one ChildHealthCheck element for each health check that you want to associate with a CALCULATED health check.
EnableSNI (boolean) --
Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
Some endpoints require that HTTPS requests include the host name in the client_hello message. If you don't enable SNI, the status of the health check will be SSL alert handshake_failure . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.
The SSL/TLS certificate on your endpoint includes a domain name in the Common Name field and possibly several more in the Subject Alternative Names field. One of the domain names in the certificate should match the value that you specify for FullyQualifiedDomainName . If the endpoint responds to the client_hello message with a certificate that does not include the domain name that you specified in FullyQualifiedDomainName , a health checker will retry the handshake. In the second attempt, the health checker will omit FullyQualifiedDomainName from the client_hello message.
Regions (list) --
A complex type that contains one Region element for each region from which you want Amazon Route 53 health checkers to check the specified endpoint.
If you don't specify any regions, Route 53 health checkers automatically performs checks from all of the regions that are listed under Valid Values .
If you update a health check to remove a region that has been performing health checks, Route 53 will briefly continue to perform checks from that region to ensure that some health checkers are always checking the endpoint (for example, if you replace three regions with four different regions).
AlarmIdentifier (dict) --
A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
Region (string) --
For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in.
For the current list of CloudWatch regions, see Amazon CloudWatch endpoints and quotas in the Amazon Web Services General Reference .
Name (string) --
The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
Note
Route 53 supports CloudWatch alarms with the following features:
InsufficientDataHealthStatus (string) --
When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:
Healthy : Route 53 considers the health check to be healthy.Unhealthy : Route 53 considers the health check to be unhealthy.LastKnownStatus : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy.RoutingControlArn (string) --
The Amazon Resource Name (ARN) for the Route 53 Application Recovery Controller routing control.
For more information about Route 53 Application Recovery Controller, see Route 53 Application Recovery Controller Developer Guide..
HealthCheckVersion (integer) --
The version of the health check. You can optionally pass this value in a call to UpdateHealthCheck to prevent overwriting another change to the health check.
CloudWatchAlarmConfiguration (dict) --
A complex type that contains information about the CloudWatch alarm that Amazon Route 53 is monitoring for this health check.
EvaluationPeriods (integer) --
For the metric that the CloudWatch alarm is associated with, the number of periods that the metric is compared to the threshold.
Threshold (float) --
For the metric that the CloudWatch alarm is associated with, the value the metric is compared with.
ComparisonOperator (string) --
For the metric that the CloudWatch alarm is associated with, the arithmetic operation that is used for the comparison.
Period (integer) --
For the metric that the CloudWatch alarm is associated with, the duration of one evaluation period in seconds.
MetricName (string) --
The name of the CloudWatch metric that the alarm is associated with.
Namespace (string) --
The namespace of the metric that the alarm is associated with. For more information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
Statistic (string) --
For the metric that the CloudWatch alarm is associated with, the statistic that is applied to the metric.
Dimensions (list) --
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about the dimensions for the metric. For information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
(dict) --
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about one dimension.
Name (string) --
For the metric that the CloudWatch alarm is associated with, the name of one dimension.
Value (string) --
For the metric that the CloudWatch alarm is associated with, the value of one dimension.
Marker (string) --
For the second and subsequent calls to ListHealthChecks , Marker is the value that you specified for the marker parameter in the previous request.
IsTruncated (boolean) --
A flag that indicates whether there are more health checks to be listed. If the response was truncated, you can get the next group of health checks by submitting another ListHealthChecks request and specifying the value of NextMarker in the marker parameter.
NextMarker (string) --
If IsTruncated is true , the value of NextMarker identifies the first health check that Amazon Route 53 returns if you submit another ListHealthChecks request and specify the value of NextMarker in the marker parameter.
MaxItems (string) --
The value that you specified for the maxitems parameter in the call to ListHealthChecks that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.IncompatibleVersionlist_hosted_zones(**kwargs)¶Retrieves a list of the public and private hosted zones that are associated with the current Amazon Web Services account. The response includes a HostedZones child element for each hosted zone.
Amazon Route 53 returns a maximum of 100 items in each response. If you have a lot of hosted zones, you can use the maxitems parameter to list them in groups of up to 100.
See also: AWS API Documentation
Request Syntax
response = client.list_hosted_zones(
Marker='string',
MaxItems='string',
DelegationSetId='string'
)
If the value of IsTruncated in the previous response was true , you have more hosted zones. To get more hosted zones, submit another ListHostedZones request.
For the value of marker , specify the value of NextMarker from the previous response, which is the ID of the first hosted zone that Amazon Route 53 will return if you submit another request.
If the value of IsTruncated in the previous response was false , there are no more hosted zones to get.
maxitems hosted zones, the value of IsTruncated in the response is true , and the value of NextMarker is the hosted zone ID of the first hosted zone that Route 53 will return if you submit another request.dict
Response Syntax
{
'HostedZones': [
{
'Id': 'string',
'Name': 'string',
'CallerReference': 'string',
'Config': {
'Comment': 'string',
'PrivateZone': True|False
},
'ResourceRecordSetCount': 123,
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
}
},
],
'Marker': 'string',
'IsTruncated': True|False,
'NextMarker': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
HostedZones (list) --
A complex type that contains general information about the hosted zone.
(dict) --
A complex type that contains general information about the hosted zone.
Id (string) --
The ID that Amazon Route 53 assigned to the hosted zone when you created it.
Name (string) --
The name of the domain. For public hosted zones, this is the name that you have registered with your DNS registrar.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see CreateHostedZone.
CallerReference (string) --
The value that you specified for CallerReference when you created the hosted zone.
Config (dict) --
A complex type that includes the Comment and PrivateZone elements. If you omitted the HostedZoneConfig and Comment elements from the request, the Config and Comment elements don't appear in the response.
Comment (string) --
Any comments that you want to include about the hosted zone.
PrivateZone (boolean) --
A value that indicates whether this is a private hosted zone.
ResourceRecordSetCount (integer) --
The number of resource record sets in the hosted zone.
LinkedService (dict) --
If the hosted zone was created by another service, the service that created the hosted zone. When a hosted zone is created by another service, you can't edit or delete it using Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Marker (string) --
For the second and subsequent calls to ListHostedZones , Marker is the value that you specified for the marker parameter in the request that produced the current response.
IsTruncated (boolean) --
A flag indicating whether there are more hosted zones to be listed. If the response was truncated, you can get more hosted zones by submitting another ListHostedZones request and specifying the value of NextMarker in the marker parameter.
NextMarker (string) --
If IsTruncated is true , the value of NextMarker identifies the first hosted zone in the next group of hosted zones. Submit another ListHostedZones request, and specify the value of NextMarker from the response in the marker parameter.
This element is present only if IsTruncated is true .
MaxItems (string) --
The value that you specified for the maxitems parameter in the call to ListHostedZones that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchDelegationSetRoute53.Client.exceptions.DelegationSetNotReusablelist_hosted_zones_by_name(**kwargs)¶Retrieves a list of your hosted zones in lexicographic order. The response includes a HostedZones child element for each hosted zone created by the current Amazon Web Services account.
ListHostedZonesByNamesorts hosted zones by name with the labels reversed. For example:
com.example.www.
Note the trailing dot, which can change the sort order in some circumstances.
If the domain name includes escape characters or Punycode, ListHostedZonesByName alphabetizes the domain name using the escaped or Punycoded value, which is the format that Amazon Route 53 saves in its database. For example, to create a hosted zone for exämple.com, you specify ex344mple.com for the domain name. ListHostedZonesByName alphabetizes it as:
com.ex\344mple.
The labels are reversed and alphabetized using the escaped value. For more information about valid domain name formats, including internationalized domain names, see DNS Domain Name Format in the Amazon Route 53 Developer Guide .
Route 53 returns up to 100 items in each response. If you have a lot of hosted zones, use the MaxItems parameter to list them in groups of up to 100. The response includes values that help navigate from one group of MaxItems hosted zones to the next:
DNSName and HostedZoneId elements in the response contain the values, if any, specified for the dnsname and hostedzoneid parameters in the request that produced the current response.MaxItems element in the response contains the value, if any, that you specified for the maxitems parameter in the request that produced the current response.IsTruncated in the response is true, there are more hosted zones associated with the current Amazon Web Services account. If IsTruncated is false, this response includes the last hosted zone that is associated with the current account. The NextDNSName element and NextHostedZoneId elements are omitted from the response.NextDNSName and NextHostedZoneId elements in the response contain the domain name and the hosted zone ID of the next hosted zone that is associated with the current Amazon Web Services account. If you want to list more hosted zones, make another call to ListHostedZonesByName , and specify the value of NextDNSName and NextHostedZoneId in the dnsname and hostedzoneid parameters, respectively.See also: AWS API Documentation
Request Syntax
response = client.list_hosted_zones_by_name(
DNSName='string',
HostedZoneId='string',
MaxItems='string'
)
ListHostedZonesByName , include the dnsname parameter only if you want to specify the name of the first hosted zone in the response. If you don't include the dnsname parameter, Amazon Route 53 returns all of the hosted zones that were created by the current Amazon Web Services account, in ASCII order. For subsequent requests, include both dnsname and hostedzoneid parameters. For dnsname , specify the value of NextDNSName from the previous response.(Optional) For your first request to ListHostedZonesByName , do not include the hostedzoneid parameter.
If you have more hosted zones than the value of maxitems , ListHostedZonesByName returns only the first maxitems hosted zones. To get the next group of maxitems hosted zones, submit another request to ListHostedZonesByName and include both dnsname and hostedzoneid parameters. For the value of hostedzoneid , specify the value of the NextHostedZoneId element from the previous response.
maxitems hosted zones, then the value of the IsTruncated element in the response is true, and the values of NextDNSName and NextHostedZoneId specify the first hosted zone in the next group of maxitems hosted zones.dict
Response Syntax
{
'HostedZones': [
{
'Id': 'string',
'Name': 'string',
'CallerReference': 'string',
'Config': {
'Comment': 'string',
'PrivateZone': True|False
},
'ResourceRecordSetCount': 123,
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
}
},
],
'DNSName': 'string',
'HostedZoneId': 'string',
'IsTruncated': True|False,
'NextDNSName': 'string',
'NextHostedZoneId': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
HostedZones (list) --
A complex type that contains general information about the hosted zone.
(dict) --
A complex type that contains general information about the hosted zone.
Id (string) --
The ID that Amazon Route 53 assigned to the hosted zone when you created it.
Name (string) --
The name of the domain. For public hosted zones, this is the name that you have registered with your DNS registrar.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see CreateHostedZone.
CallerReference (string) --
The value that you specified for CallerReference when you created the hosted zone.
Config (dict) --
A complex type that includes the Comment and PrivateZone elements. If you omitted the HostedZoneConfig and Comment elements from the request, the Config and Comment elements don't appear in the response.
Comment (string) --
Any comments that you want to include about the hosted zone.
PrivateZone (boolean) --
A value that indicates whether this is a private hosted zone.
ResourceRecordSetCount (integer) --
The number of resource record sets in the hosted zone.
LinkedService (dict) --
If the hosted zone was created by another service, the service that created the hosted zone. When a hosted zone is created by another service, you can't edit or delete it using Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
DNSName (string) --
For the second and subsequent calls to ListHostedZonesByName , DNSName is the value that you specified for the dnsname parameter in the request that produced the current response.
HostedZoneId (string) --
The ID that Amazon Route 53 assigned to the hosted zone when you created it.
IsTruncated (boolean) --
A flag that indicates whether there are more hosted zones to be listed. If the response was truncated, you can get the next group of maxitems hosted zones by calling ListHostedZonesByName again and specifying the values of NextDNSName and NextHostedZoneId elements in the dnsname and hostedzoneid parameters.
NextDNSName (string) --
If IsTruncated is true, the value of NextDNSName is the name of the first hosted zone in the next group of maxitems hosted zones. Call ListHostedZonesByName again and specify the value of NextDNSName and NextHostedZoneId in the dnsname and hostedzoneid parameters, respectively.
This element is present only if IsTruncated is true .
NextHostedZoneId (string) --
If IsTruncated is true , the value of NextHostedZoneId identifies the first hosted zone in the next group of maxitems hosted zones. Call ListHostedZonesByName again and specify the value of NextDNSName and NextHostedZoneId in the dnsname and hostedzoneid parameters, respectively.
This element is present only if IsTruncated is true .
MaxItems (string) --
The value that you specified for the maxitems parameter in the call to ListHostedZonesByName that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.InvalidDomainNamelist_hosted_zones_by_vpc(**kwargs)¶Lists all the private hosted zones that a specified VPC is associated with, regardless of which Amazon Web Services account or Amazon Web Services service owns the hosted zones. The HostedZoneOwner structure in the response contains one of the following values:
OwningAccount element, which contains the account number of either the current Amazon Web Services account or another Amazon Web Services account. Some services, such as Cloud Map, create hosted zones using the current account.OwningService element, which identifies the Amazon Web Services service that created and owns the hosted zone. For example, if a hosted zone was created by Amazon Elastic File System (Amazon EFS), the value of Owner is efs.amazonaws.com .Note
When listing private hosted zones, the hosted zone and the Amazon VPC must belong to the same partition where the hosted zones were created. A partition is a group of Amazon Web Services Regions. Each Amazon Web Services account is scoped to one partition.
The following are the supported partitions:
aws - Amazon Web Services Regionsaws-cn - China Regionsaws-us-gov - Amazon Web Services GovCloud (US) RegionFor more information, see Access Management in the Amazon Web Services General Reference .
See also: AWS API Documentation
Request Syntax
response = client.list_hosted_zones_by_vpc(
VPCId='string',
VPCRegion='us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
MaxItems='string',
NextToken='string'
)
[REQUIRED]
The ID of the Amazon VPC that you want to list hosted zones for.
[REQUIRED]
For the Amazon VPC that you specified for VPCId , the Amazon Web Services Region that you created the VPC in.
MaxItems hosted zones, the response includes a NextToken element. NextToken contains an encrypted token that identifies the first hosted zone that Route 53 will return if you submit another request.If the previous response included a NextToken element, the specified VPC is associated with more hosted zones. To get more hosted zones, submit another ListHostedZonesByVPC request.
For the value of NextToken , specify the value of NextToken from the previous response.
If the previous response didn't include a NextToken element, there are no more hosted zones to get.
dict
Response Syntax
{
'HostedZoneSummaries': [
{
'HostedZoneId': 'string',
'Name': 'string',
'Owner': {
'OwningAccount': 'string',
'OwningService': 'string'
}
},
],
'MaxItems': 'string',
'NextToken': 'string'
}
Response Structure
(dict) --
HostedZoneSummaries (list) --
A list that contains one HostedZoneSummary element for each hosted zone that the specified Amazon VPC is associated with. Each HostedZoneSummary element contains the hosted zone name and ID, and information about who owns the hosted zone.
(dict) --
In the response to a ListHostedZonesByVPC request, the HostedZoneSummaries element contains one HostedZoneSummary element for each hosted zone that the specified Amazon VPC is associated with. Each HostedZoneSummary element contains the hosted zone name and ID, and information about who owns the hosted zone.
HostedZoneId (string) --
The Route 53 hosted zone ID of a private hosted zone that the specified VPC is associated with.
Name (string) --
The name of the private hosted zone, such as example.com .
Owner (dict) --
The owner of a private hosted zone that the specified VPC is associated with. The owner can be either an Amazon Web Services account or an Amazon Web Services service.
OwningAccount (string) --
If the hosted zone was created by an Amazon Web Services account, or was created by an Amazon Web Services service that creates hosted zones using the current account, OwningAccount contains the account ID of that account. For example, when you use Cloud Map to create a hosted zone, Cloud Map creates the hosted zone using the current Amazon Web Services account.
OwningService (string) --
If an Amazon Web Services service uses its own account to create a hosted zone and associate the specified VPC with that hosted zone, OwningService contains an abbreviation that identifies the service. For example, if Amazon Elastic File System (Amazon EFS) created a hosted zone and associated a VPC with the hosted zone, the value of OwningService is efs.amazonaws.com .
MaxItems (string) --
The value that you specified for MaxItems in the most recent ListHostedZonesByVPC request.
NextToken (string) --
The value that you will use for NextToken in the next ListHostedZonesByVPC request.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.InvalidPaginationTokenlist_query_logging_configs(**kwargs)¶Lists the configurations for DNS query logging that are associated with the current Amazon Web Services account or the configuration that is associated with a specified hosted zone.
For more information about DNS query logs, see CreateQueryLoggingConfig. Additional information, including the format of DNS query logs, appears in Logging DNS Queries in the Amazon Route 53 Developer Guide .
See also: AWS API Documentation
Request Syntax
response = client.list_query_logging_configs(
HostedZoneId='string',
NextToken='string',
MaxResults='string'
)
(Optional) If you want to list the query logging configuration that is associated with a hosted zone, specify the ID in HostedZoneId .
If you don't specify a hosted zone ID, ListQueryLoggingConfigs returns all of the configurations that are associated with the current Amazon Web Services account.
(Optional) If the current Amazon Web Services account has more than MaxResults query logging configurations, use NextToken to get the second and subsequent pages of results.
For the first ListQueryLoggingConfigs request, omit this value.
For the second and subsequent requests, get the value of NextToken from the previous response and specify that value for NextToken in the request.
(Optional) The maximum number of query logging configurations that you want Amazon Route 53 to return in response to the current request. If the current Amazon Web Services account has more than MaxResults configurations, use the value of NextToken in the response to get the next page of results.
If you don't specify a value for MaxResults , Route 53 returns up to 100 configurations.
dict
Response Syntax
{
'QueryLoggingConfigs': [
{
'Id': 'string',
'HostedZoneId': 'string',
'CloudWatchLogsLogGroupArn': 'string'
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
QueryLoggingConfigs (list) --
An array that contains one QueryLoggingConfig element for each configuration for DNS query logging that is associated with the current Amazon Web Services account.
(dict) --
A complex type that contains information about a configuration for DNS query logging.
Id (string) --
The ID for a configuration for DNS query logging.
HostedZoneId (string) --
The ID of the hosted zone that CloudWatch Logs is logging queries for.
CloudWatchLogsLogGroupArn (string) --
The Amazon Resource Name (ARN) of the CloudWatch Logs log group that Amazon Route 53 is publishing logs to.
NextToken (string) --
If a response includes the last of the query logging configurations that are associated with the current Amazon Web Services account, NextToken doesn't appear in the response.
If a response doesn't include the last of the configurations, you can get more configurations by submitting another ListQueryLoggingConfigs request. Get the value of NextToken that Amazon Route 53 returned in the previous response and include it in NextToken in the next request.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.InvalidPaginationTokenRoute53.Client.exceptions.NoSuchHostedZonelist_resource_record_sets(**kwargs)¶Lists the resource record sets in a specified hosted zone.
ListResourceRecordSetsreturns up to 300 resource record sets at a time in ASCII order, beginning at a position specified by thenameandtypeelements.Sort order
ListResourceRecordSetssorts results first by DNS name with the labels reversed, for example:
com.example.www.
Note the trailing dot, which can change the sort order when the record name contains characters that appear before . (decimal 46) in the ASCII table. These characters include the following: ! " # $ % & ' ( ) * + , -
When multiple records have the same DNS name, ListResourceRecordSets sorts results by the record type.
Specifying where to start listing records
You can use the name and type elements to specify the resource record set that the list begins with:
If you do not specify Name or Type
The results begin with the first resource record set that the hosted zone contains.
If you specify Name but not Type
The results begin with the first resource record set in the list whose name is greater than or equal to Name .
If you specify Type but not Name
Amazon Route 53 returns the InvalidInput error.
If you specify both Name and Type
The results begin with the first resource record set in the list whose name is greater than or equal to Name , and whose type is greater than or equal to Type .
Resource record sets that are PENDING
This action returns the most current version of the records. This includes records that are PENDING , and that are not yet available on all Route 53 DNS servers.
Changing resource record sets
To ensure that you get an accurate listing of the resource record sets for a hosted zone at a point in time, do not submit a ChangeResourceRecordSets request while you're paging through the results of a ListResourceRecordSets request. If you do, some pages may display results without the latest changes while other pages display results with the latest changes.
Displaying the next page of results
If a ListResourceRecordSets command returns more than one page of results, the value of IsTruncated is true . To display the next page of results, get the values of NextRecordName , NextRecordType , and NextRecordIdentifier (if any) from the response. Then submit another ListResourceRecordSets request, and specify those values for StartRecordName , StartRecordType , and StartRecordIdentifier .
See also: AWS API Documentation
Request Syntax
response = client.list_resource_record_sets(
HostedZoneId='string',
StartRecordName='string',
StartRecordType='SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
StartRecordIdentifier='string',
MaxItems='string'
)
[REQUIRED]
The ID of the hosted zone that contains the resource record sets that you want to list.
name .The type of resource record set to begin the record listing from.
Valid values for basic resource record sets: A | AAAA | CAA | CNAME | MX | NAPTR | NS | PTR | SOA | SPF | SRV | TXT
Values for weighted, latency, geolocation, and failover resource record sets: A | AAAA | CAA | CNAME | MX | NAPTR | PTR | SPF | SRV | TXT
Values for alias resource record sets:
Constraint: Specifying type without specifying name returns an InvalidInput error.
NextRecordIdentifier from the previous response to get the next resource record set that has the current DNS name and type.maxitems resource record sets, the value of the IsTruncated element in the response is true , and the values of the NextRecordName and NextRecordType elements in the response identify the first resource record set in the next group of maxitems resource record sets.dict
Response Syntax
{
'ResourceRecordSets': [
{
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'SetIdentifier': 'string',
'Weight': 123,
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-north-1'|'cn-northwest-1'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'af-south-1'|'eu-south-1'|'eu-south-2',
'GeoLocation': {
'ContinentCode': 'string',
'CountryCode': 'string',
'SubdivisionCode': 'string'
},
'Failover': 'PRIMARY'|'SECONDARY',
'MultiValueAnswer': True|False,
'TTL': 123,
'ResourceRecords': [
{
'Value': 'string'
},
],
'AliasTarget': {
'HostedZoneId': 'string',
'DNSName': 'string',
'EvaluateTargetHealth': True|False
},
'HealthCheckId': 'string',
'TrafficPolicyInstanceId': 'string',
'CidrRoutingConfig': {
'CollectionId': 'string',
'LocationName': 'string'
}
},
],
'IsTruncated': True|False,
'NextRecordName': 'string',
'NextRecordType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'NextRecordIdentifier': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains list information for the resource record set.
ResourceRecordSets (list) --
Information about multiple resource record sets.
(dict) --
Information about the resource record set to create or delete.
Name (string) --
For ChangeResourceRecordSets requests, the name of the record that you want to create, update, or delete. For ListResourceRecordSets responses, the name of a record in the specified hosted zone.
ChangeResourceRecordSets Only
Enter a fully qualified domain name, for example, www.example.com . You can optionally include a trailing dot. If you omit the trailing dot, Amazon Route 53 assumes that the domain name that you specify is fully qualified. This means that Route 53 treats www.example.com (without a trailing dot) and www.example.com. (with a trailing dot) as identical.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see DNS Domain Name Format in the Amazon Route 53 Developer Guide .
You can use the asterisk (*) wildcard to replace the leftmost label in a domain name, for example, *.example.com . Note the following:
*prod.example.com or prod*.example.com .Warning
You can't use the * wildcard for resource records sets that have a type of NS.
You can use the * wildcard as the leftmost label in a domain name, for example, *.example.com . You can't use an * for one of the middle labels, for example, marketing.*.example.com . In addition, the * must replace the entire label; for example, you can't specify prod*.example.com .
Type (string) --
The DNS record type. For information about different record types and how data is encoded for them, see Supported DNS Resource Record Types in the Amazon Route 53 Developer Guide .
Valid values for basic resource record sets: A | AAAA | CAA | CNAME | DS | MX | NAPTR | NS | PTR | SOA | SPF | SRV | TXT
Values for weighted, latency, geolocation, and failover resource record sets: A | AAAA | CAA | CNAME | MX | NAPTR | PTR | SPF | SRV | TXT . When creating a group of weighted, latency, geolocation, or failover resource record sets, specify the same value for all of the resource record sets in the group.
Valid values for multivalue answer resource record sets: A | AAAA | MX | NAPTR | PTR | SPF | SRV | TXT
Note
SPF records were formerly used to verify the identity of the sender of email messages. However, we no longer recommend that you create resource record sets for which the value of Type is SPF . RFC 7208, Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1 , has been updated to say, "...[I]ts existence and mechanism defined in [RFC4408] have led to some interoperability issues. Accordingly, its use is no longer appropriate for SPF version 1; implementations are not to use it." In RFC 7208, see section 14.1, The SPF DNS Record Type.
Values for alias resource record sets:
AA If IPv6 is enabled for the distribution, create two resource record sets to route traffic to your distribution, one with a value of A and one with a value of AAAA .AA | AAAAAANS and SOA .Note
If you're creating an alias record that has the same name as the hosted zone (known as the zone apex), you can't route traffic to a record for which the value of Type is CNAME . This is because the alias record must have the same type as the record you're routing traffic to, and creating a CNAME record for the zone apex isn't supported even for an alias record.
SetIdentifier (string) --
Resource record sets that have a routing policy other than simple: An identifier that differentiates among multiple resource record sets that have the same combination of name and type, such as multiple weighted resource record sets named acme.example.com that have a type of A. In a group of resource record sets that have the same name and type, the value of
SetIdentifiermust be unique for each resource record set.
For information about routing policies, see Choosing a Routing Policy in the Amazon Route 53 Developer Guide .
Weight (integer) --
Weighted resource record sets only: Among resource record sets that have the same combination of DNS name and type, a value that determines the proportion of DNS queries that Amazon Route 53 responds to using the current resource record set. Route 53 calculates the sum of the weights for the resource record sets that have the same combination of DNS name and type. Route 53 then responds to queries based on the ratio of a resource's weight to the total. Note the following:
Weight element for every weighted resource record set.ResourceRecord per weighted resource record set.Name and Type elements as weighted resource record sets.Name and Type elements.Weight to 0 for a resource record set, Route 53 never responds to queries with the applicable value for that resource record set. However, if you set Weight to 0 for all resource record sets that have the same combination of DNS name and type, traffic is routed to all resources with equal probability. The effect of setting Weight to 0 is different when you associate health checks with weighted resource record sets. For more information, see Options for Configuring Route 53 Active-Active and Active-Passive Failover in the Amazon Route 53 Developer Guide .Region (string) --
Latency-based resource record sets only: The Amazon EC2 Region where you created the resource that this resource record set refers to. The resource typically is an Amazon Web Services resource, such as an EC2 instance or an ELB load balancer, and is referred to by an IP address or a DNS domain name, depending on the record type.
When Amazon Route 53 receives a DNS query for a domain name and type for which you have created latency resource record sets, Route 53 selects the latency resource record set that has the lowest latency between the end user and the associated Amazon EC2 Region. Route 53 then returns the value that is associated with the selected resource record set.
Note the following:
ResourceRecord per latency resource record set.Name and Type elements as latency resource record sets.GeoLocation (dict) --
Geolocation resource record sets only: A complex type that lets you control how Amazon Route 53 responds to DNS queries based on the geographic origin of the query. For example, if you want all queries from Africa to be routed to a web server with an IP address of
192.0.2.111, create a resource record set with aTypeofAand aContinentCodeofAF.
Note
Although creating geolocation and geolocation alias resource record sets in a private hosted zone is allowed, it's not supported.
If you create separate resource record sets for overlapping geographic regions (for example, one resource record set for a continent and one for a country on the same continent), priority goes to the smallest geographic region. This allows you to route most queries for a continent to one resource and to route queries for a country on that continent to a different resource.
You can't create two geolocation resource record sets that specify the same geographic location.
The value * in the CountryCode element matches all geographic locations that aren't specified in other geolocation resource record sets that have the same values for the Name and Type elements.
Warning
Geolocation works by mapping IP addresses to locations. However, some IP addresses aren't mapped to geographic locations, so even if you create geolocation resource record sets that cover all seven continents, Route 53 will receive some DNS queries from locations that it can't identify. We recommend that you create a resource record set for which the value of CountryCode is * . Two groups of queries are routed to the resource that you specify in this record: queries that come from locations for which you haven't created geolocation resource record sets and queries from IP addresses that aren't mapped to a location. If you don't create a * resource record set, Route 53 returns a "no answer" response for queries from those locations.
You can't create non-geolocation resource record sets that have the same values for the Name and Type elements as geolocation resource record sets.
ContinentCode (string) --
The two-letter code for the continent.
Amazon Route 53 supports the following continent codes:
Constraint: Specifying ContinentCode with either CountryCode or SubdivisionCode returns an InvalidInput error.
CountryCode (string) --
For geolocation resource record sets, the two-letter code for a country.
Amazon Route 53 uses the two-letter country codes that are specified in ISO standard 3166-1 alpha-2.
SubdivisionCode (string) --
For geolocation resource record sets, the two-letter code for a state of the United States. Route 53 doesn't support any other values for SubdivisionCode . For a list of state abbreviations, see Appendix B: Two–Letter State and Possession Abbreviations on the United States Postal Service website.
If you specify subdivisioncode , you must also specify US for CountryCode .
Failover (string) --
Failover resource record sets only: To configure failover, you add the
Failoverelement to two resource record sets. For one resource record set, you specifyPRIMARYas the value forFailover; for the other resource record set, you specifySECONDARY. In addition, you include theHealthCheckIdelement and specify the health check that you want Amazon Route 53 to perform for each resource record set.
Except where noted, the following failover behaviors assume that you have included the HealthCheckId element in both resource record sets:
HealthCheckId element for the secondary resource record set, and if the primary resource record set is unhealthy, Route 53 always responds to DNS queries with the applicable value from the secondary resource record set. This is true regardless of the health of the associated endpoint.You can't create non-failover resource record sets that have the same values for the Name and Type elements as failover resource record sets.
For failover alias resource record sets, you must also include the EvaluateTargetHealth element and set the value to true.
For more information about configuring failover for Route 53, see the following topics in the Amazon Route 53 Developer Guide :
MultiValueAnswer (boolean) --
Multivalue answer resource record sets only : To route traffic approximately randomly to multiple resources, such as web servers, create one multivalue answer record for each resource and specify
trueforMultiValueAnswer. Note the following:
You can't create multivalue answer alias records.
TTL (integer) --
The resource record cache time to live (TTL), in seconds. Note the following:
TTL . Amazon Route 53 uses the value of TTL for the alias target.HealthCheckId element), we recommend that you specify a TTL of 60 seconds or less so clients respond quickly to changes in health status.TTL .TTL of 60 seconds for all of the non-alias weighted resource record sets that have the same name and type. Values other than 60 seconds (the TTL for load balancers) will change the effect of the values that you specify for Weight .ResourceRecords (list) --
Information about the resource records to act upon.
Note
If you're creating an alias resource record set, omit ResourceRecords .
(dict) --
Information specific to the resource record.
Note
If you're creating an alias resource record set, omit ResourceRecord .
Value (string) --
The current or new DNS record value, not to exceed 4,000 characters. In the case of a DELETE action, if the current value does not match the actual value, an error is returned. For descriptions about how to format Value for different record types, see Supported DNS Resource Record Types in the Amazon Route 53 Developer Guide .
You can specify more than one value for all record types except CNAME and SOA .
Note
If you're creating an alias resource record set, omit Value .
AliasTarget (dict) --
Alias resource record sets only: Information about the Amazon Web Services resource, such as a CloudFront distribution or an Amazon S3 bucket, that you want to route traffic to.
If you're creating resource records sets for a private hosted zone, note the following:
HostedZoneId (string) --
Alias resource records sets only : The value used depends on where you want to route traffic:
Amazon API Gateway custom regional APIs and edge-optimized APIs
Specify the hosted zone ID for your API. You can get the applicable value using the CLI command get-domain-names:
For regional APIs, specify the value of regionalHostedZoneId .
For edge-optimized APIs, specify the value of distributionHostedZoneId .
Amazon Virtual Private Cloud interface VPC endpoint
Specify the hosted zone ID for your interface endpoint. You can get the value of HostedZoneId using the CLI command describe-vpc-endpoints.
CloudFront distribution
Specify Z2FDTNDATAQYW2 .
Note
Alias resource record sets for CloudFront can't be created in a private zone.
Elastic Beanstalk environment
Specify the hosted zone ID for the region that you created the environment in. The environment must have a regionalized subdomain. For a list of regions and the corresponding hosted zone IDs, see Elastic Beanstalk endpoints and quotas in the the Amazon Web Services General Reference .
ELB load balancer
Specify the value of the hosted zone ID for the load balancer. Use the following methods to get the hosted zone ID:
Elastic Load Balancing endpoints and quotas topic in the Amazon Web Services General Reference : Use the value that corresponds with the region that you created your load balancer in. Note that there are separate columns for Application and Classic Load Balancers and for Network Load Balancers.
Amazon Web Services Management Console : Go to the Amazon EC2 page, choose Load Balancers in the navigation pane, select the load balancer, and get the value of the Hosted zone field on the Description tab.
Elastic Load Balancing API : Use DescribeLoadBalancers to get the applicable value. For more information, see the applicable guide:
CanonicalHostedZoneNameId .CanonicalHostedZoneId .CLI : Use describe-load-balancers to get the applicable value. For more information, see the applicable guide:
CanonicalHostedZoneNameId .CanonicalHostedZoneId .Global Accelerator accelerator
Specify Z2BJ6XQ5FK7U4H .
An Amazon S3 bucket configured as a static website
Specify the hosted zone ID for the region that you created the bucket in. For more information about valid values, see the table Amazon S3 Website Endpoints in the Amazon Web Services General Reference .
Another Route 53 resource record set in your hosted zone
Specify the hosted zone ID of your hosted zone. (An alias resource record set can't reference a resource record set in a different hosted zone.)
DNSName (string) --
Alias resource record sets only: The value that you specify depends on where you want to route queries:
Amazon API Gateway custom regional APIs and edge-optimized APIs
Specify the applicable domain name for your API. You can get the applicable value using the CLI command get-domain-names:
regionalDomainName .distributionDomainName . This is the name of the associated CloudFront distribution, such as da1b2c3d4e5.cloudfront.net .Note
The name of the record that you're creating must match a custom domain name for your API, such as api.example.com .
Amazon Virtual Private Cloud interface VPC endpoint
Enter the API endpoint for the interface endpoint, such as vpce-123456789abcdef01-example-us-east-1a.elasticloadbalancing.us-east-1.vpce.amazonaws.com . For edge-optimized APIs, this is the domain name for the corresponding CloudFront distribution. You can get the value of DnsName using the CLI command describe-vpc-endpoints.
CloudFront distribution
Specify the domain name that CloudFront assigned when you created your distribution.
Your CloudFront distribution must include an alternate domain name that matches the name of the resource record set. For example, if the name of the resource record set is acme.example.com , your CloudFront distribution must include acme.example.com as one of the alternate domain names. For more information, see Using Alternate Domain Names (CNAMEs) in the Amazon CloudFront Developer Guide .
You can't create a resource record set in a private hosted zone to route traffic to a CloudFront distribution.
Note
For failover alias records, you can't specify a CloudFront distribution for both the primary and secondary records. A distribution must include an alternate domain name that matches the name of the record. However, the primary and secondary records have the same name, and you can't include the same alternate domain name in more than one distribution.
Elastic Beanstalk environment
If the domain name for your Elastic Beanstalk environment includes the region that you deployed the environment in, you can create an alias record that routes traffic to the environment. For example, the domain name my-environment.us-west-2.elasticbeanstalk.com is a regionalized domain name.
Warning
For environments that were created before early 2016, the domain name doesn't include the region. To route traffic to these environments, you must create a CNAME record instead of an alias record. Note that you can't create a CNAME record for the root domain name. For example, if your domain name is example.com, you can create a record that routes traffic for acme.example.com to your Elastic Beanstalk environment, but you can't create a record that routes traffic for example.com to your Elastic Beanstalk environment.
For Elastic Beanstalk environments that have regionalized subdomains, specify the CNAME attribute for the environment. You can use the following methods to get the value of the CNAME attribute:
Amazon Web Services Management Console : For information about how to get the value by using the console, see Using Custom Domains with Elastic Beanstalk in the Elastic Beanstalk Developer Guide .
Elastic Beanstalk API : Use the DescribeEnvironments action to get the value of the CNAME attribute. For more information, see DescribeEnvironments in the Elastic Beanstalk API Reference .
CLI : Use the describe-environments command to get the value of the CNAME attribute. For more information, see describe-environments in the CLI Command Reference .
ELB load balancer
Specify the DNS name that is associated with the load balancer. Get the DNS name by using the Amazon Web Services Management Console, the ELB API, or the CLI.
Amazon Web Services Management Console : Go to the EC2 page, choose Load Balancers in the navigation pane, choose the load balancer, choose the Description tab, and get the value of the DNS name field. If you're routing traffic to a Classic Load Balancer, get the value that begins with dualstack . If you're routing traffic to another type of load balancer, get the value that applies to the record type, A or AAAA.
Elastic Load Balancing API : Use DescribeLoadBalancers to get the value of DNSName . For more information, see the applicable guide:
CLI : Use describe-load-balancers to get the value of DNSName . For more information, see the applicable guide:
Global Accelerator accelerator
Specify the DNS name for your accelerator:
Global Accelerator API: To get the DNS name, use DescribeAccelerator.
CLI: To get the DNS name, use describe-accelerator.
Amazon S3 bucket that is configured as a static website
Specify the domain name of the Amazon S3 website endpoint that you created the bucket in, for example, s3-website.us-east-2.amazonaws.com . For more information about valid values, see the table Amazon S3 Website Endpoints in the Amazon Web Services General Reference . For more information about using S3 buckets for websites, see Getting Started with Amazon Route 53 in the Amazon Route 53 Developer Guide.
Another Route 53 resource record set
Specify the value of the Name element for a resource record set in the current hosted zone.
Note
If you're creating an alias record that has the same name as the hosted zone (known as the zone apex), you can't specify the domain name for a record for which the value of Type is CNAME . This is because the alias record must have the same type as the record that you're routing traffic to, and creating a CNAME record for the zone apex isn't supported even for an alias record.
EvaluateTargetHealth (boolean) --
Applies only to alias, failover alias, geolocation alias, latency alias, and weighted alias resource record sets: When
EvaluateTargetHealthistrue, an alias resource record set inherits the health of the referenced Amazon Web Services resource, such as an ELB load balancer or another resource record set in the hosted zone.
Note the following:
CloudFront distributions
You can't set EvaluateTargetHealth to true when the alias target is a CloudFront distribution.
Elastic Beanstalk environments that have regionalized subdomains
If you specify an Elastic Beanstalk environment in DNSName and the environment contains an ELB load balancer, Elastic Load Balancing routes queries only to the healthy Amazon EC2 instances that are registered with the load balancer. (An environment automatically contains an ELB load balancer if it includes more than one Amazon EC2 instance.) If you set EvaluateTargetHealth to true and either no Amazon EC2 instances are healthy or the load balancer itself is unhealthy, Route 53 routes queries to other available resources that are healthy, if any.
If the environment contains a single Amazon EC2 instance, there are no special requirements.
ELB load balancers
Health checking behavior depends on the type of load balancer:
DNSName , Elastic Load Balancing routes queries only to the healthy Amazon EC2 instances that are registered with the load balancer. If you set EvaluateTargetHealth to true and either no EC2 instances are healthy or the load balancer itself is unhealthy, Route 53 routes queries to other resources.EvaluateTargetHealth to true , Route 53 routes queries to the load balancer based on the health of the target groups that are associated with the load balancer:Note
When you create a load balancer, you configure settings for Elastic Load Balancing health checks; they're not Route 53 health checks, but they perform a similar function. Do not create Route 53 health checks for the EC2 instances that you register with an ELB load balancer.
S3 buckets
There are no special requirements for setting EvaluateTargetHealth to true when the alias target is an S3 bucket.
Other records in the same hosted zone
If the Amazon Web Services resource that you specify in DNSName is a record or a group of records (for example, a group of weighted records) but is not another alias record, we recommend that you associate a health check with all of the records in the alias target. For more information, see What Happens When You Omit Health Checks? in the Amazon Route 53 Developer Guide .
For more information and examples, see Amazon Route 53 Health Checks and DNS Failover in the Amazon Route 53 Developer Guide .
HealthCheckId (string) --
If you want Amazon Route 53 to return this resource record set in response to a DNS query only when the status of a health check is healthy, include the HealthCheckId element and specify the ID of the applicable health check.
Route 53 determines whether a resource record set is healthy based on one of the following:
Warning
Route 53 doesn't check the health of the endpoint that is specified in the resource record set, for example, the endpoint specified by the IP address in the Value element. When you add a HealthCheckId element to a resource record set, Route 53 checks the health of the endpoint that you specified in the health check.
For more information, see the following topics in the Amazon Route 53 Developer Guide :
When to Specify HealthCheckId
Specifying a value for HealthCheckId is useful only when Route 53 is choosing between two or more resource record sets to respond to a DNS query, and you want Route 53 to base the choice in part on the status of a health check. Configuring health checks makes sense only in the following configurations:
EvaluateTargetHealth to true for an alias resource record set in a group of resource record sets that have the same routing policy, name, and type (such as multiple weighted records named www.example.com with a type of A).If the health check status is healthy, Route 53 considers the alias resource record set to be healthy and includes the alias record among the records that it responds to DNS queries with.
If the health check status is unhealthy, Route 53 stops responding to DNS queries using the alias resource record set.
Note
The alias resource record set can also route traffic to a group of non-alias resource record sets that have the same routing policy, name, and type. In that configuration, associate health checks with all of the resource record sets in the group of non-alias resource record sets.
Geolocation Routing
For geolocation resource record sets, if an endpoint is unhealthy, Route 53 looks for a resource record set for the larger, associated geographic region. For example, suppose you have resource record sets for a state in the United States, for the entire United States, for North America, and a resource record set that has * for CountryCode is * , which applies to all locations. If the endpoint for the state resource record set is unhealthy, Route 53 checks for healthy resource record sets in the following order until it finds a resource record set for which the endpoint is healthy:
Specifying the Health Check Endpoint by Domain Name
If your health checks specify the endpoint only by domain name, we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com . For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com ), not the name of the resource record sets ( www.example.com ).
Warning
Health check results will be unpredictable if you do the following:
FullyQualifiedDomainName as the name of a resource record set.TrafficPolicyInstanceId (string) --
When you create a traffic policy instance, Amazon Route 53 automatically creates a resource record set. TrafficPolicyInstanceId is the ID of the traffic policy instance that Route 53 created this resource record set for.
Warning
To delete the resource record set that is associated with a traffic policy instance, use DeleteTrafficPolicyInstance . Route 53 will delete the resource record set automatically. If you delete the resource record set by using ChangeResourceRecordSets , Route 53 doesn't automatically delete the traffic policy instance, and you'll continue to be charged for it even though it's no longer in use.
CidrRoutingConfig (dict) --
The object that is specified in resource record set object when you are linking a resource record set to a CIDR location.
A LocationName with an asterisk “*” can be used to create a default CIDR record. CollectionId is still required for default record.
CollectionId (string) --
The CIDR collection ID.
LocationName (string) --
The CIDR collection location name.
IsTruncated (boolean) --
A flag that indicates whether more resource record sets remain to be listed. If your results were truncated, you can make a follow-up pagination request by using the NextRecordName element.
NextRecordName (string) --
If the results were truncated, the name of the next record in the list.
This element is present only if IsTruncated is true.
NextRecordType (string) --
If the results were truncated, the type of the next record in the list.
This element is present only if IsTruncated is true.
NextRecordIdentifier (string) --
Resource record sets that have a routing policy other than simple: If results were truncated for a given DNS name and type, the value of
SetIdentifierfor the next resource record set that has the current DNS name and type.
For information about routing policies, see Choosing a Routing Policy in the Amazon Route 53 Developer Guide .
MaxItems (string) --
The maximum number of records you requested.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidInputlist_reusable_delegation_sets(**kwargs)¶Retrieves a list of the reusable delegation sets that are associated with the current Amazon Web Services account.
See also: AWS API Documentation
Request Syntax
response = client.list_reusable_delegation_sets(
Marker='string',
MaxItems='string'
)
If the value of IsTruncated in the previous response was true , you have more reusable delegation sets. To get another group, submit another ListReusableDelegationSets request.
For the value of marker , specify the value of NextMarker from the previous response, which is the ID of the first reusable delegation set that Amazon Route 53 will return if you submit another request.
If the value of IsTruncated in the previous response was false , there are no more reusable delegation sets to get.
dict
Response Syntax
{
'DelegationSets': [
{
'Id': 'string',
'CallerReference': 'string',
'NameServers': [
'string',
]
},
],
'Marker': 'string',
'IsTruncated': True|False,
'NextMarker': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains information about the reusable delegation sets that are associated with the current Amazon Web Services account.
DelegationSets (list) --
A complex type that contains one DelegationSet element for each reusable delegation set that was created by the current Amazon Web Services account.
(dict) --
A complex type that lists the name servers in a delegation set, as well as the CallerReference and the ID for the delegation set.
Id (string) --
The ID that Amazon Route 53 assigns to a reusable delegation set.
CallerReference (string) --
The value that you specified for CallerReference when you created the reusable delegation set.
NameServers (list) --
A complex type that contains a list of the authoritative name servers for a hosted zone or for a reusable delegation set.
Marker (string) --
For the second and subsequent calls to ListReusableDelegationSets , Marker is the value that you specified for the marker parameter in the request that produced the current response.
IsTruncated (boolean) --
A flag that indicates whether there are more reusable delegation sets to be listed.
NextMarker (string) --
If IsTruncated is true , the value of NextMarker identifies the next reusable delegation set that Amazon Route 53 will return if you submit another ListReusableDelegationSets request and specify the value of NextMarker in the marker parameter.
MaxItems (string) --
The value that you specified for the maxitems parameter in the call to ListReusableDelegationSets that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputLists tags for one health check or hosted zone.
For information about using tags for cost allocation, see Using Cost Allocation Tags in the Billing and Cost Management User Guide .
See also: AWS API Documentation
Request Syntax
response = client.list_tags_for_resource(
ResourceType='healthcheck'|'hostedzone',
ResourceId='string'
)
[REQUIRED]
The type of the resource.
healthcheck .hostedzone .[REQUIRED]
The ID of the resource for which you want to retrieve tags.
dict
Response Syntax
{
'ResourceTagSet': {
'ResourceType': 'healthcheck'|'hostedzone',
'ResourceId': 'string',
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
]
}
}
Response Structure
(dict) --
A complex type that contains information about the health checks or hosted zones for which you want to list tags.
ResourceTagSet (dict) --
A ResourceTagSet containing tags associated with the specified resource.
ResourceType (string) --
The type of the resource.
healthcheck .hostedzone .ResourceId (string) --
The ID for the specified resource.
Tags (list) --
The tags associated with the specified resource.
(dict) --
A complex type that contains information about a tag that you want to add or edit for the specified health check or hosted zone.
Key (string) --
The value of Key depends on the operation that you want to perform:
Key is the name that you want to give the new tag.Key is the name of the tag that you want to change the Value for.Key is the name of the tag you want to remove.Name tag. In the Amazon Route 53 console, the list of your health checks includes a Name column that lets you see the name that you've given to each health check.Value (string) --
The value of Value depends on the operation that you want to perform:
Value is the value that you want to give the new tag.Value is the new value that you want to assign the tag.Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.PriorRequestNotCompleteRoute53.Client.exceptions.ThrottlingExceptionLists tags for up to 10 health checks or hosted zones.
For information about using tags for cost allocation, see Using Cost Allocation Tags in the Billing and Cost Management User Guide .
See also: AWS API Documentation
Request Syntax
response = client.list_tags_for_resources(
ResourceType='healthcheck'|'hostedzone',
ResourceIds=[
'string',
]
)
[REQUIRED]
The type of the resources.
healthcheck .hostedzone .[REQUIRED]
A complex type that contains the ResourceId element for each resource for which you want to get a list of tags.
dict
Response Syntax
{
'ResourceTagSets': [
{
'ResourceType': 'healthcheck'|'hostedzone',
'ResourceId': 'string',
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
]
},
]
}
Response Structure
(dict) --
A complex type containing tags for the specified resources.
ResourceTagSets (list) --
A list of ResourceTagSet s containing tags associated with the specified resources.
(dict) --
A complex type containing a resource and its associated tags.
ResourceType (string) --
The type of the resource.
healthcheck .hostedzone .ResourceId (string) --
The ID for the specified resource.
Tags (list) --
The tags associated with the specified resource.
(dict) --
A complex type that contains information about a tag that you want to add or edit for the specified health check or hosted zone.
Key (string) --
The value of Key depends on the operation that you want to perform:
Key is the name that you want to give the new tag.Key is the name of the tag that you want to change the Value for.Key is the name of the tag you want to remove.Name tag. In the Amazon Route 53 console, the list of your health checks includes a Name column that lets you see the name that you've given to each health check.Value (string) --
The value of Value depends on the operation that you want to perform:
Value is the value that you want to give the new tag.Value is the new value that you want to assign the tag.Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.PriorRequestNotCompleteRoute53.Client.exceptions.ThrottlingExceptionlist_traffic_policies(**kwargs)¶Gets information about the latest version for every traffic policy that is associated with the current Amazon Web Services account. Policies are listed in the order that they were created in.
For information about how of deleting a traffic policy affects the response from ListTrafficPolicies , see DeleteTrafficPolicy.
See also: AWS API Documentation
Request Syntax
response = client.list_traffic_policies(
TrafficPolicyIdMarker='string',
MaxItems='string'
)
(Conditional) For your first request to ListTrafficPolicies , don't include the TrafficPolicyIdMarker parameter.
If you have more traffic policies than the value of MaxItems , ListTrafficPolicies returns only the first MaxItems traffic policies. To get the next group of policies, submit another request to ListTrafficPolicies . For the value of TrafficPolicyIdMarker , specify the value of TrafficPolicyIdMarker that was returned in the previous response.
MaxItems traffic policies, the value of IsTruncated in the response is true , and the value of TrafficPolicyIdMarker is the ID of the first traffic policy that Route 53 will return if you submit another request.dict
Response Syntax
{
'TrafficPolicySummaries': [
{
'Id': 'string',
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'LatestVersion': 123,
'TrafficPolicyCount': 123
},
],
'IsTruncated': True|False,
'TrafficPolicyIdMarker': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
TrafficPolicySummaries (list) --
A list that contains one TrafficPolicySummary element for each traffic policy that was created by the current Amazon Web Services account.
(dict) --
A complex type that contains information about the latest version of one traffic policy that is associated with the current Amazon Web Services account.
Id (string) --
The ID that Amazon Route 53 assigned to the traffic policy when you created it.
Name (string) --
The name that you specified for the traffic policy when you created it.
Type (string) --
The DNS type of the resource record sets that Amazon Route 53 creates when you use a traffic policy to create a traffic policy instance.
LatestVersion (integer) --
The version number of the latest version of the traffic policy.
TrafficPolicyCount (integer) --
The number of traffic policies that are associated with the current Amazon Web Services account.
IsTruncated (boolean) --
A flag that indicates whether there are more traffic policies to be listed. If the response was truncated, you can get the next group of traffic policies by submitting another ListTrafficPolicies request and specifying the value of TrafficPolicyIdMarker in the TrafficPolicyIdMarker request parameter.
TrafficPolicyIdMarker (string) --
If the value of IsTruncated is true , TrafficPolicyIdMarker is the ID of the first traffic policy in the next group of MaxItems traffic policies.
MaxItems (string) --
The value that you specified for the MaxItems parameter in the ListTrafficPolicies request that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputlist_traffic_policy_instances(**kwargs)¶Gets information about the traffic policy instances that you created by using the current Amazon Web Services account.
Note
After you submit an UpdateTrafficPolicyInstance request, there's a brief delay while Amazon Route 53 creates the resource record sets that are specified in the traffic policy definition. For more information, see the State response element.
Route 53 returns a maximum of 100 items in each response. If you have a lot of traffic policy instances, you can use the MaxItems parameter to list them in groups of up to 100.
See also: AWS API Documentation
Request Syntax
response = client.list_traffic_policy_instances(
HostedZoneIdMarker='string',
TrafficPolicyInstanceNameMarker='string',
TrafficPolicyInstanceTypeMarker='SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
MaxItems='string'
)
If the value of IsTruncated in the previous response was true , you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstances request. For the value of HostedZoneId , specify the value of HostedZoneIdMarker from the previous response, which is the hosted zone ID of the first traffic policy instance in the next group of traffic policy instances.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
If the value of IsTruncated in the previous response was true , you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstances request. For the value of trafficpolicyinstancename , specify the value of TrafficPolicyInstanceNameMarker from the previous response, which is the name of the first traffic policy instance in the next group of traffic policy instances.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
If the value of IsTruncated in the previous response was true , you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstances request. For the value of trafficpolicyinstancetype , specify the value of TrafficPolicyInstanceTypeMarker from the previous response, which is the type of the first traffic policy instance in the next group of traffic policy instances.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
ListTrafficPolicyInstances request. If you have more than MaxItems traffic policy instances, the value of the IsTruncated element in the response is true , and the values of HostedZoneIdMarker , TrafficPolicyInstanceNameMarker , and TrafficPolicyInstanceTypeMarker represent the first traffic policy instance in the next group of MaxItems traffic policy instances.dict
Response Syntax
{
'TrafficPolicyInstances': [
{
'Id': 'string',
'HostedZoneId': 'string',
'Name': 'string',
'TTL': 123,
'State': 'string',
'Message': 'string',
'TrafficPolicyId': 'string',
'TrafficPolicyVersion': 123,
'TrafficPolicyType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS'
},
],
'HostedZoneIdMarker': 'string',
'TrafficPolicyInstanceNameMarker': 'string',
'TrafficPolicyInstanceTypeMarker': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'IsTruncated': True|False,
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
TrafficPolicyInstances (list) --
A list that contains one TrafficPolicyInstance element for each traffic policy instance that matches the elements in the request.
(dict) --
A complex type that contains settings for the new traffic policy instance.
Id (string) --
The ID that Amazon Route 53 assigned to the new traffic policy instance.
HostedZoneId (string) --
The ID of the hosted zone that Amazon Route 53 created resource record sets in.
Name (string) --
The DNS name, such as www.example.com, for which Amazon Route 53 responds to queries by using the resource record sets that are associated with this traffic policy instance.
TTL (integer) --
The TTL that Amazon Route 53 assigned to all of the resource record sets that it created in the specified hosted zone.
State (string) --
The value of State is one of the following values:
Applied
Amazon Route 53 has finished creating resource record sets, and changes have propagated to all Route 53 edge locations.
Creating
Route 53 is creating the resource record sets. Use GetTrafficPolicyInstance to confirm that the CreateTrafficPolicyInstance request completed successfully.
Failed
Route 53 wasn't able to create or update the resource record sets. When the value of State is Failed , see Message for an explanation of what caused the request to fail.
Message (string) --
If State is Failed , an explanation of the reason for the failure. If State is another value, Message is empty.
TrafficPolicyId (string) --
The ID of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyVersion (integer) --
The version of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyType (string) --
The DNS type that Amazon Route 53 assigned to all of the resource record sets that it created for this traffic policy instance.
HostedZoneIdMarker (string) --
If IsTruncated is true , HostedZoneIdMarker is the ID of the hosted zone of the first traffic policy instance that Route 53 will return if you submit another ListTrafficPolicyInstances request.
TrafficPolicyInstanceNameMarker (string) --
If IsTruncated is true , TrafficPolicyInstanceNameMarker is the name of the first traffic policy instance that Route 53 will return if you submit another ListTrafficPolicyInstances request.
TrafficPolicyInstanceTypeMarker (string) --
If IsTruncated is true , TrafficPolicyInstanceTypeMarker is the DNS type of the resource record sets that are associated with the first traffic policy instance that Amazon Route 53 will return if you submit another ListTrafficPolicyInstances request.
IsTruncated (boolean) --
A flag that indicates whether there are more traffic policy instances to be listed. If the response was truncated, you can get more traffic policy instances by calling ListTrafficPolicyInstances again and specifying the values of the HostedZoneIdMarker , TrafficPolicyInstanceNameMarker , and TrafficPolicyInstanceTypeMarker in the corresponding request parameters.
MaxItems (string) --
The value that you specified for the MaxItems parameter in the call to ListTrafficPolicyInstances that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchTrafficPolicyInstancelist_traffic_policy_instances_by_hosted_zone(**kwargs)¶Gets information about the traffic policy instances that you created in a specified hosted zone.
Note
After you submit a CreateTrafficPolicyInstance or an UpdateTrafficPolicyInstance request, there's a brief delay while Amazon Route 53 creates the resource record sets that are specified in the traffic policy definition. For more information, see the State response element.
Route 53 returns a maximum of 100 items in each response. If you have a lot of traffic policy instances, you can use the MaxItems parameter to list them in groups of up to 100.
See also: AWS API Documentation
Request Syntax
response = client.list_traffic_policy_instances_by_hosted_zone(
HostedZoneId='string',
TrafficPolicyInstanceNameMarker='string',
TrafficPolicyInstanceTypeMarker='SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
MaxItems='string'
)
[REQUIRED]
The ID of the hosted zone that you want to list traffic policy instances for.
If the value of IsTruncated in the previous response is true, you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstances request. For the value of trafficpolicyinstancename , specify the value of TrafficPolicyInstanceNameMarker from the previous response, which is the name of the first traffic policy instance in the next group of traffic policy instances.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
If the value of IsTruncated in the previous response is true, you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstances request. For the value of trafficpolicyinstancetype , specify the value of TrafficPolicyInstanceTypeMarker from the previous response, which is the type of the first traffic policy instance in the next group of traffic policy instances.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
MaxItems traffic policy instances, the value of the IsTruncated element in the response is true , and the values of HostedZoneIdMarker , TrafficPolicyInstanceNameMarker , and TrafficPolicyInstanceTypeMarker represent the first traffic policy instance that Amazon Route 53 will return if you submit another request.dict
Response Syntax
{
'TrafficPolicyInstances': [
{
'Id': 'string',
'HostedZoneId': 'string',
'Name': 'string',
'TTL': 123,
'State': 'string',
'Message': 'string',
'TrafficPolicyId': 'string',
'TrafficPolicyVersion': 123,
'TrafficPolicyType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS'
},
],
'TrafficPolicyInstanceNameMarker': 'string',
'TrafficPolicyInstanceTypeMarker': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'IsTruncated': True|False,
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
TrafficPolicyInstances (list) --
A list that contains one TrafficPolicyInstance element for each traffic policy instance that matches the elements in the request.
(dict) --
A complex type that contains settings for the new traffic policy instance.
Id (string) --
The ID that Amazon Route 53 assigned to the new traffic policy instance.
HostedZoneId (string) --
The ID of the hosted zone that Amazon Route 53 created resource record sets in.
Name (string) --
The DNS name, such as www.example.com, for which Amazon Route 53 responds to queries by using the resource record sets that are associated with this traffic policy instance.
TTL (integer) --
The TTL that Amazon Route 53 assigned to all of the resource record sets that it created in the specified hosted zone.
State (string) --
The value of State is one of the following values:
Applied
Amazon Route 53 has finished creating resource record sets, and changes have propagated to all Route 53 edge locations.
Creating
Route 53 is creating the resource record sets. Use GetTrafficPolicyInstance to confirm that the CreateTrafficPolicyInstance request completed successfully.
Failed
Route 53 wasn't able to create or update the resource record sets. When the value of State is Failed , see Message for an explanation of what caused the request to fail.
Message (string) --
If State is Failed , an explanation of the reason for the failure. If State is another value, Message is empty.
TrafficPolicyId (string) --
The ID of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyVersion (integer) --
The version of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyType (string) --
The DNS type that Amazon Route 53 assigned to all of the resource record sets that it created for this traffic policy instance.
TrafficPolicyInstanceNameMarker (string) --
If IsTruncated is true , TrafficPolicyInstanceNameMarker is the name of the first traffic policy instance in the next group of traffic policy instances.
TrafficPolicyInstanceTypeMarker (string) --
If IsTruncated is true, TrafficPolicyInstanceTypeMarker is the DNS type of the resource record sets that are associated with the first traffic policy instance in the next group of traffic policy instances.
IsTruncated (boolean) --
A flag that indicates whether there are more traffic policy instances to be listed. If the response was truncated, you can get the next group of traffic policy instances by submitting another ListTrafficPolicyInstancesByHostedZone request and specifying the values of HostedZoneIdMarker , TrafficPolicyInstanceNameMarker , and TrafficPolicyInstanceTypeMarker in the corresponding request parameters.
MaxItems (string) --
The value that you specified for the MaxItems parameter in the ListTrafficPolicyInstancesByHostedZone request that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchTrafficPolicyInstanceRoute53.Client.exceptions.NoSuchHostedZonelist_traffic_policy_instances_by_policy(**kwargs)¶Gets information about the traffic policy instances that you created by using a specify traffic policy version.
Note
After you submit a CreateTrafficPolicyInstance or an UpdateTrafficPolicyInstance request, there's a brief delay while Amazon Route 53 creates the resource record sets that are specified in the traffic policy definition. For more information, see the State response element.
Route 53 returns a maximum of 100 items in each response. If you have a lot of traffic policy instances, you can use the MaxItems parameter to list them in groups of up to 100.
See also: AWS API Documentation
Request Syntax
response = client.list_traffic_policy_instances_by_policy(
TrafficPolicyId='string',
TrafficPolicyVersion=123,
HostedZoneIdMarker='string',
TrafficPolicyInstanceNameMarker='string',
TrafficPolicyInstanceTypeMarker='SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
MaxItems='string'
)
[REQUIRED]
The ID of the traffic policy for which you want to list traffic policy instances.
[REQUIRED]
The version of the traffic policy for which you want to list traffic policy instances. The version must be associated with the traffic policy that is specified by TrafficPolicyId .
If the value of IsTruncated in the previous response was true , you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstancesByPolicy request.
For the value of hostedzoneid , specify the value of HostedZoneIdMarker from the previous response, which is the hosted zone ID of the first traffic policy instance that Amazon Route 53 will return if you submit another request.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
If the value of IsTruncated in the previous response was true , you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstancesByPolicy request.
For the value of trafficpolicyinstancename , specify the value of TrafficPolicyInstanceNameMarker from the previous response, which is the name of the first traffic policy instance that Amazon Route 53 will return if you submit another request.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
If the value of IsTruncated in the previous response was true , you have more traffic policy instances. To get more traffic policy instances, submit another ListTrafficPolicyInstancesByPolicy request.
For the value of trafficpolicyinstancetype , specify the value of TrafficPolicyInstanceTypeMarker from the previous response, which is the name of the first traffic policy instance that Amazon Route 53 will return if you submit another request.
If the value of IsTruncated in the previous response was false , there are no more traffic policy instances to get.
MaxItems traffic policy instances, the value of the IsTruncated element in the response is true , and the values of HostedZoneIdMarker , TrafficPolicyInstanceNameMarker , and TrafficPolicyInstanceTypeMarker represent the first traffic policy instance that Amazon Route 53 will return if you submit another request.dict
Response Syntax
{
'TrafficPolicyInstances': [
{
'Id': 'string',
'HostedZoneId': 'string',
'Name': 'string',
'TTL': 123,
'State': 'string',
'Message': 'string',
'TrafficPolicyId': 'string',
'TrafficPolicyVersion': 123,
'TrafficPolicyType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS'
},
],
'HostedZoneIdMarker': 'string',
'TrafficPolicyInstanceNameMarker': 'string',
'TrafficPolicyInstanceTypeMarker': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'IsTruncated': True|False,
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
TrafficPolicyInstances (list) --
A list that contains one TrafficPolicyInstance element for each traffic policy instance that matches the elements in the request.
(dict) --
A complex type that contains settings for the new traffic policy instance.
Id (string) --
The ID that Amazon Route 53 assigned to the new traffic policy instance.
HostedZoneId (string) --
The ID of the hosted zone that Amazon Route 53 created resource record sets in.
Name (string) --
The DNS name, such as www.example.com, for which Amazon Route 53 responds to queries by using the resource record sets that are associated with this traffic policy instance.
TTL (integer) --
The TTL that Amazon Route 53 assigned to all of the resource record sets that it created in the specified hosted zone.
State (string) --
The value of State is one of the following values:
Applied
Amazon Route 53 has finished creating resource record sets, and changes have propagated to all Route 53 edge locations.
Creating
Route 53 is creating the resource record sets. Use GetTrafficPolicyInstance to confirm that the CreateTrafficPolicyInstance request completed successfully.
Failed
Route 53 wasn't able to create or update the resource record sets. When the value of State is Failed , see Message for an explanation of what caused the request to fail.
Message (string) --
If State is Failed , an explanation of the reason for the failure. If State is another value, Message is empty.
TrafficPolicyId (string) --
The ID of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyVersion (integer) --
The version of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyType (string) --
The DNS type that Amazon Route 53 assigned to all of the resource record sets that it created for this traffic policy instance.
HostedZoneIdMarker (string) --
If IsTruncated is true , HostedZoneIdMarker is the ID of the hosted zone of the first traffic policy instance in the next group of traffic policy instances.
TrafficPolicyInstanceNameMarker (string) --
If IsTruncated is true , TrafficPolicyInstanceNameMarker is the name of the first traffic policy instance in the next group of MaxItems traffic policy instances.
TrafficPolicyInstanceTypeMarker (string) --
If IsTruncated is true , TrafficPolicyInstanceTypeMarker is the DNS type of the resource record sets that are associated with the first traffic policy instance in the next group of MaxItems traffic policy instances.
IsTruncated (boolean) --
A flag that indicates whether there are more traffic policy instances to be listed. If the response was truncated, you can get the next group of traffic policy instances by calling ListTrafficPolicyInstancesByPolicy again and specifying the values of the HostedZoneIdMarker , TrafficPolicyInstanceNameMarker , and TrafficPolicyInstanceTypeMarker elements in the corresponding request parameters.
MaxItems (string) --
The value that you specified for the MaxItems parameter in the call to ListTrafficPolicyInstancesByPolicy that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchTrafficPolicyInstanceRoute53.Client.exceptions.NoSuchTrafficPolicylist_traffic_policy_versions(**kwargs)¶Gets information about all of the versions for a specified traffic policy.
Traffic policy versions are listed in numerical order by VersionNumber .
See also: AWS API Documentation
Request Syntax
response = client.list_traffic_policy_versions(
Id='string',
TrafficPolicyVersionMarker='string',
MaxItems='string'
)
[REQUIRED]
Specify the value of Id of the traffic policy for which you want to list all versions.
For your first request to ListTrafficPolicyVersions , don't include the TrafficPolicyVersionMarker parameter.
If you have more traffic policy versions than the value of MaxItems , ListTrafficPolicyVersions returns only the first group of MaxItems versions. To get more traffic policy versions, submit another ListTrafficPolicyVersions request. For the value of TrafficPolicyVersionMarker , specify the value of TrafficPolicyVersionMarker in the previous response.
MaxItems versions, the value of IsTruncated in the response is true , and the value of the TrafficPolicyVersionMarker element is the ID of the first version that Route 53 will return if you submit another request.dict
Response Syntax
{
'TrafficPolicies': [
{
'Id': 'string',
'Version': 123,
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'Document': 'string',
'Comment': 'string'
},
],
'IsTruncated': True|False,
'TrafficPolicyVersionMarker': 'string',
'MaxItems': 'string'
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
TrafficPolicies (list) --
A list that contains one TrafficPolicy element for each traffic policy version that is associated with the specified traffic policy.
(dict) --
A complex type that contains settings for a traffic policy.
Id (string) --
The ID that Amazon Route 53 assigned to a traffic policy when you created it.
Version (integer) --
The version number that Amazon Route 53 assigns to a traffic policy. For a new traffic policy, the value of Version is always 1.
Name (string) --
The name that you specified when you created the traffic policy.
Type (string) --
The DNS type of the resource record sets that Amazon Route 53 creates when you use a traffic policy to create a traffic policy instance.
Document (string) --
The definition of a traffic policy in JSON format. You specify the JSON document to use for a new traffic policy in the CreateTrafficPolicy request. For more information about the JSON format, see Traffic Policy Document Format.
Comment (string) --
The comment that you specify in the CreateTrafficPolicy request, if any.
IsTruncated (boolean) --
A flag that indicates whether there are more traffic policies to be listed. If the response was truncated, you can get the next group of traffic policies by submitting another ListTrafficPolicyVersions request and specifying the value of NextMarker in the marker parameter.
TrafficPolicyVersionMarker (string) --
If IsTruncated is true , the value of TrafficPolicyVersionMarker identifies the first traffic policy that Amazon Route 53 will return if you submit another request. Call ListTrafficPolicyVersions again and specify the value of TrafficPolicyVersionMarker in the TrafficPolicyVersionMarker request parameter.
This element is present only if IsTruncated is true .
MaxItems (string) --
The value that you specified for the maxitems parameter in the ListTrafficPolicyVersions request that produced the current response.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchTrafficPolicyGets a list of the VPCs that were created by other accounts and that can be associated with a specified hosted zone because you've submitted one or more CreateVPCAssociationAuthorization requests.
The response includes a VPCs element with a VPC child element for each VPC that can be associated with the hosted zone.
See also: AWS API Documentation
Request Syntax
response = client.list_vpc_association_authorizations(
HostedZoneId='string',
NextToken='string',
MaxResults='string'
)
[REQUIRED]
The ID of the hosted zone for which you want a list of VPCs that can be associated with the hosted zone.
NextToken element, there are more VPCs that can be associated with the specified hosted zone. To get the next page of results, submit another request, and include the value of NextToken from the response in the nexttoken parameter in another ListVPCAssociationAuthorizations request.MaxResults , Route 53 returns up to 50 VPCs per page.dict
Response Syntax
{
'HostedZoneId': 'string',
'NextToken': 'string',
'VPCs': [
{
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
},
]
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
HostedZoneId (string) --
The ID of the hosted zone that you can associate the listed VPCs with.
NextToken (string) --
When the response includes a NextToken element, there are more VPCs that can be associated with the specified hosted zone. To get the next page of VPCs, submit another ListVPCAssociationAuthorizations request, and include the value of the NextToken element from the response in the nexttoken request parameter.
VPCs (list) --
The list of VPCs that are authorized to be associated with the specified hosted zone.
(dict) --
(Private hosted zones only) A complex type that contains information about an Amazon VPC.
If you associate a private hosted zone with an Amazon VPC when you make a CreateHostedZone request, the following parameters are also required.
VPCRegion (string) --
(Private hosted zones only) The region that an Amazon VPC was created in.
VPCId (string) --
(Private hosted zones only) The ID of an Amazon VPC.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.InvalidPaginationTokentest_dns_answer(**kwargs)¶Gets the value that Amazon Route 53 returns in response to a DNS request for a specified record name and type. You can optionally specify the IP address of a DNS resolver, an EDNS0 client subnet IP address, and a subnet mask.
This call only supports querying public hosted zones.
See also: AWS API Documentation
Request Syntax
response = client.test_dns_answer(
HostedZoneId='string',
RecordName='string',
RecordType='SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
ResolverIP='string',
EDNS0ClientSubnetIP='string',
EDNS0ClientSubnetMask='string'
)
[REQUIRED]
The ID of the hosted zone that you want Amazon Route 53 to simulate a query for.
[REQUIRED]
The name of the resource record set that you want Amazon Route 53 to simulate a query for.
[REQUIRED]
The type of the resource record set.
TestDnsAnswer uses the IP address of a DNS resolver in the Amazon Web Services US East (N. Virginia) Region ( us-east-1 ).192.0.2.44 or 2001:db8:85a3::8a2e:370:7334 .If you specify an IP address for edns0clientsubnetip , you can optionally specify the number of bits of the IP address that you want the checking tool to include in the DNS query. For example, if you specify 192.0.2.44 for edns0clientsubnetip and 24 for edns0clientsubnetmask , the checking tool will simulate a request from 192.0.2.0/24. The default value is 24 bits for IPv4 addresses and 64 bits for IPv6 addresses.
The range of valid values depends on whether edns0clientsubnetip is an IPv4 or an IPv6 address:
dict
Response Syntax
{
'Nameserver': 'string',
'RecordName': 'string',
'RecordType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'RecordData': [
'string',
],
'ResponseCode': 'string',
'Protocol': 'string'
}
Response Structure
(dict) --
A complex type that contains the response to a TestDNSAnswer request.
Nameserver (string) --
The Amazon Route 53 name server used to respond to the request.
RecordName (string) --
The name of the resource record set that you submitted a request for.
RecordType (string) --
The type of the resource record set that you submitted a request for.
RecordData (list) --
A list that contains values that Amazon Route 53 returned for this resource record set.
(string) --
A value that Amazon Route 53 returned for this resource record set. A RecordDataEntry element is one of the following:
RecordDataEntry element contains one value in the resource record set. If the resource record set contains multiple values, the response includes one RecordDataEntry element for each value.RecordDataEntry element contains the value from the appropriate resource record set based on the request.RecordDataEntry element contains an IP address or a domain name for the Amazon Web Services resource, depending on the type of resource.RecordDataEntry element contains one value from the referenced resource record set. If the referenced resource record set contains multiple values, the response includes one RecordDataEntry element for each value.ResponseCode (string) --
A code that indicates whether the request is valid or not. The most common response code is NOERROR , meaning that the request is valid. If the response is not valid, Amazon Route 53 returns a response code that describes the error. For a list of possible response codes, see DNS RCODES on the IANA website.
Protocol (string) --
The protocol that Amazon Route 53 used to respond to the request, either UDP or TCP .
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidInputupdate_health_check(**kwargs)¶Updates an existing health check. Note that some values can't be updated.
For more information about updating health checks, see Creating, Updating, and Deleting Health Checks in the Amazon Route 53 Developer Guide .
See also: AWS API Documentation
Request Syntax
response = client.update_health_check(
HealthCheckId='string',
HealthCheckVersion=123,
IPAddress='string',
Port=123,
ResourcePath='string',
FullyQualifiedDomainName='string',
SearchString='string',
FailureThreshold=123,
Inverted=True|False,
Disabled=True|False,
HealthThreshold=123,
ChildHealthChecks=[
'string',
],
EnableSNI=True|False,
Regions=[
'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
],
AlarmIdentifier={
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-central-1'|'eu-central-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-northwest-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1',
'Name': 'string'
},
InsufficientDataHealthStatus='Healthy'|'Unhealthy'|'LastKnownStatus',
ResetElements=[
'FullyQualifiedDomainName'|'Regions'|'ResourcePath'|'ChildHealthChecks',
]
)
[REQUIRED]
The ID for the health check for which you want detailed information. When you created the health check, CreateHealthCheck returned the ID in the response, in the HealthCheckId element.
A sequential counter that Amazon Route 53 sets to 1 when you create a health check and increments by 1 each time you update settings for the health check.
We recommend that you use GetHealthCheck or ListHealthChecks to get the current value of HealthCheckVersion for the health check that you want to update, and that you include that value in your UpdateHealthCheck request. This prevents Route 53 from overwriting an intervening update:
UpdateHealthCheck request matches the value of HealthCheckVersion in the health check, Route 53 updates the health check with the new settings.HealthCheckVersion in the health check is greater, the health check was changed after you got the version number. Route 53 does not update the health check, and it returns a HealthCheckVersionMismatch error.The IPv4 or IPv6 IP address for the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress , Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval . Using an IP address that is returned by DNS, Route 53 then checks the health of the endpoint.
Use one of the following formats for the value of IPAddress :
192.0.2.44 .2001:0db8:85a3:0000:0000:abcd:0001:2345 . You can also shorten IPv6 addresses as described in RFC 5952, for example, 2001:db8:85a3::abcd:1:2345 .If the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for IPAddress . This ensures that the IP address of your instance never changes. For more information, see the applicable documentation:
Note
If a health check already has a value for IPAddress , you can change the value. However, you can't update an existing health check to add or remove the value of IPAddress .
For more information, see FullyQualifiedDomainName.
Constraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:
The port on the endpoint that you want Amazon Route 53 to perform health checks on.
Note
Don't specify a value for Port when you specify a value for Type of CLOUDWATCH_METRIC or CALCULATED .
The path that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example the file /docs/route53-health-check.html. You can also include query string parameters, for example, /welcome.html?language=jp&login=y .
Specify this value only if you want to change it.
Amazon Route 53 behavior depends on whether you specify a value for IPAddress .
Note
If a health check already has a value forIPAddress, you can change the value. However, you can't update an existing health check to add or remove the value ofIPAddress.
If you specify a value for IPAddress :
Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
When Route 53 checks the health of an endpoint, here is how it constructs the Host header:
80 for Port and HTTP or HTTP_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.443 for Port and HTTPS or HTTPS_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.Port and any value except TCP for Type , Route 53 passes FullyQualifiedDomainName : Port to the endpoint in the Host header.If you don't specify a value for FullyQualifiedDomainName , Route 53 substitutes the value of IPAddress in the Host header in each of the above cases.
If you don't specify a value forIPAddress:
If you don't specify a value for IPAddress , Route 53 sends a DNS request to the domain that you specify in FullyQualifiedDomainName at the interval you specify in RequestInterval . Using an IPv4 address that is returned by DNS, Route 53 then checks the health of the endpoint.
Note
If you don't specify a value for IPAddress , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no resource record set with a type of A for the name that you specify for FullyQualifiedDomainName , the health check fails with a "DNS resolution failed" error.
If you want to check the health of weighted, latency, or failover resource record sets and you choose to specify the endpoint only by FullyQualifiedDomainName , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com ), not the name of the resource record sets (www.example.com).
Warning
In this configuration, if the value of FullyQualifiedDomainName matches the name of the resource record sets and you then associate the health check with those resource record sets, health check results will be unpredictable.
In addition, if the value of Type is HTTP , HTTPS , HTTP_STR_MATCH , or HTTPS_STR_MATCH , Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify a value for IPAddress . If the value of Type is TCP , Route 53 doesn't pass a Host header.
Type is HTTP_STR_MATCH or HTTPS_STR_MATCH , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy. (You can't change the value of Type when you update a health check.)The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see How Amazon Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
If you don't specify a value for FailureThreshold , the default value is three health checks.
Stops Route 53 from performing health checks. When you disable a health check, here's what happens:
After you disable a health check, Route 53 considers the status of the health check to always be healthy. If you configured DNS failover, Route 53 continues to route traffic to the corresponding resources. If you want to stop routing traffic to a resource, change the value of Inverted.
Charges for a health check still apply when the health check is disabled. For more information, see Amazon Route 53 Pricing.
The number of child health checks that are associated with a CALCULATED health that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy. To specify the child health checks that you want to associate with a CALCULATED health check, use the ChildHealthChecks and ChildHealthCheck elements.
Note the following:
0 , Route 53 always considers this health check to be healthy.A complex type that contains one ChildHealthCheck element for each health check that you want to associate with a CALCULATED health check.
Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
Some endpoints require that HTTPS requests include the host name in the client_hello message. If you don't enable SNI, the status of the health check will be SSL alert handshake_failure . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.
The SSL/TLS certificate on your endpoint includes a domain name in the Common Name field and possibly several more in the Subject Alternative Names field. One of the domain names in the certificate should match the value that you specify for FullyQualifiedDomainName . If the endpoint responds to the client_hello message with a certificate that does not include the domain name that you specified in FullyQualifiedDomainName , a health checker will retry the handshake. In the second attempt, the health checker will omit FullyQualifiedDomainName from the client_hello message.
A complex type that contains one Region element for each region that you want Amazon Route 53 health checkers to check the specified endpoint from.
A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in.
For the current list of CloudWatch regions, see Amazon CloudWatch endpoints and quotas in the Amazon Web Services General Reference .
The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
Note
Route 53 supports CloudWatch alarms with the following features:
When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:
Healthy : Route 53 considers the health check to be healthy.Unhealthy : Route 53 considers the health check to be unhealthy.LastKnownStatus : By default, Route 53 uses the status of the health check from the last time CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the status for the health check is healthy.A complex type that contains one ResettableElementName element for each element that you want to reset to the default value. Valid values for ResettableElementName include the following:
ChildHealthChecks : Amazon Route 53 resets ChildHealthChecks to null.FullyQualifiedDomainName : Route 53 resets FullyQualifiedDomainName. to null.Regions : Route 53 resets the Regions list to the default set of regions.ResourcePath : Route 53 resets ResourcePath to null.dict
Response Syntax
{
'HealthCheck': {
'Id': 'string',
'CallerReference': 'string',
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
},
'HealthCheckConfig': {
'IPAddress': 'string',
'Port': 123,
'Type': 'HTTP'|'HTTPS'|'HTTP_STR_MATCH'|'HTTPS_STR_MATCH'|'TCP'|'CALCULATED'|'CLOUDWATCH_METRIC'|'RECOVERY_CONTROL',
'ResourcePath': 'string',
'FullyQualifiedDomainName': 'string',
'SearchString': 'string',
'RequestInterval': 123,
'FailureThreshold': 123,
'MeasureLatency': True|False,
'Inverted': True|False,
'Disabled': True|False,
'HealthThreshold': 123,
'ChildHealthChecks': [
'string',
],
'EnableSNI': True|False,
'Regions': [
'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
],
'AlarmIdentifier': {
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-central-1'|'eu-central-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-northwest-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1',
'Name': 'string'
},
'InsufficientDataHealthStatus': 'Healthy'|'Unhealthy'|'LastKnownStatus',
'RoutingControlArn': 'string'
},
'HealthCheckVersion': 123,
'CloudWatchAlarmConfiguration': {
'EvaluationPeriods': 123,
'Threshold': 123.0,
'ComparisonOperator': 'GreaterThanOrEqualToThreshold'|'GreaterThanThreshold'|'LessThanThreshold'|'LessThanOrEqualToThreshold',
'Period': 123,
'MetricName': 'string',
'Namespace': 'string',
'Statistic': 'Average'|'Sum'|'SampleCount'|'Maximum'|'Minimum',
'Dimensions': [
{
'Name': 'string',
'Value': 'string'
},
]
}
}
}
Response Structure
(dict) --
A complex type that contains the response to the UpdateHealthCheck request.
HealthCheck (dict) --
A complex type that contains the response to an UpdateHealthCheck request.
Id (string) --
The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long.
CallerReference (string) --
A unique string that you specified when you created the health check.
LinkedService (dict) --
If the health check was created by another service, the service that created the health check. When a health check is created by another service, you can't edit or delete it using Amazon Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
HealthCheckConfig (dict) --
A complex type that contains detailed information about one health check.
IPAddress (string) --
The IPv4 or IPv6 IP address of the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress , Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval . Using an IP address returned by DNS, Route 53 then checks the health of the endpoint.
Use one of the following formats for the value of IPAddress :
192.0.2.44 .2001:0db8:85a3:0000:0000:abcd:0001:2345 . You can also shorten IPv6 addresses as described in RFC 5952, for example, 2001:db8:85a3::abcd:1:2345 .If the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for IPAddress . This ensures that the IP address of your instance will never change.
For more information, see FullyQualifiedDomainName.
Constraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:
When the value of Type is CALCULATED or CLOUDWATCH_METRIC , omit IPAddress .
Port (integer) --
The port on the endpoint that you want Amazon Route 53 to perform health checks on.
Note
Don't specify a value for Port when you specify a value for Type of CLOUDWATCH_METRIC or CALCULATED .
Type (string) --
The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.
Warning
You can't change the value of Type after you create a health check.
You can create the following types of health checks:
Warning
If you specify HTTPS for the value of Type , the endpoint must support TLS v1.0 or later.
SearchString .HTTPS request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString .OK , the health check is considered healthy. If the state is ALARM , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is OK or ALARM , the health check status depends on the setting for InsufficientDataHealthStatus : Healthy , Unhealthy , or LastKnownStatus .HealthThreshold .ON , the health check is considered healthy. If the state is OFF , the health check is considered unhealthy.For more information, see How Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
ResourcePath (string) --
The path, if any, that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example, the file /docs/route53-health-check.html. You can also include query string parameters, for example, /welcome.html?language=jp&login=y .
FullyQualifiedDomainName (string) --
Amazon Route 53 behavior depends on whether you specify a value for IPAddress .
If you specify a value for
IPAddress:
Amazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
When Route 53 checks the health of an endpoint, here is how it constructs the Host header:
80 for Port and HTTP or HTTP_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.443 for Port and HTTPS or HTTPS_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.Port and any value except TCP for Type , Route 53 passes FullyQualifiedDomainName:Port to the endpoint in the Host header.If you don't specify a value for FullyQualifiedDomainName , Route 53 substitutes the value of IPAddress in the Host header in each of the preceding cases.
If you don't specify a value for
IPAddress:
Route 53 sends a DNS request to the domain that you specify for FullyQualifiedDomainName at the interval that you specify for RequestInterval . Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
Note
If you don't specify a value for IPAddress , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no resource record set with a type of A for the name that you specify for FullyQualifiedDomainName , the health check fails with a "DNS resolution failed" error.
If you want to check the health of weighted, latency, or failover resource record sets and you choose to specify the endpoint only by FullyQualifiedDomainName , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com), not the name of the resource record sets (www.example.com).
Warning
In this configuration, if you create a health check for which the value of FullyQualifiedDomainName matches the name of the resource record sets and you then associate the health check with those resource record sets, health check results will be unpredictable.
In addition, if the value that you specify for Type is HTTP , HTTPS , HTTP_STR_MATCH , or HTTPS_STR_MATCH , Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify a value for IPAddress . If the value of Type is TCP , Route 53 doesn't pass a Host header.
SearchString (string) --
If the value of Type is HTTP_STR_MATCH or HTTPS_STR_MATCH , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.
Route 53 considers case when searching for SearchString in the response body.
RequestInterval (integer) --
The number of seconds between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.
Warning
You can't change the value of RequestInterval after you create a health check.
If you don't specify a value for RequestInterval , the default value is 30 seconds.
FailureThreshold (integer) --
The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see How Amazon Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
If you don't specify a value for FailureThreshold , the default value is three health checks.
MeasureLatency (boolean) --
Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple Amazon Web Services regions and your endpoint, and to display CloudWatch latency graphs on the Health Checks page in the Route 53 console.
Warning
You can't change the value of MeasureLatency after you create a health check.
Inverted (boolean) --
Specify whether you want Amazon Route 53 to invert the status of a health check, for example, to consider a health check unhealthy when it otherwise would be considered healthy.
Disabled (boolean) --
Stops Route 53 from performing health checks. When you disable a health check, here's what happens:
After you disable a health check, Route 53 considers the status of the health check to always be healthy. If you configured DNS failover, Route 53 continues to route traffic to the corresponding resources. If you want to stop routing traffic to a resource, change the value of Inverted.
Charges for a health check still apply when the health check is disabled. For more information, see Amazon Route 53 Pricing.
HealthThreshold (integer) --
The number of child health checks that are associated with a CALCULATED health check that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy. To specify the child health checks that you want to associate with a CALCULATED health check, use the ChildHealthChecks element.
Note the following:
0 , Route 53 always considers this health check to be healthy.ChildHealthChecks (list) --
(CALCULATED Health Checks Only) A complex type that contains one ChildHealthCheck element for each health check that you want to associate with a CALCULATED health check.
EnableSNI (boolean) --
Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
Some endpoints require that HTTPS requests include the host name in the client_hello message. If you don't enable SNI, the status of the health check will be SSL alert handshake_failure . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.
The SSL/TLS certificate on your endpoint includes a domain name in the Common Name field and possibly several more in the Subject Alternative Names field. One of the domain names in the certificate should match the value that you specify for FullyQualifiedDomainName . If the endpoint responds to the client_hello message with a certificate that does not include the domain name that you specified in FullyQualifiedDomainName , a health checker will retry the handshake. In the second attempt, the health checker will omit FullyQualifiedDomainName from the client_hello message.
Regions (list) --
A complex type that contains one Region element for each region from which you want Amazon Route 53 health checkers to check the specified endpoint.
If you don't specify any regions, Route 53 health checkers automatically performs checks from all of the regions that are listed under Valid Values .
If you update a health check to remove a region that has been performing health checks, Route 53 will briefly continue to perform checks from that region to ensure that some health checkers are always checking the endpoint (for example, if you replace three regions with four different regions).
AlarmIdentifier (dict) --
A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
Region (string) --
For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in.
For the current list of CloudWatch regions, see Amazon CloudWatch endpoints and quotas in the Amazon Web Services General Reference .
Name (string) --
The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
Note
Route 53 supports CloudWatch alarms with the following features:
InsufficientDataHealthStatus (string) --
When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:
Healthy : Route 53 considers the health check to be healthy.Unhealthy : Route 53 considers the health check to be unhealthy.LastKnownStatus : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy.RoutingControlArn (string) --
The Amazon Resource Name (ARN) for the Route 53 Application Recovery Controller routing control.
For more information about Route 53 Application Recovery Controller, see Route 53 Application Recovery Controller Developer Guide..
HealthCheckVersion (integer) --
The version of the health check. You can optionally pass this value in a call to UpdateHealthCheck to prevent overwriting another change to the health check.
CloudWatchAlarmConfiguration (dict) --
A complex type that contains information about the CloudWatch alarm that Amazon Route 53 is monitoring for this health check.
EvaluationPeriods (integer) --
For the metric that the CloudWatch alarm is associated with, the number of periods that the metric is compared to the threshold.
Threshold (float) --
For the metric that the CloudWatch alarm is associated with, the value the metric is compared with.
ComparisonOperator (string) --
For the metric that the CloudWatch alarm is associated with, the arithmetic operation that is used for the comparison.
Period (integer) --
For the metric that the CloudWatch alarm is associated with, the duration of one evaluation period in seconds.
MetricName (string) --
The name of the CloudWatch metric that the alarm is associated with.
Namespace (string) --
The namespace of the metric that the alarm is associated with. For more information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
Statistic (string) --
For the metric that the CloudWatch alarm is associated with, the statistic that is applied to the metric.
Dimensions (list) --
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about the dimensions for the metric. For information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
(dict) --
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about one dimension.
Name (string) --
For the metric that the CloudWatch alarm is associated with, the name of one dimension.
Value (string) --
For the metric that the CloudWatch alarm is associated with, the value of one dimension.
Exceptions
Route53.Client.exceptions.NoSuchHealthCheckRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.HealthCheckVersionMismatchupdate_hosted_zone_comment(**kwargs)¶Updates the comment for a specified hosted zone.
See also: AWS API Documentation
Request Syntax
response = client.update_hosted_zone_comment(
Id='string',
Comment='string'
)
[REQUIRED]
The ID for the hosted zone that you want to update the comment for.
Comment , Amazon Route 53 deletes the existing value of the Comment element, if any.dict
Response Syntax
{
'HostedZone': {
'Id': 'string',
'Name': 'string',
'CallerReference': 'string',
'Config': {
'Comment': 'string',
'PrivateZone': True|False
},
'ResourceRecordSetCount': 123,
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
}
}
}
Response Structure
(dict) --
A complex type that contains the response to the UpdateHostedZoneComment request.
HostedZone (dict) --
A complex type that contains the response to the UpdateHostedZoneComment request.
Id (string) --
The ID that Amazon Route 53 assigned to the hosted zone when you created it.
Name (string) --
The name of the domain. For public hosted zones, this is the name that you have registered with your DNS registrar.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see CreateHostedZone.
CallerReference (string) --
The value that you specified for CallerReference when you created the hosted zone.
Config (dict) --
A complex type that includes the Comment and PrivateZone elements. If you omitted the HostedZoneConfig and Comment elements from the request, the Config and Comment elements don't appear in the response.
Comment (string) --
Any comments that you want to include about the hosted zone.
PrivateZone (boolean) --
A value that indicates whether this is a private hosted zone.
ResourceRecordSetCount (integer) --
The number of resource record sets in the hosted zone.
LinkedService (dict) --
If the hosted zone was created by another service, the service that created the hosted zone. When a hosted zone is created by another service, you can't edit or delete it using Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Exceptions
Route53.Client.exceptions.NoSuchHostedZoneRoute53.Client.exceptions.InvalidInputRoute53.Client.exceptions.PriorRequestNotCompleteupdate_traffic_policy_comment(**kwargs)¶Updates the comment for a specified traffic policy version.
See also: AWS API Documentation
Request Syntax
response = client.update_traffic_policy_comment(
Id='string',
Version=123,
Comment='string'
)
[REQUIRED]
The value of Id for the traffic policy that you want to update the comment for.
[REQUIRED]
The value of Version for the traffic policy that you want to update the comment for.
[REQUIRED]
The new comment for the specified traffic policy and version.
dict
Response Syntax
{
'TrafficPolicy': {
'Id': 'string',
'Version': 123,
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'Document': 'string',
'Comment': 'string'
}
}
Response Structure
(dict) --
A complex type that contains the response information for the traffic policy.
TrafficPolicy (dict) --
A complex type that contains settings for the specified traffic policy.
Id (string) --
The ID that Amazon Route 53 assigned to a traffic policy when you created it.
Version (integer) --
The version number that Amazon Route 53 assigns to a traffic policy. For a new traffic policy, the value of Version is always 1.
Name (string) --
The name that you specified when you created the traffic policy.
Type (string) --
The DNS type of the resource record sets that Amazon Route 53 creates when you use a traffic policy to create a traffic policy instance.
Document (string) --
The definition of a traffic policy in JSON format. You specify the JSON document to use for a new traffic policy in the CreateTrafficPolicy request. For more information about the JSON format, see Traffic Policy Document Format.
Comment (string) --
The comment that you specify in the CreateTrafficPolicy request, if any.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchTrafficPolicyRoute53.Client.exceptions.ConcurrentModificationupdate_traffic_policy_instance(**kwargs)¶Updates the resource record sets in a specified hosted zone that were created based on the settings in a specified traffic policy version.
When you update a traffic policy instance, Amazon Route 53 continues to respond to DNS queries for the root resource record set name (such as example.com) while it replaces one group of resource record sets with another. Route 53 performs the following operations:
See also: AWS API Documentation
Request Syntax
response = client.update_traffic_policy_instance(
Id='string',
TTL=123,
TrafficPolicyId='string',
TrafficPolicyVersion=123
)
[REQUIRED]
The ID of the traffic policy instance that you want to update.
[REQUIRED]
The TTL that you want Amazon Route 53 to assign to all of the updated resource record sets.
[REQUIRED]
The ID of the traffic policy that you want Amazon Route 53 to use to update resource record sets for the specified traffic policy instance.
[REQUIRED]
The version of the traffic policy that you want Amazon Route 53 to use to update resource record sets for the specified traffic policy instance.
dict
Response Syntax
{
'TrafficPolicyInstance': {
'Id': 'string',
'HostedZoneId': 'string',
'Name': 'string',
'TTL': 123,
'State': 'string',
'Message': 'string',
'TrafficPolicyId': 'string',
'TrafficPolicyVersion': 123,
'TrafficPolicyType': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS'
}
}
Response Structure
(dict) --
A complex type that contains information about the resource record sets that Amazon Route 53 created based on a specified traffic policy.
TrafficPolicyInstance (dict) --
A complex type that contains settings for the updated traffic policy instance.
Id (string) --
The ID that Amazon Route 53 assigned to the new traffic policy instance.
HostedZoneId (string) --
The ID of the hosted zone that Amazon Route 53 created resource record sets in.
Name (string) --
The DNS name, such as www.example.com, for which Amazon Route 53 responds to queries by using the resource record sets that are associated with this traffic policy instance.
TTL (integer) --
The TTL that Amazon Route 53 assigned to all of the resource record sets that it created in the specified hosted zone.
State (string) --
The value of State is one of the following values:
Applied
Amazon Route 53 has finished creating resource record sets, and changes have propagated to all Route 53 edge locations.
Creating
Route 53 is creating the resource record sets. Use GetTrafficPolicyInstance to confirm that the CreateTrafficPolicyInstance request completed successfully.
Failed
Route 53 wasn't able to create or update the resource record sets. When the value of State is Failed , see Message for an explanation of what caused the request to fail.
Message (string) --
If State is Failed , an explanation of the reason for the failure. If State is another value, Message is empty.
TrafficPolicyId (string) --
The ID of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyVersion (integer) --
The version of the traffic policy that Amazon Route 53 used to create resource record sets in the specified hosted zone.
TrafficPolicyType (string) --
The DNS type that Amazon Route 53 assigned to all of the resource record sets that it created for this traffic policy instance.
Exceptions
Route53.Client.exceptions.InvalidInputRoute53.Client.exceptions.NoSuchTrafficPolicyRoute53.Client.exceptions.NoSuchTrafficPolicyInstanceRoute53.Client.exceptions.PriorRequestNotCompleteRoute53.Client.exceptions.ConflictingTypesThe available paginators are:
Route53.Paginator.ListCidrBlocksRoute53.Paginator.ListCidrCollectionsRoute53.Paginator.ListCidrLocationsRoute53.Paginator.ListHealthChecksRoute53.Paginator.ListHostedZonesRoute53.Paginator.ListQueryLoggingConfigsRoute53.Paginator.ListResourceRecordSetsRoute53.Paginator.ListVPCAssociationAuthorizationsRoute53.Paginator.ListCidrBlocks¶paginator = client.get_paginator('list_cidr_blocks')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_cidr_blocks().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
CollectionId='string',
LocationName='string',
PaginationConfig={
'MaxItems': 123,
'PageSize': 123,
'StartingToken': 'string'
}
)
[REQUIRED]
The UUID of the CIDR collection.
A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
The size of each page.
A token to specify where to start paginating. This is the NextToken from a previous response.
dict
Response Syntax
{
'CidrBlocks': [
{
'CidrBlock': 'string',
'LocationName': 'string'
},
]
}
Response Structure
(dict) --
CidrBlocks (list) --
A complex type that contains information about the CIDR blocks.
(dict) --
A complex type that lists the CIDR blocks.
CidrBlock (string) --
Value for the CIDR block.
LocationName (string) --
The location name of the CIDR block.
Route53.Paginator.ListCidrCollections¶paginator = client.get_paginator('list_cidr_collections')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_cidr_collections().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
PaginationConfig={
'MaxItems': 123,
'PageSize': 123,
'StartingToken': 'string'
}
)
A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
The size of each page.
A token to specify where to start paginating. This is the NextToken from a previous response.
{
'CidrCollections': [
{
'Arn': 'string',
'Id': 'string',
'Name': 'string',
'Version': 123
},
]
}
Response Structure
A complex type with information about the CIDR collection.
A complex type that is an entry in an CidrCollection array.
The ARN of the collection summary. Can be used to reference the collection in IAM policy or cross-account.
Unique ID for the CIDR collection.
The name of a CIDR collection.
A sequential counter that Route 53 sets to 1 when you create a CIDR collection and increments by 1 each time you update settings for the CIDR collection.
Route53.Paginator.ListCidrLocations¶paginator = client.get_paginator('list_cidr_locations')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_cidr_locations().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
CollectionId='string',
PaginationConfig={
'MaxItems': 123,
'PageSize': 123,
'StartingToken': 'string'
}
)
[REQUIRED]
The CIDR collection ID.
A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
The size of each page.
A token to specify where to start paginating. This is the NextToken from a previous response.
dict
Response Syntax
{
'CidrLocations': [
{
'LocationName': 'string'
},
]
}
Response Structure
(dict) --
CidrLocations (list) --
A complex type that contains information about the list of CIDR locations.
(dict) --
A complex type that contains information about the CIDR location.
LocationName (string) --
A string that specifies a location name.
Route53.Paginator.ListHealthChecks¶paginator = client.get_paginator('list_health_checks')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_health_checks().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
PaginationConfig={
'MaxItems': 123,
'PageSize': 123,
'StartingToken': 'string'
}
)
A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
The size of each page.
A token to specify where to start paginating. This is the NextToken from a previous response.
{
'HealthChecks': [
{
'Id': 'string',
'CallerReference': 'string',
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
},
'HealthCheckConfig': {
'IPAddress': 'string',
'Port': 123,
'Type': 'HTTP'|'HTTPS'|'HTTP_STR_MATCH'|'HTTPS_STR_MATCH'|'TCP'|'CALCULATED'|'CLOUDWATCH_METRIC'|'RECOVERY_CONTROL',
'ResourcePath': 'string',
'FullyQualifiedDomainName': 'string',
'SearchString': 'string',
'RequestInterval': 123,
'FailureThreshold': 123,
'MeasureLatency': True|False,
'Inverted': True|False,
'Disabled': True|False,
'HealthThreshold': 123,
'ChildHealthChecks': [
'string',
],
'EnableSNI': True|False,
'Regions': [
'us-east-1'|'us-west-1'|'us-west-2'|'eu-west-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-northeast-1'|'sa-east-1',
],
'AlarmIdentifier': {
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-central-1'|'eu-central-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-northwest-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1',
'Name': 'string'
},
'InsufficientDataHealthStatus': 'Healthy'|'Unhealthy'|'LastKnownStatus',
'RoutingControlArn': 'string'
},
'HealthCheckVersion': 123,
'CloudWatchAlarmConfiguration': {
'EvaluationPeriods': 123,
'Threshold': 123.0,
'ComparisonOperator': 'GreaterThanOrEqualToThreshold'|'GreaterThanThreshold'|'LessThanThreshold'|'LessThanOrEqualToThreshold',
'Period': 123,
'MetricName': 'string',
'Namespace': 'string',
'Statistic': 'Average'|'Sum'|'SampleCount'|'Maximum'|'Minimum',
'Dimensions': [
{
'Name': 'string',
'Value': 'string'
},
]
}
},
],
'Marker': 'string',
'IsTruncated': True|False,
'MaxItems': 'string',
'NextToken': 'string'
}
Response Structure
A complex type that contains the response to a ListHealthChecks request.
A complex type that contains one HealthCheck element for each health check that is associated with the current Amazon Web Services account.
A complex type that contains information about one health check that is associated with the current Amazon Web Services account.
The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long.
A unique string that you specified when you created the health check.
If the health check was created by another service, the service that created the health check. When a health check is created by another service, you can't edit or delete it using Amazon Route 53.
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
A complex type that contains detailed information about one health check.
The IPv4 or IPv6 IP address of the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress , Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval . Using an IP address returned by DNS, Route 53 then checks the health of the endpoint.
Use one of the following formats for the value of IPAddress :
192.0.2.44 .2001:0db8:85a3:0000:0000:abcd:0001:2345 . You can also shorten IPv6 addresses as described in RFC 5952, for example, 2001:db8:85a3::abcd:1:2345 .If the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for IPAddress . This ensures that the IP address of your instance will never change.
For more information, see FullyQualifiedDomainName.
Constraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:
When the value of Type is CALCULATED or CLOUDWATCH_METRIC , omit IPAddress .
The port on the endpoint that you want Amazon Route 53 to perform health checks on.
Note
Don't specify a value for Port when you specify a value for Type of CLOUDWATCH_METRIC or CALCULATED .
The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.
Warning
You can't change the value of Type after you create a health check.
You can create the following types of health checks:
Warning
If you specify HTTPS for the value of Type , the endpoint must support TLS v1.0 or later.
SearchString .HTTPS request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString .OK , the health check is considered healthy. If the state is ALARM , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is OK or ALARM , the health check status depends on the setting for InsufficientDataHealthStatus : Healthy , Unhealthy , or LastKnownStatus .HealthThreshold .ON , the health check is considered healthy. If the state is OFF , the health check is considered unhealthy.For more information, see How Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
The path, if any, that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example, the file /docs/route53-health-check.html. You can also include query string parameters, for example, /welcome.html?language=jp&login=y .
Amazon Route 53 behavior depends on whether you specify a value for IPAddress .
If you specify a value forIPAddress:
Amazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
When Route 53 checks the health of an endpoint, here is how it constructs the Host header:
80 for Port and HTTP or HTTP_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.443 for Port and HTTPS or HTTPS_STR_MATCH for Type , Route 53 passes the value of FullyQualifiedDomainName to the endpoint in the Host header.Port and any value except TCP for Type , Route 53 passes FullyQualifiedDomainName:Port to the endpoint in the Host header.If you don't specify a value for FullyQualifiedDomainName , Route 53 substitutes the value of IPAddress in the Host header in each of the preceding cases.
If you don't specify a value forIPAddress:
Route 53 sends a DNS request to the domain that you specify for FullyQualifiedDomainName at the interval that you specify for RequestInterval . Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
Note
If you don't specify a value for IPAddress , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no resource record set with a type of A for the name that you specify for FullyQualifiedDomainName , the health check fails with a "DNS resolution failed" error.
If you want to check the health of weighted, latency, or failover resource record sets and you choose to specify the endpoint only by FullyQualifiedDomainName , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com), not the name of the resource record sets (www.example.com).
Warning
In this configuration, if you create a health check for which the value of FullyQualifiedDomainName matches the name of the resource record sets and you then associate the health check with those resource record sets, health check results will be unpredictable.
In addition, if the value that you specify for Type is HTTP , HTTPS , HTTP_STR_MATCH , or HTTPS_STR_MATCH , Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify a value for IPAddress . If the value of Type is TCP , Route 53 doesn't pass a Host header.
If the value of Type is HTTP_STR_MATCH or HTTPS_STR_MATCH , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.
Route 53 considers case when searching for SearchString in the response body.
The number of seconds between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.
Warning
You can't change the value of RequestInterval after you create a health check.
If you don't specify a value for RequestInterval , the default value is 30 seconds.
The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see How Amazon Route 53 Determines Whether an Endpoint Is Healthy in the Amazon Route 53 Developer Guide .
If you don't specify a value for FailureThreshold , the default value is three health checks.
Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple Amazon Web Services regions and your endpoint, and to display CloudWatch latency graphs on the Health Checks page in the Route 53 console.
Warning
You can't change the value of MeasureLatency after you create a health check.
Specify whether you want Amazon Route 53 to invert the status of a health check, for example, to consider a health check unhealthy when it otherwise would be considered healthy.
Stops Route 53 from performing health checks. When you disable a health check, here's what happens:
After you disable a health check, Route 53 considers the status of the health check to always be healthy. If you configured DNS failover, Route 53 continues to route traffic to the corresponding resources. If you want to stop routing traffic to a resource, change the value of Inverted.
Charges for a health check still apply when the health check is disabled. For more information, see Amazon Route 53 Pricing.
The number of child health checks that are associated with a CALCULATED health check that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy. To specify the child health checks that you want to associate with a CALCULATED health check, use the ChildHealthChecks element.
Note the following:
0 , Route 53 always considers this health check to be healthy.(CALCULATED Health Checks Only) A complex type that contains one ChildHealthCheck element for each health check that you want to associate with a CALCULATED health check.
Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
Some endpoints require that HTTPS requests include the host name in the client_hello message. If you don't enable SNI, the status of the health check will be SSL alert handshake_failure . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.
The SSL/TLS certificate on your endpoint includes a domain name in the Common Name field and possibly several more in the Subject Alternative Names field. One of the domain names in the certificate should match the value that you specify for FullyQualifiedDomainName . If the endpoint responds to the client_hello message with a certificate that does not include the domain name that you specified in FullyQualifiedDomainName , a health checker will retry the handshake. In the second attempt, the health checker will omit FullyQualifiedDomainName from the client_hello message.
A complex type that contains one Region element for each region from which you want Amazon Route 53 health checkers to check the specified endpoint.
If you don't specify any regions, Route 53 health checkers automatically performs checks from all of the regions that are listed under Valid Values .
If you update a health check to remove a region that has been performing health checks, Route 53 will briefly continue to perform checks from that region to ensure that some health checkers are always checking the endpoint (for example, if you replace three regions with four different regions).
A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in.
For the current list of CloudWatch regions, see Amazon CloudWatch endpoints and quotas in the Amazon Web Services General Reference .
The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
Note
Route 53 supports CloudWatch alarms with the following features:
When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:
Healthy : Route 53 considers the health check to be healthy.Unhealthy : Route 53 considers the health check to be unhealthy.LastKnownStatus : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy.The Amazon Resource Name (ARN) for the Route 53 Application Recovery Controller routing control.
For more information about Route 53 Application Recovery Controller, see Route 53 Application Recovery Controller Developer Guide..
The version of the health check. You can optionally pass this value in a call to UpdateHealthCheck to prevent overwriting another change to the health check.
A complex type that contains information about the CloudWatch alarm that Amazon Route 53 is monitoring for this health check.
For the metric that the CloudWatch alarm is associated with, the number of periods that the metric is compared to the threshold.
For the metric that the CloudWatch alarm is associated with, the value the metric is compared with.
For the metric that the CloudWatch alarm is associated with, the arithmetic operation that is used for the comparison.
For the metric that the CloudWatch alarm is associated with, the duration of one evaluation period in seconds.
The name of the CloudWatch metric that the alarm is associated with.
The namespace of the metric that the alarm is associated with. For more information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
For the metric that the CloudWatch alarm is associated with, the statistic that is applied to the metric.
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about the dimensions for the metric. For information, see Amazon CloudWatch Namespaces, Dimensions, and Metrics Reference in the Amazon CloudWatch User Guide .
For the metric that the CloudWatch alarm is associated with, a complex type that contains information about one dimension.
For the metric that the CloudWatch alarm is associated with, the name of one dimension.
For the metric that the CloudWatch alarm is associated with, the value of one dimension.
For the second and subsequent calls to ListHealthChecks , Marker is the value that you specified for the marker parameter in the previous request.
A flag that indicates whether there are more health checks to be listed. If the response was truncated, you can get the next group of health checks by submitting another ListHealthChecks request and specifying the value of NextMarker in the marker parameter.
The value that you specified for the maxitems parameter in the call to ListHealthChecks that produced the current response.
A token to resume pagination.
Route53.Paginator.ListHostedZones¶paginator = client.get_paginator('list_hosted_zones')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_hosted_zones().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
DelegationSetId='string',
PaginationConfig={
'MaxItems': 123,
'PageSize': 123,
'StartingToken': 'string'
}
)
A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
The size of each page.
A token to specify where to start paginating. This is the NextToken from a previous response.
dict
Response Syntax
{
'HostedZones': [
{
'Id': 'string',
'Name': 'string',
'CallerReference': 'string',
'Config': {
'Comment': 'string',
'PrivateZone': True|False
},
'ResourceRecordSetCount': 123,
'LinkedService': {
'ServicePrincipal': 'string',
'Description': 'string'
}
},
],
'Marker': 'string',
'IsTruncated': True|False,
'MaxItems': 'string',
'NextToken': 'string'
}
Response Structure
(dict) --
HostedZones (list) --
A complex type that contains general information about the hosted zone.
(dict) --
A complex type that contains general information about the hosted zone.
Id (string) --
The ID that Amazon Route 53 assigned to the hosted zone when you created it.
Name (string) --
The name of the domain. For public hosted zones, this is the name that you have registered with your DNS registrar.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see CreateHostedZone.
CallerReference (string) --
The value that you specified for CallerReference when you created the hosted zone.
Config (dict) --
A complex type that includes the Comment and PrivateZone elements. If you omitted the HostedZoneConfig and Comment elements from the request, the Config and Comment elements don't appear in the response.
Comment (string) --
Any comments that you want to include about the hosted zone.
PrivateZone (boolean) --
A value that indicates whether this is a private hosted zone.
ResourceRecordSetCount (integer) --
The number of resource record sets in the hosted zone.
LinkedService (dict) --
If the hosted zone was created by another service, the service that created the hosted zone. When a hosted zone is created by another service, you can't edit or delete it using Route 53.
ServicePrincipal (string) --
If the health check or hosted zone was created by another service, the service that created the resource. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Description (string) --
If the health check or hosted zone was created by another service, an optional description that can be provided by the other service. When a resource is created by another service, you can't edit or delete it using Amazon Route 53.
Marker (string) --
For the second and subsequent calls to ListHostedZones , Marker is the value that you specified for the marker parameter in the request that produced the current response.
IsTruncated (boolean) --
A flag indicating whether there are more hosted zones to be listed. If the response was truncated, you can get more hosted zones by submitting another ListHostedZones request and specifying the value of NextMarker in the marker parameter.
MaxItems (string) --
The value that you specified for the maxitems parameter in the call to ListHostedZones that produced the current response.
NextToken (string) --
A token to resume pagination.
Route53.Paginator.ListQueryLoggingConfigs¶paginator = client.get_paginator('list_query_logging_configs')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_query_logging_configs().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
HostedZoneId='string',
PaginationConfig={
'MaxItems': 123,
'PageSize': 123,
'StartingToken': 'string'
}
)
(Optional) If you want to list the query logging configuration that is associated with a hosted zone, specify the ID in HostedZoneId .
If you don't specify a hosted zone ID, ListQueryLoggingConfigs returns all of the configurations that are associated with the current Amazon Web Services account.
A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
The size of each page.
A token to specify where to start paginating. This is the NextToken from a previous response.
dict
Response Syntax
{
'QueryLoggingConfigs': [
{
'Id': 'string',
'HostedZoneId': 'string',
'CloudWatchLogsLogGroupArn': 'string'
},
],
}
Response Structure
(dict) --
QueryLoggingConfigs (list) --
An array that contains one QueryLoggingConfig element for each configuration for DNS query logging that is associated with the current Amazon Web Services account.
(dict) --
A complex type that contains information about a configuration for DNS query logging.
Id (string) --
The ID for a configuration for DNS query logging.
HostedZoneId (string) --
The ID of the hosted zone that CloudWatch Logs is logging queries for.
CloudWatchLogsLogGroupArn (string) --
The Amazon Resource Name (ARN) of the CloudWatch Logs log group that Amazon Route 53 is publishing logs to.
Route53.Paginator.ListResourceRecordSets¶paginator = client.get_paginator('list_resource_record_sets')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_resource_record_sets().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
HostedZoneId='string',
PaginationConfig={
'MaxItems': 123,
'PageSize': 123,
'StartingToken': 'string'
}
)
[REQUIRED]
The ID of the hosted zone that contains the resource record sets that you want to list.
A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
The size of each page.
A token to specify where to start paginating. This is the NextToken from a previous response.
dict
Response Syntax
{
'ResourceRecordSets': [
{
'Name': 'string',
'Type': 'SOA'|'A'|'TXT'|'NS'|'CNAME'|'MX'|'NAPTR'|'PTR'|'SRV'|'SPF'|'AAAA'|'CAA'|'DS',
'SetIdentifier': 'string',
'Weight': 123,
'Region': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'ca-central-1'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'cn-north-1'|'cn-northwest-1'|'ap-east-1'|'me-south-1'|'me-central-1'|'ap-south-1'|'ap-south-2'|'af-south-1'|'eu-south-1'|'eu-south-2',
'GeoLocation': {
'ContinentCode': 'string',
'CountryCode': 'string',
'SubdivisionCode': 'string'
},
'Failover': 'PRIMARY'|'SECONDARY',
'MultiValueAnswer': True|False,
'TTL': 123,
'ResourceRecords': [
{
'Value': 'string'
},
],
'AliasTarget': {
'HostedZoneId': 'string',
'DNSName': 'string',
'EvaluateTargetHealth': True|False
},
'HealthCheckId': 'string',
'TrafficPolicyInstanceId': 'string',
'CidrRoutingConfig': {
'CollectionId': 'string',
'LocationName': 'string'
}
},
],
'IsTruncated': True|False,
'MaxItems': 'string',
'NextToken': 'string'
}
Response Structure
(dict) --
A complex type that contains list information for the resource record set.
ResourceRecordSets (list) --
Information about multiple resource record sets.
(dict) --
Information about the resource record set to create or delete.
Name (string) --
For ChangeResourceRecordSets requests, the name of the record that you want to create, update, or delete. For ListResourceRecordSets responses, the name of a record in the specified hosted zone.
ChangeResourceRecordSets Only
Enter a fully qualified domain name, for example, www.example.com . You can optionally include a trailing dot. If you omit the trailing dot, Amazon Route 53 assumes that the domain name that you specify is fully qualified. This means that Route 53 treats www.example.com (without a trailing dot) and www.example.com. (with a trailing dot) as identical.
For information about how to specify characters other than a-z , 0-9 , and - (hyphen) and how to specify internationalized domain names, see DNS Domain Name Format in the Amazon Route 53 Developer Guide .
You can use the asterisk (*) wildcard to replace the leftmost label in a domain name, for example, *.example.com . Note the following:
*prod.example.com or prod*.example.com .Warning
You can't use the * wildcard for resource records sets that have a type of NS.
You can use the * wildcard as the leftmost label in a domain name, for example, *.example.com . You can't use an * for one of the middle labels, for example, marketing.*.example.com . In addition, the * must replace the entire label; for example, you can't specify prod*.example.com .
Type (string) --
The DNS record type. For information about different record types and how data is encoded for them, see Supported DNS Resource Record Types in the Amazon Route 53 Developer Guide .
Valid values for basic resource record sets: A | AAAA | CAA | CNAME | DS | MX | NAPTR | NS | PTR | SOA | SPF | SRV | TXT
Values for weighted, latency, geolocation, and failover resource record sets: A | AAAA | CAA | CNAME | MX | NAPTR | PTR | SPF | SRV | TXT . When creating a group of weighted, latency, geolocation, or failover resource record sets, specify the same value for all of the resource record sets in the group.
Valid values for multivalue answer resource record sets: A | AAAA | MX | NAPTR | PTR | SPF | SRV | TXT
Note
SPF records were formerly used to verify the identity of the sender of email messages. However, we no longer recommend that you create resource record sets for which the value of Type is SPF . RFC 7208, Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1 , has been updated to say, "...[I]ts existence and mechanism defined in [RFC4408] have led to some interoperability issues. Accordingly, its use is no longer appropriate for SPF version 1; implementations are not to use it." In RFC 7208, see section 14.1, The SPF DNS Record Type.
Values for alias resource record sets:
AA If IPv6 is enabled for the distribution, create two resource record sets to route traffic to your distribution, one with a value of A and one with a value of AAAA .AA | AAAAAANS and SOA .Note
If you're creating an alias record that has the same name as the hosted zone (known as the zone apex), you can't route traffic to a record for which the value of Type is CNAME . This is because the alias record must have the same type as the record you're routing traffic to, and creating a CNAME record for the zone apex isn't supported even for an alias record.
SetIdentifier (string) --
Resource record sets that have a routing policy other than simple: An identifier that differentiates among multiple resource record sets that have the same combination of name and type, such as multiple weighted resource record sets named acme.example.com that have a type of A. In a group of resource record sets that have the same name and type, the value of
SetIdentifiermust be unique for each resource record set.
For information about routing policies, see Choosing a Routing Policy in the Amazon Route 53 Developer Guide .
Weight (integer) --
Weighted resource record sets only: Among resource record sets that have the same combination of DNS name and type, a value that determines the proportion of DNS queries that Amazon Route 53 responds to using the current resource record set. Route 53 calculates the sum of the weights for the resource record sets that have the same combination of DNS name and type. Route 53 then responds to queries based on the ratio of a resource's weight to the total. Note the following:
Weight element for every weighted resource record set.ResourceRecord per weighted resource record set.Name and Type elements as weighted resource record sets.Name and Type elements.Weight to 0 for a resource record set, Route 53 never responds to queries with the applicable value for that resource record set. However, if you set Weight to 0 for all resource record sets that have the same combination of DNS name and type, traffic is routed to all resources with equal probability. The effect of setting Weight to 0 is different when you associate health checks with weighted resource record sets. For more information, see Options for Configuring Route 53 Active-Active and Active-Passive Failover in the Amazon Route 53 Developer Guide .Region (string) --
Latency-based resource record sets only: The Amazon EC2 Region where you created the resource that this resource record set refers to. The resource typically is an Amazon Web Services resource, such as an EC2 instance or an ELB load balancer, and is referred to by an IP address or a DNS domain name, depending on the record type.
When Amazon Route 53 receives a DNS query for a domain name and type for which you have created latency resource record sets, Route 53 selects the latency resource record set that has the lowest latency between the end user and the associated Amazon EC2 Region. Route 53 then returns the value that is associated with the selected resource record set.
Note the following:
ResourceRecord per latency resource record set.Name and Type elements as latency resource record sets.GeoLocation (dict) --
Geolocation resource record sets only: A complex type that lets you control how Amazon Route 53 responds to DNS queries based on the geographic origin of the query. For example, if you want all queries from Africa to be routed to a web server with an IP address of
192.0.2.111, create a resource record set with aTypeofAand aContinentCodeofAF.
Note
Although creating geolocation and geolocation alias resource record sets in a private hosted zone is allowed, it's not supported.
If you create separate resource record sets for overlapping geographic regions (for example, one resource record set for a continent and one for a country on the same continent), priority goes to the smallest geographic region. This allows you to route most queries for a continent to one resource and to route queries for a country on that continent to a different resource.
You can't create two geolocation resource record sets that specify the same geographic location.
The value * in the CountryCode element matches all geographic locations that aren't specified in other geolocation resource record sets that have the same values for the Name and Type elements.
Warning
Geolocation works by mapping IP addresses to locations. However, some IP addresses aren't mapped to geographic locations, so even if you create geolocation resource record sets that cover all seven continents, Route 53 will receive some DNS queries from locations that it can't identify. We recommend that you create a resource record set for which the value of CountryCode is * . Two groups of queries are routed to the resource that you specify in this record: queries that come from locations for which you haven't created geolocation resource record sets and queries from IP addresses that aren't mapped to a location. If you don't create a * resource record set, Route 53 returns a "no answer" response for queries from those locations.
You can't create non-geolocation resource record sets that have the same values for the Name and Type elements as geolocation resource record sets.
ContinentCode (string) --
The two-letter code for the continent.
Amazon Route 53 supports the following continent codes:
Constraint: Specifying ContinentCode with either CountryCode or SubdivisionCode returns an InvalidInput error.
CountryCode (string) --
For geolocation resource record sets, the two-letter code for a country.
Amazon Route 53 uses the two-letter country codes that are specified in ISO standard 3166-1 alpha-2.
SubdivisionCode (string) --
For geolocation resource record sets, the two-letter code for a state of the United States. Route 53 doesn't support any other values for SubdivisionCode . For a list of state abbreviations, see Appendix B: Two–Letter State and Possession Abbreviations on the United States Postal Service website.
If you specify subdivisioncode , you must also specify US for CountryCode .
Failover (string) --
Failover resource record sets only: To configure failover, you add the
Failoverelement to two resource record sets. For one resource record set, you specifyPRIMARYas the value forFailover; for the other resource record set, you specifySECONDARY. In addition, you include theHealthCheckIdelement and specify the health check that you want Amazon Route 53 to perform for each resource record set.
Except where noted, the following failover behaviors assume that you have included the HealthCheckId element in both resource record sets:
HealthCheckId element for the secondary resource record set, and if the primary resource record set is unhealthy, Route 53 always responds to DNS queries with the applicable value from the secondary resource record set. This is true regardless of the health of the associated endpoint.You can't create non-failover resource record sets that have the same values for the Name and Type elements as failover resource record sets.
For failover alias resource record sets, you must also include the EvaluateTargetHealth element and set the value to true.
For more information about configuring failover for Route 53, see the following topics in the Amazon Route 53 Developer Guide :
MultiValueAnswer (boolean) --
Multivalue answer resource record sets only : To route traffic approximately randomly to multiple resources, such as web servers, create one multivalue answer record for each resource and specify
trueforMultiValueAnswer. Note the following:
You can't create multivalue answer alias records.
TTL (integer) --
The resource record cache time to live (TTL), in seconds. Note the following:
TTL . Amazon Route 53 uses the value of TTL for the alias target.HealthCheckId element), we recommend that you specify a TTL of 60 seconds or less so clients respond quickly to changes in health status.TTL .TTL of 60 seconds for all of the non-alias weighted resource record sets that have the same name and type. Values other than 60 seconds (the TTL for load balancers) will change the effect of the values that you specify for Weight .ResourceRecords (list) --
Information about the resource records to act upon.
Note
If you're creating an alias resource record set, omit ResourceRecords .
(dict) --
Information specific to the resource record.
Note
If you're creating an alias resource record set, omit ResourceRecord .
Value (string) --
The current or new DNS record value, not to exceed 4,000 characters. In the case of a DELETE action, if the current value does not match the actual value, an error is returned. For descriptions about how to format Value for different record types, see Supported DNS Resource Record Types in the Amazon Route 53 Developer Guide .
You can specify more than one value for all record types except CNAME and SOA .
Note
If you're creating an alias resource record set, omit Value .
AliasTarget (dict) --
Alias resource record sets only: Information about the Amazon Web Services resource, such as a CloudFront distribution or an Amazon S3 bucket, that you want to route traffic to.
If you're creating resource records sets for a private hosted zone, note the following:
HostedZoneId (string) --
Alias resource records sets only : The value used depends on where you want to route traffic:
Amazon API Gateway custom regional APIs and edge-optimized APIs
Specify the hosted zone ID for your API. You can get the applicable value using the CLI command get-domain-names:
For regional APIs, specify the value of regionalHostedZoneId .
For edge-optimized APIs, specify the value of distributionHostedZoneId .
Amazon Virtual Private Cloud interface VPC endpoint
Specify the hosted zone ID for your interface endpoint. You can get the value of HostedZoneId using the CLI command describe-vpc-endpoints.
CloudFront distribution
Specify Z2FDTNDATAQYW2 .
Note
Alias resource record sets for CloudFront can't be created in a private zone.
Elastic Beanstalk environment
Specify the hosted zone ID for the region that you created the environment in. The environment must have a regionalized subdomain. For a list of regions and the corresponding hosted zone IDs, see Elastic Beanstalk endpoints and quotas in the the Amazon Web Services General Reference .
ELB load balancer
Specify the value of the hosted zone ID for the load balancer. Use the following methods to get the hosted zone ID:
Elastic Load Balancing endpoints and quotas topic in the Amazon Web Services General Reference : Use the value that corresponds with the region that you created your load balancer in. Note that there are separate columns for Application and Classic Load Balancers and for Network Load Balancers.
Amazon Web Services Management Console : Go to the Amazon EC2 page, choose Load Balancers in the navigation pane, select the load balancer, and get the value of the Hosted zone field on the Description tab.
Elastic Load Balancing API : Use DescribeLoadBalancers to get the applicable value. For more information, see the applicable guide:
CanonicalHostedZoneNameId .CanonicalHostedZoneId .CLI : Use describe-load-balancers to get the applicable value. For more information, see the applicable guide:
CanonicalHostedZoneNameId .CanonicalHostedZoneId .Global Accelerator accelerator
Specify Z2BJ6XQ5FK7U4H .
An Amazon S3 bucket configured as a static website
Specify the hosted zone ID for the region that you created the bucket in. For more information about valid values, see the table Amazon S3 Website Endpoints in the Amazon Web Services General Reference .
Another Route 53 resource record set in your hosted zone
Specify the hosted zone ID of your hosted zone. (An alias resource record set can't reference a resource record set in a different hosted zone.)
DNSName (string) --
Alias resource record sets only: The value that you specify depends on where you want to route queries:
Amazon API Gateway custom regional APIs and edge-optimized APIs
Specify the applicable domain name for your API. You can get the applicable value using the CLI command get-domain-names:
regionalDomainName .distributionDomainName . This is the name of the associated CloudFront distribution, such as da1b2c3d4e5.cloudfront.net .Note
The name of the record that you're creating must match a custom domain name for your API, such as api.example.com .
Amazon Virtual Private Cloud interface VPC endpoint
Enter the API endpoint for the interface endpoint, such as vpce-123456789abcdef01-example-us-east-1a.elasticloadbalancing.us-east-1.vpce.amazonaws.com . For edge-optimized APIs, this is the domain name for the corresponding CloudFront distribution. You can get the value of DnsName using the CLI command describe-vpc-endpoints.
CloudFront distribution
Specify the domain name that CloudFront assigned when you created your distribution.
Your CloudFront distribution must include an alternate domain name that matches the name of the resource record set. For example, if the name of the resource record set is acme.example.com , your CloudFront distribution must include acme.example.com as one of the alternate domain names. For more information, see Using Alternate Domain Names (CNAMEs) in the Amazon CloudFront Developer Guide .
You can't create a resource record set in a private hosted zone to route traffic to a CloudFront distribution.
Note
For failover alias records, you can't specify a CloudFront distribution for both the primary and secondary records. A distribution must include an alternate domain name that matches the name of the record. However, the primary and secondary records have the same name, and you can't include the same alternate domain name in more than one distribution.
Elastic Beanstalk environment
If the domain name for your Elastic Beanstalk environment includes the region that you deployed the environment in, you can create an alias record that routes traffic to the environment. For example, the domain name my-environment.us-west-2.elasticbeanstalk.com is a regionalized domain name.
Warning
For environments that were created before early 2016, the domain name doesn't include the region. To route traffic to these environments, you must create a CNAME record instead of an alias record. Note that you can't create a CNAME record for the root domain name. For example, if your domain name is example.com, you can create a record that routes traffic for acme.example.com to your Elastic Beanstalk environment, but you can't create a record that routes traffic for example.com to your Elastic Beanstalk environment.
For Elastic Beanstalk environments that have regionalized subdomains, specify the CNAME attribute for the environment. You can use the following methods to get the value of the CNAME attribute:
Amazon Web Services Management Console : For information about how to get the value by using the console, see Using Custom Domains with Elastic Beanstalk in the Elastic Beanstalk Developer Guide .
Elastic Beanstalk API : Use the DescribeEnvironments action to get the value of the CNAME attribute. For more information, see DescribeEnvironments in the Elastic Beanstalk API Reference .
CLI : Use the describe-environments command to get the value of the CNAME attribute. For more information, see describe-environments in the CLI Command Reference .
ELB load balancer
Specify the DNS name that is associated with the load balancer. Get the DNS name by using the Amazon Web Services Management Console, the ELB API, or the CLI.
Amazon Web Services Management Console : Go to the EC2 page, choose Load Balancers in the navigation pane, choose the load balancer, choose the Description tab, and get the value of the DNS name field. If you're routing traffic to a Classic Load Balancer, get the value that begins with dualstack . If you're routing traffic to another type of load balancer, get the value that applies to the record type, A or AAAA.
Elastic Load Balancing API : Use DescribeLoadBalancers to get the value of DNSName . For more information, see the applicable guide:
CLI : Use describe-load-balancers to get the value of DNSName . For more information, see the applicable guide:
Global Accelerator accelerator
Specify the DNS name for your accelerator:
Global Accelerator API: To get the DNS name, use DescribeAccelerator.
CLI: To get the DNS name, use describe-accelerator.
Amazon S3 bucket that is configured as a static website
Specify the domain name of the Amazon S3 website endpoint that you created the bucket in, for example, s3-website.us-east-2.amazonaws.com . For more information about valid values, see the table Amazon S3 Website Endpoints in the Amazon Web Services General Reference . For more information about using S3 buckets for websites, see Getting Started with Amazon Route 53 in the Amazon Route 53 Developer Guide.
Another Route 53 resource record set
Specify the value of the Name element for a resource record set in the current hosted zone.
Note
If you're creating an alias record that has the same name as the hosted zone (known as the zone apex), you can't specify the domain name for a record for which the value of Type is CNAME . This is because the alias record must have the same type as the record that you're routing traffic to, and creating a CNAME record for the zone apex isn't supported even for an alias record.
EvaluateTargetHealth (boolean) --
Applies only to alias, failover alias, geolocation alias, latency alias, and weighted alias resource record sets: When
EvaluateTargetHealthistrue, an alias resource record set inherits the health of the referenced Amazon Web Services resource, such as an ELB load balancer or another resource record set in the hosted zone.
Note the following:
CloudFront distributions
You can't set EvaluateTargetHealth to true when the alias target is a CloudFront distribution.
Elastic Beanstalk environments that have regionalized subdomains
If you specify an Elastic Beanstalk environment in DNSName and the environment contains an ELB load balancer, Elastic Load Balancing routes queries only to the healthy Amazon EC2 instances that are registered with the load balancer. (An environment automatically contains an ELB load balancer if it includes more than one Amazon EC2 instance.) If you set EvaluateTargetHealth to true and either no Amazon EC2 instances are healthy or the load balancer itself is unhealthy, Route 53 routes queries to other available resources that are healthy, if any.
If the environment contains a single Amazon EC2 instance, there are no special requirements.
ELB load balancers
Health checking behavior depends on the type of load balancer:
DNSName , Elastic Load Balancing routes queries only to the healthy Amazon EC2 instances that are registered with the load balancer. If you set EvaluateTargetHealth to true and either no EC2 instances are healthy or the load balancer itself is unhealthy, Route 53 routes queries to other resources.EvaluateTargetHealth to true , Route 53 routes queries to the load balancer based on the health of the target groups that are associated with the load balancer:Note
When you create a load balancer, you configure settings for Elastic Load Balancing health checks; they're not Route 53 health checks, but they perform a similar function. Do not create Route 53 health checks for the EC2 instances that you register with an ELB load balancer.
S3 buckets
There are no special requirements for setting EvaluateTargetHealth to true when the alias target is an S3 bucket.
Other records in the same hosted zone
If the Amazon Web Services resource that you specify in DNSName is a record or a group of records (for example, a group of weighted records) but is not another alias record, we recommend that you associate a health check with all of the records in the alias target. For more information, see What Happens When You Omit Health Checks? in the Amazon Route 53 Developer Guide .
For more information and examples, see Amazon Route 53 Health Checks and DNS Failover in the Amazon Route 53 Developer Guide .
HealthCheckId (string) --
If you want Amazon Route 53 to return this resource record set in response to a DNS query only when the status of a health check is healthy, include the HealthCheckId element and specify the ID of the applicable health check.
Route 53 determines whether a resource record set is healthy based on one of the following:
Warning
Route 53 doesn't check the health of the endpoint that is specified in the resource record set, for example, the endpoint specified by the IP address in the Value element. When you add a HealthCheckId element to a resource record set, Route 53 checks the health of the endpoint that you specified in the health check.
For more information, see the following topics in the Amazon Route 53 Developer Guide :
When to Specify HealthCheckId
Specifying a value for HealthCheckId is useful only when Route 53 is choosing between two or more resource record sets to respond to a DNS query, and you want Route 53 to base the choice in part on the status of a health check. Configuring health checks makes sense only in the following configurations:
EvaluateTargetHealth to true for an alias resource record set in a group of resource record sets that have the same routing policy, name, and type (such as multiple weighted records named www.example.com with a type of A).If the health check status is healthy, Route 53 considers the alias resource record set to be healthy and includes the alias record among the records that it responds to DNS queries with.
If the health check status is unhealthy, Route 53 stops responding to DNS queries using the alias resource record set.
Note
The alias resource record set can also route traffic to a group of non-alias resource record sets that have the same routing policy, name, and type. In that configuration, associate health checks with all of the resource record sets in the group of non-alias resource record sets.
Geolocation Routing
For geolocation resource record sets, if an endpoint is unhealthy, Route 53 looks for a resource record set for the larger, associated geographic region. For example, suppose you have resource record sets for a state in the United States, for the entire United States, for North America, and a resource record set that has * for CountryCode is * , which applies to all locations. If the endpoint for the state resource record set is unhealthy, Route 53 checks for healthy resource record sets in the following order until it finds a resource record set for which the endpoint is healthy:
Specifying the Health Check Endpoint by Domain Name
If your health checks specify the endpoint only by domain name, we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com . For the value of FullyQualifiedDomainName , specify the domain name of the server (such as us-east-2-www.example.com ), not the name of the resource record sets ( www.example.com ).
Warning
Health check results will be unpredictable if you do the following:
FullyQualifiedDomainName as the name of a resource record set.TrafficPolicyInstanceId (string) --
When you create a traffic policy instance, Amazon Route 53 automatically creates a resource record set. TrafficPolicyInstanceId is the ID of the traffic policy instance that Route 53 created this resource record set for.
Warning
To delete the resource record set that is associated with a traffic policy instance, use DeleteTrafficPolicyInstance . Route 53 will delete the resource record set automatically. If you delete the resource record set by using ChangeResourceRecordSets , Route 53 doesn't automatically delete the traffic policy instance, and you'll continue to be charged for it even though it's no longer in use.
CidrRoutingConfig (dict) --
The object that is specified in resource record set object when you are linking a resource record set to a CIDR location.
A LocationName with an asterisk “*” can be used to create a default CIDR record. CollectionId is still required for default record.
CollectionId (string) --
The CIDR collection ID.
LocationName (string) --
The CIDR collection location name.
IsTruncated (boolean) --
A flag that indicates whether more resource record sets remain to be listed. If your results were truncated, you can make a follow-up pagination request by using the NextRecordName element.
MaxItems (string) --
The maximum number of records you requested.
NextToken (string) --
A token to resume pagination.
Route53.Paginator.ListVPCAssociationAuthorizations¶paginator = client.get_paginator('list_vpc_association_authorizations')
paginate(**kwargs)¶Creates an iterator that will paginate through responses from Route53.Client.list_vpc_association_authorizations().
See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate(
HostedZoneId='string',
MaxResults='string',
PaginationConfig={
'MaxItems': 123,
'StartingToken': 'string'
}
)
[REQUIRED]
The ID of the hosted zone for which you want a list of VPCs that can be associated with the hosted zone.
MaxResults , Route 53 returns up to 50 VPCs per page.A dictionary that provides parameters to control pagination.
The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.
A token to specify where to start paginating. This is the NextToken from a previous response.
dict
Response Syntax
{
'HostedZoneId': 'string',
'VPCs': [
{
'VPCRegion': 'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'eu-central-1'|'eu-central-2'|'ap-east-1'|'me-south-1'|'us-gov-west-1'|'us-gov-east-1'|'us-iso-east-1'|'us-iso-west-1'|'us-isob-east-1'|'me-central-1'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-south-1'|'ap-south-2'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'eu-north-1'|'sa-east-1'|'ca-central-1'|'cn-north-1'|'af-south-1'|'eu-south-1'|'eu-south-2',
'VPCId': 'string'
},
]
}
Response Structure
(dict) --
A complex type that contains the response information for the request.
HostedZoneId (string) --
The ID of the hosted zone that you can associate the listed VPCs with.
VPCs (list) --
The list of VPCs that are authorized to be associated with the specified hosted zone.
(dict) --
(Private hosted zones only) A complex type that contains information about an Amazon VPC.
If you associate a private hosted zone with an Amazon VPC when you make a CreateHostedZone request, the following parameters are also required.
VPCRegion (string) --
(Private hosted zones only) The region that an Amazon VPC was created in.
VPCId (string) --
(Private hosted zones only) The ID of an Amazon VPC.
The available waiters are:
Route53.Waiter.ResourceRecordSetsChanged¶waiter = client.get_waiter('resource_record_sets_changed')
wait(**kwargs)¶Polls Route53.Client.get_change() every 30 seconds until a successful state is reached. An error is returned after 60 failed checks.
See also: AWS API Documentation
Request Syntax
waiter.wait(
Id='string',
WaiterConfig={
'Delay': 123,
'MaxAttempts': 123
}
)
[REQUIRED]
The ID of the change batch request. The value that you specify here is the value that ChangeResourceRecordSets returned in the Id element when you submitted the request.
A dictionary that provides parameters to control waiting behavior.
The amount of time in seconds to wait between attempts. Default: 30
The maximum number of attempts to be made. Default: 60
None