Skip to content

aws.route53resolver.get_resolver_rule

Example SQL Queries

SELECT * FROM
aws.route53resolver.get_resolver_rule
WHERE
"resolver_rule_id" = 'VALUE';

Description

Gets information about a specified Resolver rule, such as the domain name that the rule forwards DNS queries for and the ID of the outbound Resolver endpoint that the rule is associated with.

Table Definition

Column NameColumn Data Type
resolver_rule_id Required Input Column

The ID of the Resolver rule that you want to get information about.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
resolver_rule

Information about the Resolver rule that you specified in a GetResolverRule request.

STRUCT(
"id" VARCHAR,
"creator_request_id" VARCHAR,
"arn" VARCHAR,
"domain_name" VARCHAR,
"status" VARCHAR,
"status_message" VARCHAR,
"rule_type" VARCHAR,
"name" VARCHAR,
"target_ips" STRUCT(
"ip" VARCHAR,
"port" BIGINT,
"ipv6" VARCHAR,
"protocol" VARCHAR
)[],
"resolver_endpoint_id" VARCHAR,
"owner_id" VARCHAR,
"share_status" VARCHAR,
"creation_time" VARCHAR,
"modification_time" VARCHAR
)
Show child fields
resolver_rule.arn

The ARN (Amazon Resource Name) for the Resolver rule specified by Id.

resolver_rule.creation_time

The date and time that the Resolver rule was created, in Unix time format and Coordinated Universal Time (UTC).

resolver_rule.creator_request_id

A unique string that you specified when you created the Resolver rule. CreatorRequestId identifies the request and allows failed requests to be retried without the risk of running the operation twice.

resolver_rule.domain_name

DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps. If a query matches multiple Resolver rules (example.com and www.example.com), the query is routed using the Resolver rule that contains the most specific domain name (www.example.com).

resolver_rule.id

The ID that Resolver assigned to the Resolver rule when you created it.

resolver_rule.modification_time

The date and time that the Resolver rule was last updated, in Unix time format and Coordinated Universal Time (UTC).

resolver_rule.name

The name for the Resolver rule, which you specified when you created the Resolver rule.

resolver_rule.owner_id

When a rule is shared with another Amazon Web Services account, the account ID of the account that the rule is shared with.

resolver_rule.resolver_endpoint_id

The ID of the endpoint that the rule is associated with.

resolver_rule.rule_type

When you want to forward DNS queries for specified domain name to resolvers on your network, specify FORWARD.

When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify SYSTEM.

For example, to forward DNS queries for example.com to resolvers on your network, you create a rule and specify FORWARD for RuleType. To then have Resolver process queries for apex.example.com, you create a rule and specify SYSTEM for RuleType.

Currently, only Resolver can create rules that have a value of RECURSIVE for RuleType.

resolver_rule.share_status

Whether the rule is shared and, if so, whether the current account is sharing the rule with another account, or another account is sharing the rule with the current account.

resolver_rule.status

A code that specifies the current status of the Resolver rule.

resolver_rule.status_message

A detailed description of the status of a Resolver rule.

resolver_rule.target_ips[]
Show child fields
resolver_rule.target_ips[].ip

One IPv4 address that you want to forward DNS queries to.

resolver_rule.target_ips[].ipv6

One IPv6 address that you want to forward DNS queries to.

resolver_rule.target_ips[].port

The port at Ip that you want to forward DNS queries to.

resolver_rule.target_ips[].protocol

The protocols for the Resolver endpoints. DoH-FIPS is applicable for inbound endpoints only.

For an inbound endpoint you can apply the protocols as follows:

  • Do53 and DoH in combination.

  • Do53 and DoH-FIPS in combination.

  • Do53 alone.

  • DoH alone.

  • DoH-FIPS alone.

  • None, which is treated as Do53.

For an outbound endpoint you can apply the protocols as follows:

  • Do53 and DoH in combination.

  • Do53 alone.

  • DoH alone.

  • None, which is treated as Do53.