ResolverEndpoint
¶
Source code in docs_src/capo_route53resolver/types/resolver_endpoint.py
arn
instance-attribute
¶
arn: NotRequired[Arn]
The ARN (Amazon Resource Name) for the Resolver endpoint.
creation_time
instance-attribute
¶
creation_time: NotRequired[Rfc3339TimeString]
The date and time that the endpoint was created, in Unix time format and Coordinated Universal Time (UTC).
creator_request_id
instance-attribute
¶
creator_request_id: NotRequired[CreatorRequestId]
A unique string that identifies the request that created the Resolver endpoint. The CreatorRequestId allows failed requests to be retried without the risk of running the operation twice.
direction
instance-attribute
¶
direction: NotRequired[ResolverEndpointDirection]
Indicates whether the Resolver endpoint allows inbound or outbound DNS queries:
-
INBOUND: allows DNS queries to your VPC from your network -
OUTBOUND: allows DNS queries from your VPC to your network -
INBOUND_DELEGATION: Resolver delegates queries to Route 53 private hosted zones from your network.
dns64_enabled
instance-attribute
¶
dns64_enabled: NotRequired[Dns64Enabled]
Indicates whether DNS64 is enabled for the inbound Resolver endpoint. When true, Route 53 Resolver synthesizes AAAA (IPv6) records for IPv4-only services by prepending the 64:ff9b::/96 prefix to the IPv4 address.
host_vpc_id
instance-attribute
¶
host_vpc_id: NotRequired[ResourceId]
The ID of the VPC that you want to create the Resolver endpoint in.
ip_address_count
instance-attribute
¶
ip_address_count: NotRequired[IpAddressCount]
The number of IP addresses that the Resolver endpoint can use for DNS queries.
ipv6_internet_access_enabled
instance-attribute
¶
ipv6_internet_access_enabled: NotRequired[Ipv6InternetAccessEnabled]
Indicates whether IPv6 internet access is enabled for the outbound Resolver endpoint. When true, the endpoint elastic network interfaces (ENIs) can forward DNS queries to public IPv6 targets through an internet gateway.
modification_time
instance-attribute
¶
modification_time: NotRequired[Rfc3339TimeString]
The date and time that the endpoint was last modified, in Unix time format and Coordinated Universal Time (UTC).
name
instance-attribute
¶
name: NotRequired[Name]
The name that you assigned to the Resolver endpoint when you submitted a CreateResolverEndpoint request.
outpost_arn
instance-attribute
¶
outpost_arn: NotRequired[OutpostArn]
The ARN (Amazon Resource Name) for the Outpost.
preferred_instance_type
instance-attribute
¶
preferred_instance_type: NotRequired[OutpostInstanceType]
The Amazon EC2 instance type.
protocols
instance-attribute
¶
protocols: NotRequired[ProtocolList]
Protocols used for the endpoint. DoH-FIPS is applicable for a default inbound endpoints only.
For an inbound endpoint you can apply the protocols as follows:
-
Do53 and DoH in combination.
-
Do53 and DoH-FIPS in combination.
-
Do53 alone.
-
DoH alone.
-
DoH-FIPS alone.
-
None, which is treated as Do53.
For a delegation inbound endpoint you can use Do53 only.
For an outbound endpoint you can apply the protocols as follows:
-
Do53 and DoH in combination.
-
Do53 alone.
-
DoH alone.
-
None, which is treated as Do53.
resolver_endpoint_type
instance-attribute
¶
resolver_endpoint_type: NotRequired[ResolverEndpointType]
The Resolver endpoint IP address type.
rni_enhanced_metrics_enabled
instance-attribute
¶
rni_enhanced_metrics_enabled: NotRequired[RniEnhancedMetricsEnabled]
Indicates whether RNI enhanced metrics are enabled for the Resolver endpoint. When enabled, one-minute granular metrics are published in CloudWatch for each RNI associated with this endpoint. When disabled, these metrics are not published.
security_group_ids
instance-attribute
¶
security_group_ids: NotRequired[SecurityGroupIds]
The ID of one or more security groups that control access to this VPC. The security group must include one or more inbound rules (for inbound endpoints) or outbound rules (for outbound endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network.
status
instance-attribute
¶
status: NotRequired[ResolverEndpointStatus]
A code that specifies the current status of the Resolver endpoint. Valid values include the following:
-
CREATING: Resolver is creating and configuring one or more Amazon VPC network interfaces for this endpoint. -
OPERATIONAL: The Amazon VPC network interfaces for this endpoint are correctly configured and able to pass inbound or outbound DNS queries between your network and Resolver. -
UPDATING: Resolver is associating or disassociating one or more network interfaces with this endpoint. -
AUTO_RECOVERING: Resolver is trying to recover one or more of the network interfaces that are associated with this endpoint. During the recovery process, the endpoint functions with limited capacity because of the limit on the number of DNS queries per IP address (per network interface). For the current limit, see Limits on Route 53 Resolver. -
ACTION_NEEDED: This endpoint is unhealthy, and Resolver can't automatically recover it. To resolve the problem, we recommend that you check each IP address that you associated with the endpoint. For each IP address that isn't available, add another IP address and then delete the IP address that isn't available. (An endpoint must always include at least two IP addresses.) A status ofACTION_NEEDEDcan have a variety of causes. Here are two common causes:-
One or more of the network interfaces that are associated with the endpoint were deleted using Amazon VPC.
-
The network interface couldn't be created for some reason that's outside the control of Resolver.
-
-
DELETING: Resolver is deleting this endpoint and the associated network interfaces.
status_message
instance-attribute
¶
status_message: NotRequired[StatusMessage]
A detailed description of the status of the Resolver endpoint.
target_name_server_metrics_enabled
instance-attribute
¶
target_name_server_metrics_enabled: NotRequired[TargetNameServerMetricsEnabled]
Indicates whether target name server metrics are enabled for the outbound Resolver endpoint. When enabled, one-minute granular metrics are published in CloudWatch for each target name server associated with this endpoint. When disabled, these metrics are not published. This feature is not supported for inbound Resolver endpoint.