Skip to main content

NTC Route53 (DNS)

Release Notes Source Code Implementation Blueprint

Description​

NTC Route53 automates the setup and management of DNS infrastructure using AWS Route 53. This building block provides a scalable and reliable solution for managing hosted zones, and cross-account DNS configurations. With support for hybrid environments, NTC Route53 simplifies DNS resolution between AWS and on-premises networks.

Designed to integrate seamlessly with your existing infrastructure, this building block ensures efficient and secure DNS operations while maintaining alignment with best practices for availability and performance.

info

DNSSEC requires a chain of trust, which means a DS record must be configured in the parent domain (e.g. company.com → meeting.company.com), unless the current domain is the root domain. If the parent domain is also managed in AWS, you can use zone_delegation_list to configure both subdomain delegation and the DS record in the parent domain.

Verify if DNSSEC is set up correctly by using a tool like DNSSEC Debugger from VeriSign Labs.

Usage​

Latest Release1.3.0
# --------------------------------------------------------------------------------------------------
# ¦ NTC ROUTE53 - PRIVATE HOSTED ZONE
# --------------------------------------------------------------------------------------------------
module "ntc_route53_private" {
  source = "github.com/nuvibit-terraform-collection/terraform-aws-ntc-route53?ref=X.X.X"

  zone_force_destroy = false

  # name of the route53 hosted zone
  zone_name        = "company.internal"
  zone_description = "Managed by Terraform"

  # private hosted zones require at least one vpc to be associated
  # public hosted zones cannot have any vpc associated
  zone_type = "private"

  # private hosted zones require at least one vpc to be associated
  # public hosted zones cannot have any vpc associated
  zone_type = "private"
  zone_vpc_associations = [
    {
      vpc_id = "vpc-01234567890abcdef"
      # (optional) by default the provider region will be used
      vpc_region = null
    }
  ]

  # list of dns records which should be created in hosted zone. alias records are a special type of records
  # https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html
  dns_records = [
    {
      name = "endpoint1"
      type = "A"
      ttl  = 300
      values = [
        "192.168.1.1",
        "192.168.2.2"
      ]
    }
  ]
}

Requirements​

The following requirements are needed by this module:

  • terraform (>= 1.3.0)

  • aws (>= 4.0)

Providers​

The following providers are used by this module:

  • aws (>= 4.0)

Modules​

The following Modules are called:

dns_records​

Source: ./modules/records

Version:

Resources​

The following resources are used by this module:

Required Inputs​

The following input variables are required:

zone_name​

Description: This is the name of the hosted zone.

Type: string

zone_type​

Description: The type (public or private) of hosted zone where the records will be created.

Type: string

Optional Inputs​

The following input variables are optional (have default values):

dns_records​

Description: List of Route53 DNS Records.

Type:

list(object({
    name   = string
    type   = string
    ttl    = optional(number, 300)
    values = optional(list(string), [])
    alias = optional(object({
      enable_alias           = optional(bool, false)
      target_dns_name        = optional(string, "")
      target_hosted_zone_id  = optional(string, "")
      evaluate_target_health = optional(bool, false)
    }), {})
  }))

Default: []

zone_delegation_list​

Description: List of subdomains with corresponding nameservers which should be delegated.

Type:

list(object({
    subdomain_zone_name       = string
    subdomain_nameserver_list = list(string)
    dnssec_enabled            = optional(bool, false)
    dnssec_ds_record          = optional(string, "")
  }))

Default: []

zone_description​

Description: Description for the hosted zone. Defaults to 'Managed by Terraform'.

Type: string

Default: "Managed by Terraform"

zone_force_destroy​

Description: Whether to destroy all records (possibly managed outside of Terraform) in the zone when destroying the zone.

Type: bool

Default: false

zone_vpc_association_exception​

Description: Set to true if you need to use vpc zone associations from another account. Warning: This will recreate the hosted zone and the initially set VPC associations cannot be updated anymore.

Type: bool

Default: false

zone_vpc_associations​

Description: A list of VPCs to associate the private hosted zone with. Required if "zone_type" is private.

Type:

list(object({
    vpc_id     = optional(string, "")
    vpc_region = optional(string, null)
  }))

Default: []

Outputs​

The following outputs are exported:

zone_arn​

Description: The Amazon Resource Name (ARN) of the Hosted Zone.

zone_id​

Description: The Hosted Zone ID. This can be referenced by zone records.

zone_name​

Description: The name of the hosted zone.

zone_nameservers​

Description: A list of name servers in associated (or default) delegation set.

zone_records_fqdn​

Description: A map of FQDN DNS records.

zone_subdomains​

Description: A list of delegated subdomains on the Hosted Zone.