Skip to content

Enable/disable Route53-Resolver autodefined_reverse_flag for VPC #1267

@felipempda

Description

@felipempda

Is your request related to a new offering from AWS?

No

Is this functionality available in the [AWS provider for Terraform]?

Yes, available since 4.370

Is your request related to a problem? Please describe.

In hybrid environments we need to add reverse DNS rules back to on-premises AD.
By default AWS creates reverse DNS rules for all subnets in your VPC, which makes it hard to create this DNS rules
https://aws.amazon.com/about-aws/whats-new/2021/10/disable-default-reverse-dns-rules-route-53-resolver/

https://repost.aws/knowledge-center/route-53-override-reverse-dns-rules

Describe the solution you'd like.

I'd like the option to enable/disable Resolver53 attribute autodefined_reverse_flag to control the creation of default DNS resolver rules for this VPC:

~ $  aws route53resolver get-resolver-config --resource-id vpc-0425f0b6cb44dcf69
{
    "ResolverConfig": {
        "Id": "rslvr-rc-9455c928546e386d",
        "ResourceId": "vpc-0425f0b6cb44dcf69",
        "OwnerId": "381491884678",
        "AutodefinedReverse": "ENABLED"
    }
}
Image

Although it's resolver53 configuration, it's specific to a VPC, so I guess it makes sense being here

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_resolver_config

resource "aws_vpc" "example" {
  cidr_block           = "10.0.0.0/16"
  enable_dns_support   = true
  enable_dns_hostnames = true
}

resource "aws_route53_resolver_config" "example" {
  resource_id              = aws_vpc.example.id
  autodefined_reverse_flag = "DISABLE"
}

Describe alternatives you've considered.

Using this bit of code outside of this module. However, I think it's a good candidate to be incorporated into this module.

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions