-
-
Notifications
You must be signed in to change notification settings - Fork 4.6k
Description
Is your request related to a new offering from AWS?
No
Is this functionality available in the [AWS provider for Terraform]?
Yes, available since 4.370
Is your request related to a problem? Please describe.
In hybrid environments we need to add reverse DNS rules back to on-premises AD.
By default AWS creates reverse DNS rules for all subnets in your VPC, which makes it hard to create this DNS rules
https://aws.amazon.com/about-aws/whats-new/2021/10/disable-default-reverse-dns-rules-route-53-resolver/
https://repost.aws/knowledge-center/route-53-override-reverse-dns-rules
Describe the solution you'd like.
I'd like the option to enable/disable Resolver53 attribute autodefined_reverse_flag to control the creation of default DNS resolver rules for this VPC:
~ $ aws route53resolver get-resolver-config --resource-id vpc-0425f0b6cb44dcf69
{
"ResolverConfig": {
"Id": "rslvr-rc-9455c928546e386d",
"ResourceId": "vpc-0425f0b6cb44dcf69",
"OwnerId": "381491884678",
"AutodefinedReverse": "ENABLED"
}
}
Although it's resolver53 configuration, it's specific to a VPC, so I guess it makes sense being here
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_resolver_config
resource "aws_vpc" "example" {
cidr_block = "10.0.0.0/16"
enable_dns_support = true
enable_dns_hostnames = true
}
resource "aws_route53_resolver_config" "example" {
resource_id = aws_vpc.example.id
autodefined_reverse_flag = "DISABLE"
}Describe alternatives you've considered.
Using this bit of code outside of this module. However, I think it's a good candidate to be incorporated into this module.