Is there a way to get stale DNS records from SSM or AWS Trusted Advisor?

0

I'm wondering to know if there is a way to distinguish stale DNS records in Route53 using SSM, trusted advisor or any other AWS tool.

1 réponse
2

What is a "stale DNS record"? What I think you're asking is "how can I tell if a DNS record is pointing to an AWS resource that doesn't exist anymore".

The short answer to your question is no, there isn't an easy way to do that. And you should also consider stale CloudFront origin configurations.

If so: The resource records of interest will be A, CNAME, MX and ALIAS. Perhaps NS too. There's a good (external) post on this topic but it only does half the job. If you have a multi-account environment then you will need to create an inventory of resources (IP addresses, load balancers, etc.) that are available in all of those accounts and then check the Route 53 entries against them.

For CloudFront, take a look at this post.

profile pictureAWS
EXPERT
répondu il y a 2 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions