Is there a way to get stale DNS records from SSM or AWS Trusted Advisor?

0

I'm wondering to know if there is a way to distinguish stale DNS records in Route53 using SSM, trusted advisor or any other AWS tool.

1 個回答
2

What is a "stale DNS record"? What I think you're asking is "how can I tell if a DNS record is pointing to an AWS resource that doesn't exist anymore".

The short answer to your question is no, there isn't an easy way to do that. And you should also consider stale CloudFront origin configurations.

If so: The resource records of interest will be A, CNAME, MX and ALIAS. Perhaps NS too. There's a good (external) post on this topic but it only does half the job. If you have a multi-account environment then you will need to create an inventory of resources (IP addresses, load balancers, etc.) that are available in all of those accounts and then check the Route 53 entries against them.

For CloudFront, take a look at this post.

profile pictureAWS
專家
已回答 2 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南