Skip to main content

Aws/dns Observation

@webframp/aws/dns-observationv2026.07.03.1· 3d agoMODELS
01README

Observe Route53 hosted zones, record sets, and detect orphaned DNS records pointing at decommissioned infrastructure.

This model reads Route53 data for observation and cross-references record targets against inventory/adopt data to find orphaned entries. It does not manage zones or records — use @swamp/aws/route53 for infrastructure management.

Quick Start

swamp extension pull @webframp/aws/dns-observation
swamp model create @webframp/aws/dns-observation aws-dns-observation
swamp model method run aws-dns-observation list_zones
swamp model method run aws-dns-observation list_records
swamp model method run aws-dns-observation detect_orphans

Methods

  • list_zones — List all hosted zones with record counts and metadata
  • list_records — List all record sets across zones (primary drift-state output)
  • detect_orphans — Cross-reference records against inventory to find orphans

Prerequisites

Route53 read access. Required IAM permissions:

  • route53:ListHostedZones
  • route53:GetHostedZone
  • route53:ListResourceRecordSets
  • sts:GetCallerIdentity

For orphan detection, upstream models must have fresh data:

  • @webframp/aws/inventory (scan spec) — EC2 IPs, ELBs, S3, CloudFront
  • @webframp/aws/adopt (discovery spec) — Elastic IPs
02Release Notes

@webframp/aws/dns-observation v2026.07.03.1

Changed: Added JSDoc documentation to the model export for improved deno doc and quality rubric compliance.

Initial release.

Methods

  • list_zones — List all Route53 hosted zones with record counts, public/private status, and VPC associations
  • list_records — List all record sets across zones with pagination support
  • detect_orphans — Cross-reference DNS record targets against inventory/adopt data to find orphaned entries pointing at decommissioned infrastructure

Orphan Detection

Identifies DNS records pointing at resources no longer present in inventory:

  • ELB aliases not found in inventory
  • CloudFront aliases not found in inventory
  • S3 website endpoints not found in inventory
  • A record IPs not found in EC2 public IPs or Elastic IPs
  • CNAME targets pointing at missing ELBs or S3 buckets

Excludes RFC 1918, loopback, and link-local addresses from IP checks. Reports truncated: true when pagination limits are reached.

03Models1
@webframp/aws/dns-observationv2026.07.03.1aws/dns_observation.ts

Global Arguments

ArgumentTypeDescription
regionstringAWS region (Route53 is global but STS needs a region)
fn list_zones(includePrivate?: boolean)
List all Route53 hosted zones with record counts and metadata.
ArgumentTypeDescription
includePrivate?booleanInclude private hosted zones in results
fn list_records(zoneFilter?: array, typeFilter?: array)
List all record sets across hosted zones. Primary output for drift-state consumption.
ArgumentTypeDescription
zoneFilter?arrayLimit to specific zone IDs. Omit for all zones.
typeFilter?arrayLimit to specific record types (A, AAAA, CNAME, etc.)
fn detect_orphans(inventoryModelName?: string, adoptModelName?: string, skipTypes?: array)
Cross-reference DNS records against inventory to find orphaned records pointing at decommissioned infrastructure.
ArgumentTypeDescription
inventoryModelName?stringName of the @webframp/aws/inventory model instance
adoptModelName?stringName of the @webframp/aws/adopt model instance
skipTypes?arrayRecord types to skip during orphan detection

Resources

zones(6h)— Hosted zone inventory
records(6h)— Record set inventory across zones
orphans(6h)— Orphaned DNS records pointing at decommissioned infrastructure
04Previous Versions3
2026.06.29.2Jun 29, 2026
2026.06.29.1Jun 29, 2026
2026.06.27.2Jun 28, 2026

@webframp/aws/dns-observation v2026.06.27.2

Initial release.

Methods

  • list_zones — List all Route53 hosted zones with record counts, public/private status, and VPC associations
  • list_records — List all record sets across zones with pagination support
  • detect_orphans — Cross-reference DNS record targets against inventory/adopt data to find orphaned entries pointing at decommissioned infrastructure

Orphan Detection

Identifies DNS records pointing at resources no longer present in inventory:

  • ELB aliases not found in inventory
  • CloudFront aliases not found in inventory
  • S3 website endpoints not found in inventory
  • A record IPs not found in EC2 public IPs or Elastic IPs
  • CNAME targets pointing at missing ELBs or S3 buckets

Excludes RFC 1918, loopback, and link-local addresses from IP checks. Reports truncated: true when pagination limits are reached.

05Stats
A
100 / 100
Downloads
0
Archive size
298.8 KB
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Dependencies pass trust audit2/2earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License declared1/1earned
  • Verified public repository2/2earned
06Platforms
07Labels