Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DCMAW-10784 - Spike Private DNS #293

Draft
wants to merge 6 commits into
base: main
Choose a base branch
from
Draft

DCMAW-10784 - Spike Private DNS #293

wants to merge 6 commits into from

Conversation

mthkbarber
Copy link
Contributor

@mthkbarber mthkbarber commented Dec 11, 2024

DCMAW-10784

Spike:
Attempt to apply a custom DNS to the Private API Gateway.

Resources successfully created:

AWS::ApiGateway::DomainNameV2
AWS::ApiGateway::BasePathMappingV2
AWS::ApiGateway::DomainNameAccessAssociation

Resource failing to create:
AWS::Route53::RecordSet

Current error message

[Tried to create an alias that targets mrdd8sw6ra.execute-api.eu-west-2.amazonaws.com\057dev. type A in zone ${Public Hosted Zone}, but the alias target name does not lie within the target zone]. The following resource(s) failed to create: [PrivateApiRecordSet].

HostedZoneId: !ImportValue PublicHostedZoneId #Private hosted zone needed here
AliasTarget:
DNSName: !Sub ${PrivateApi}.execute-api.${AWS::Region}.amazonaws.com/${Environment}
HostedZoneId: !ImportValue PublicHostedZoneId #Private hosted zone needed here
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

336 and 338 need values for a private hosted zone, we currently only have a public hosted zone in our dns template.

Type: AWS::ApiGateway::DomainNameV2
Properties:
DomainName: !Sub
- private-${AWS::StackName}.${DNS_RECORD}
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Domain name to be decided.

DependsOn: PrivateApiDomainName
Properties:
DomainNameArn: !GetAtt PrivateApiDomainName.DomainNameArn
AccessAssociationSource: vpce-0825f978898f57283
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the VPC endpoint for the com.amazonaws.eu-west-2.execute-api service.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants