AWS Route53 DNS Record

Deploys an individual DNS record in an existing AWS Route53 hosted zone, with support for standard record types (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA), alias records pointing to AWS resources, and advanced routing policies (weighted, latency, failover, geolocation).

What Gets Created

When you deploy an AwsRoute53DnsRecord resource, OpenMCF provisions:

Route53 DNS Record — a route53.Record (AWS Classic) resource in the specified hosted zone, configured with the given record type, values or alias target, and optional routing policy

Depending on configuration, the record may be:

A standard record with explicit values and TTL (e.g., A record with IP addresses)
An alias record pointing to an AWS resource (ALB, CloudFront, S3 website, API Gateway) with automatic TTL from the target
A policy-routed record using weighted, latency-based, failover, or geolocation routing for advanced traffic management

Prerequisites

AWS credentials configured via environment variables or OpenMCF provider config
An existing Route53 hosted zone — provide the zone ID directly or reference an AwsRoute53Zone resource via valueFrom
A health check ID (optional) if using failover routing — health checks must be created separately in Route53
The target resource's DNS name and hosted zone ID if creating alias records — or reference an AwsAlb resource via valueFrom

Quick Start

Create a file dns-record.yaml:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: www-example
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: dev.AwsRoute53DnsRecord.www-example
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: www.example.com
  type: A
  ttl: 300
  values:
    - "203.0.113.10"

Deploy:

openmcf apply -f dns-record.yaml

This creates an A record for www.example.com pointing to 203.0.113.10 with a 5-minute TTL.

Configuration Reference

Required Fields

Field	Type	Description	Validation
`region`	`string`	The AWS region where the resource will be created.	Required
`zoneId`	`StringValueOrRef`	The Route53 hosted zone ID where this record is created. Can reference an AwsRoute53Zone resource via `valueFrom` (default kind: `AwsRoute53Zone`, default field: `status.outputs.zone_id`).	Required
`name`	`string`	The fully qualified domain name or subdomain (e.g., `www.example.com`, `*.example.com`).	Required. Pattern: hostname, subdomain, or wildcard.
`type`	`RecordType`	The DNS record type. Valid values: `A`, `AAAA`, `CNAME`, `MX`, `TXT`, `SRV`, `NS`, `CAA`.	Required. Cannot be `record_type_unspecified`.

At least one of values or aliasTarget must be specified. They are mutually exclusive.

Optional Fields

Field	Type	Default	Description
`ttl`	`int32`	`300`	Time to live in seconds. Valid range: 0-604800 (1 week). Ignored for alias records. Common values: 60 (fast changes), 300 (default), 86400 (static records).
`values`	`string[]`	`[]`	Record values. Format depends on type: A = IPv4 addresses, AAAA = IPv6, CNAME = target hostname, MX = priority + mail server, TXT = text values. Mutually exclusive with `aliasTarget`.
`aliasTarget`	`object`	—	Alias target for Route53 alias records. Use for zone apex records or free-query routing to AWS resources. Mutually exclusive with `values`.
`aliasTarget.dnsName`	`StringValueOrRef`	—	DNS name of the target resource. Can reference an AwsAlb resource via `valueFrom` (default kind: `AwsAlb`, default field: `status.outputs.load_balancer_dns_name`). Required for alias records.
`aliasTarget.zoneId`	`StringValueOrRef`	—	Hosted zone ID of the target AWS service (not your Route53 zone). Can reference an AwsAlb resource via `valueFrom` (default kind: `AwsAlb`, default field: `status.outputs.load_balancer_hosted_zone_id`). Required for alias records.
`aliasTarget.evaluateTargetHealth`	`bool`	`false`	When `true`, Route53 checks the health of the target before responding. Useful for failover scenarios.
`routingPolicy`	`object`	—	Routing policy for advanced traffic management. If not specified, simple routing is used. Only one policy type can be set.
`routingPolicy.weighted`	`object`	—	Weighted routing. Distributes traffic based on assigned weights.
`routingPolicy.weighted.weight`	`int32`	—	Weight value (0-255). Higher weight means more traffic. Weight of 0 stops traffic to this record.
`routingPolicy.latency`	`object`	—	Latency-based routing. Routes to the lowest-latency endpoint.
`routingPolicy.latency.region`	`string`	—	AWS region where this resource is located (e.g., `us-east-1`). Required for latency routing.
`routingPolicy.failover`	`object`	—	Failover routing. Automatic failover to secondary when primary fails.
`routingPolicy.failover.failoverType`	`FailoverType`	—	Must be `primary` or `secondary`. Required for failover routing.
`routingPolicy.geolocation`	`object`	—	Geolocation routing. Routes based on user location.
`routingPolicy.geolocation.continent`	`string`	—	Two-letter continent code (e.g., `NA`, `EU`, `AS`). Use continent or country, not both.
`routingPolicy.geolocation.country`	`string`	—	Two-letter ISO 3166-1 country code (e.g., `US`, `GB`, `DE`).
`routingPolicy.geolocation.subdivision`	`string`	—	US state code (e.g., `CA`, `NY`). Only valid when country is `US`.
`healthCheckId`	`string`	—	Route53 health check ID for failover routing. Health checks must be created separately.
`setIdentifier`	`string`	—	Unique identifier for routing policies. Required for weighted, latency, failover, and geolocation routing. Must be unique among records with the same name and type.

Examples

Simple A Record

A basic A record pointing a subdomain to an IP address:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: api-example
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: dev.AwsRoute53DnsRecord.api-example
spec:
  zoneId: Z1234567890ABCDEF
  name: api.example.com
  type: A
  ttl: 300
  values:
    - "203.0.113.10"
    - "203.0.113.11"

Alias Record Pointing to an ALB

An alias record at the zone apex pointing to an Application Load Balancer. Alias records at the apex are not possible with CNAME, and alias queries to AWS resources are free:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: apex-example
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.apex-example
spec:
  zoneId: Z1234567890ABCDEF
  name: example.com
  type: A
  aliasTarget:
    dnsName: my-alb-123456.us-east-1.elb.amazonaws.com
    zoneId: Z35SXDOTRQ7X7K
    evaluateTargetHealth: true

Using Foreign Key References

Reference other OpenMCF-managed resources instead of hardcoding IDs. The zoneId defaults to kind AwsRoute53Zone and the alias target fields default to kind AwsAlb:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: app-alias
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.app-alias
spec:
  zoneId:
    valueFrom:
      name: my-zone
  name: app.example.com
  type: A
  aliasTarget:
    dnsName:
      valueFrom:
        name: my-alb
    zoneId:
      valueFrom:
        name: my-alb
    evaluateTargetHealth: true

Weighted Routing for Canary Deployment

Split traffic between two endpoints. Create two AwsRoute53DnsRecord resources with the same name and type but different setIdentifier and weights:

Primary (90% traffic):

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: api-stable
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.api-stable
spec:
  zoneId: Z1234567890ABCDEF
  name: api.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.10"
  routingPolicy:
    weighted:
      weight: 90
  setIdentifier: stable

Canary (10% traffic):

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: api-canary
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.api-canary
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: api.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.20"
  routingPolicy:
    weighted:
      weight: 10
  setIdentifier: canary

Failover with Health Check

Active-passive failover between a primary and secondary endpoint. The primary record includes a health check; when it fails, Route53 returns the secondary:

Primary:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: app-primary
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.app-primary
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: app.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.10"
  routingPolicy:
    failover:
      failoverType: primary
  healthCheckId: hc-12345-abcde
  setIdentifier: primary

Secondary:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: app-secondary
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.app-secondary
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: app.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.20"
  routingPolicy:
    failover:
      failoverType: secondary
  setIdentifier: secondary

Stack Outputs

After deployment, the following outputs are available in status.outputs:

Output	Type	Description
`fqdn`	`string`	The fully qualified domain name of the created record (e.g., `www.example.com`)
`record_type`	`string`	The DNS record type that was created (e.g., `A`, `CNAME`, `TXT`)
`zone_id`	`string`	The hosted zone ID where the record was created
`is_alias`	`bool`	Whether this is an alias record (pointing to an AWS resource)
`set_identifier`	`string`	The set identifier, if using routing policies. Empty for simple routing.

AwsRoute53Zone — creates the hosted zone where DNS records are placed; also supports inline record creation
AwsAlb — provides load_balancer_dns_name and load_balancer_hosted_zone_id outputs for alias record targets
AwsCloudfront — provides the distribution DNS name for alias record targets
AwsCertManagerCert — DNS-validated certificates require TXT or CNAME records in the zone

AWS Route53 DNS Record

What Gets Created

When you deploy an AwsRoute53DnsRecord resource, OpenMCF provisions:

Route53 DNS Record — a route53.Record (AWS Classic) resource in the specified hosted zone, configured with the given record type, values or alias target, and optional routing policy

Depending on configuration, the record may be:

A standard record with explicit values and TTL (e.g., A record with IP addresses)
An alias record pointing to an AWS resource (ALB, CloudFront, S3 website, API Gateway) with automatic TTL from the target
A policy-routed record using weighted, latency-based, failover, or geolocation routing for advanced traffic management

Prerequisites

AWS credentials configured via environment variables or OpenMCF provider config
An existing Route53 hosted zone — provide the zone ID directly or reference an AwsRoute53Zone resource via valueFrom
A health check ID (optional) if using failover routing — health checks must be created separately in Route53
The target resource's DNS name and hosted zone ID if creating alias records — or reference an AwsAlb resource via valueFrom

Quick Start

Create a file dns-record.yaml:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: www-example
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: dev.AwsRoute53DnsRecord.www-example
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: www.example.com
  type: A
  ttl: 300
  values:
    - "203.0.113.10"

Deploy:

openmcf apply -f dns-record.yaml

This creates an A record for www.example.com pointing to 203.0.113.10 with a 5-minute TTL.

Configuration Reference

Required Fields

Field	Type	Description	Validation
`region`	`string`	The AWS region where the resource will be created.	Required
`zoneId`	`StringValueOrRef`	The Route53 hosted zone ID where this record is created. Can reference an AwsRoute53Zone resource via `valueFrom` (default kind: `AwsRoute53Zone`, default field: `status.outputs.zone_id`).	Required
`name`	`string`	The fully qualified domain name or subdomain (e.g., `www.example.com`, `*.example.com`).	Required. Pattern: hostname, subdomain, or wildcard.
`type`	`RecordType`	The DNS record type. Valid values: `A`, `AAAA`, `CNAME`, `MX`, `TXT`, `SRV`, `NS`, `CAA`.	Required. Cannot be `record_type_unspecified`.

At least one of values or aliasTarget must be specified. They are mutually exclusive.

Optional Fields

Field	Type	Default	Description
`ttl`	`int32`	`300`	Time to live in seconds. Valid range: 0-604800 (1 week). Ignored for alias records. Common values: 60 (fast changes), 300 (default), 86400 (static records).
`values`	`string[]`	`[]`	Record values. Format depends on type: A = IPv4 addresses, AAAA = IPv6, CNAME = target hostname, MX = priority + mail server, TXT = text values. Mutually exclusive with `aliasTarget`.
`aliasTarget`	`object`	—	Alias target for Route53 alias records. Use for zone apex records or free-query routing to AWS resources. Mutually exclusive with `values`.
`aliasTarget.dnsName`	`StringValueOrRef`	—	DNS name of the target resource. Can reference an AwsAlb resource via `valueFrom` (default kind: `AwsAlb`, default field: `status.outputs.load_balancer_dns_name`). Required for alias records.
`aliasTarget.zoneId`	`StringValueOrRef`	—	Hosted zone ID of the target AWS service (not your Route53 zone). Can reference an AwsAlb resource via `valueFrom` (default kind: `AwsAlb`, default field: `status.outputs.load_balancer_hosted_zone_id`). Required for alias records.
`aliasTarget.evaluateTargetHealth`	`bool`	`false`	When `true`, Route53 checks the health of the target before responding. Useful for failover scenarios.
`routingPolicy`	`object`	—	Routing policy for advanced traffic management. If not specified, simple routing is used. Only one policy type can be set.
`routingPolicy.weighted`	`object`	—	Weighted routing. Distributes traffic based on assigned weights.
`routingPolicy.weighted.weight`	`int32`	—	Weight value (0-255). Higher weight means more traffic. Weight of 0 stops traffic to this record.
`routingPolicy.latency`	`object`	—	Latency-based routing. Routes to the lowest-latency endpoint.
`routingPolicy.latency.region`	`string`	—	AWS region where this resource is located (e.g., `us-east-1`). Required for latency routing.
`routingPolicy.failover`	`object`	—	Failover routing. Automatic failover to secondary when primary fails.
`routingPolicy.failover.failoverType`	`FailoverType`	—	Must be `primary` or `secondary`. Required for failover routing.
`routingPolicy.geolocation`	`object`	—	Geolocation routing. Routes based on user location.
`routingPolicy.geolocation.continent`	`string`	—	Two-letter continent code (e.g., `NA`, `EU`, `AS`). Use continent or country, not both.
`routingPolicy.geolocation.country`	`string`	—	Two-letter ISO 3166-1 country code (e.g., `US`, `GB`, `DE`).
`routingPolicy.geolocation.subdivision`	`string`	—	US state code (e.g., `CA`, `NY`). Only valid when country is `US`.
`healthCheckId`	`string`	—	Route53 health check ID for failover routing. Health checks must be created separately.
`setIdentifier`	`string`	—	Unique identifier for routing policies. Required for weighted, latency, failover, and geolocation routing. Must be unique among records with the same name and type.

Examples

Simple A Record

A basic A record pointing a subdomain to an IP address:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: api-example
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: dev.AwsRoute53DnsRecord.api-example
spec:
  zoneId: Z1234567890ABCDEF
  name: api.example.com
  type: A
  ttl: 300
  values:
    - "203.0.113.10"
    - "203.0.113.11"

Alias Record Pointing to an ALB

An alias record at the zone apex pointing to an Application Load Balancer. Alias records at the apex are not possible with CNAME, and alias queries to AWS resources are free:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: apex-example
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.apex-example
spec:
  zoneId: Z1234567890ABCDEF
  name: example.com
  type: A
  aliasTarget:
    dnsName: my-alb-123456.us-east-1.elb.amazonaws.com
    zoneId: Z35SXDOTRQ7X7K
    evaluateTargetHealth: true

Using Foreign Key References

Reference other OpenMCF-managed resources instead of hardcoding IDs. The zoneId defaults to kind AwsRoute53Zone and the alias target fields default to kind AwsAlb:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: app-alias
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.app-alias
spec:
  zoneId:
    valueFrom:
      name: my-zone
  name: app.example.com
  type: A
  aliasTarget:
    dnsName:
      valueFrom:
        name: my-alb
    zoneId:
      valueFrom:
        name: my-alb
    evaluateTargetHealth: true

Weighted Routing for Canary Deployment

Split traffic between two endpoints. Create two AwsRoute53DnsRecord resources with the same name and type but different setIdentifier and weights:

Primary (90% traffic):

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: api-stable
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.api-stable
spec:
  zoneId: Z1234567890ABCDEF
  name: api.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.10"
  routingPolicy:
    weighted:
      weight: 90
  setIdentifier: stable

Canary (10% traffic):

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: api-canary
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.api-canary
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: api.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.20"
  routingPolicy:
    weighted:
      weight: 10
  setIdentifier: canary

Failover with Health Check

Active-passive failover between a primary and secondary endpoint. The primary record includes a health check; when it fails, Route53 returns the secondary:

Primary:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: app-primary
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.app-primary
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: app.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.10"
  routingPolicy:
    failover:
      failoverType: primary
  healthCheckId: hc-12345-abcde
  setIdentifier: primary

Secondary:

apiVersion: aws.openmcf.org/v1
kind: AwsRoute53DnsRecord
metadata:
  name: app-secondary
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.AwsRoute53DnsRecord.app-secondary
spec:
  region: us-east-1
  zoneId: Z1234567890ABCDEF
  name: app.example.com
  type: A
  ttl: 60
  values:
    - "203.0.113.20"
  routingPolicy:
    failover:
      failoverType: secondary
  setIdentifier: secondary

Stack Outputs

After deployment, the following outputs are available in status.outputs:

Output	Type	Description
`fqdn`	`string`	The fully qualified domain name of the created record (e.g., `www.example.com`)
`record_type`	`string`	The DNS record type that was created (e.g., `A`, `CNAME`, `TXT`)
`zone_id`	`string`	The hosted zone ID where the record was created
`is_alias`	`bool`	Whether this is an alias record (pointing to an AWS resource)
`set_identifier`	`string`	The set identifier, if using routing policies. Empty for simple routing.

AwsRoute53Zone — creates the hosted zone where DNS records are placed; also supports inline record creation
AwsAlb — provides load_balancer_dns_name and load_balancer_hosted_zone_id outputs for alias record targets
AwsCloudfront — provides the distribution DNS name for alias record targets
AwsCertManagerCert — DNS-validated certificates require TXT or CNAME records in the zone

AWS Route53 DNS Record

What Gets Created

Prerequisites

Quick Start

Configuration Reference

Required Fields

Optional Fields

Examples

Simple A Record

Alias Record Pointing to an ALB

Using Foreign Key References

Weighted Routing for Canary Deployment

Failover with Health Check

Stack Outputs

AWS Route53 Zone

Presets

AWS Route53 DNS Record

What Gets Created

Prerequisites

Quick Start

Configuration Reference

Required Fields

Optional Fields

Examples

Simple A Record

Alias Record Pointing to an ALB

Using Foreign Key References

Weighted Routing for Canary Deployment

Failover with Health Check

Stack Outputs

AWS Route53 Zone

Presets

AWS Route53 DNS Record

What Gets Created

Prerequisites

Quick Start

Configuration Reference

Required Fields

Optional Fields

Examples

Simple A Record

Alias Record Pointing to an ALB

Using Foreign Key References

Weighted Routing for Canary Deployment

Failover with Health Check

Stack Outputs

Related Components

AWS Route53 Zone

Presets

AWS Route53 DNS Record

What Gets Created

Prerequisites

Quick Start

Configuration Reference

Required Fields

Optional Fields

Examples

Simple A Record

Alias Record Pointing to an ALB

Using Foreign Key References

Weighted Routing for Canary Deployment

Failover with Health Check

Stack Outputs

Related Components

AWS Route53 Zone

Presets