Skip to content

Commit afc2b0d

Browse files
authored
feat(route53): support HTTPS, SSHFP, SVCB, and TLSA DNS resource record (#31955)
### Issue # (if applicable) N/A ### Reason for this change Route53 supports additional record types. Ref: https://aws.amazon.com/about-aws/whats-new/2024/10/amazon-route-53-https-sshfp-svcb-tlsa-dns-support/ These are already supported in CFn. https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-resource-route53-recordset.html#cfn-route53-recordset-type ### Description of changes Add Enum. ### Description of how you validated changes Nothing because only enum added. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent ab1e91d commit afc2b0d

File tree

1 file changed

+33
-0
lines changed

1 file changed

+33
-0
lines changed

packages/aws-cdk-lib/aws-route53/lib/record-set.ts

+33
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,15 @@ export enum RecordType {
6565
*/
6666
DS = 'DS',
6767

68+
/**
69+
* An HTTPS resource record is a form of the Service Binding (SVCB) DNS record that provides extended configuration information,
70+
* enabling a client to easily and securely connect to a service with an HTTP protocol.
71+
* The configuration information is provided in parameters that allow the connection in one DNS query, rather than necessitating multiple DNS queries.
72+
*
73+
* @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#HTTPSFormat
74+
*/
75+
HTTPS = 'HTTPS',
76+
6877
/**
6978
* An MX record specifies the names of your mail servers and, if you have two or more mail servers,
7079
* the priority order.
@@ -120,6 +129,30 @@ export enum RecordType {
120129
*/
121130
SRV = 'SRV',
122131

132+
/**
133+
* A Secure Shell fingerprint record (SSHFP) identifies SSH keys associated with the domain name.
134+
* SSHFP records must be secured with DNSSEC for a chain of trust to be established.
135+
*
136+
* @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#SSHFPFormat
137+
*/
138+
SSHFP = 'SSHFP',
139+
140+
/**
141+
* You use an SVCB record to deliver configuration information for accessing service endpoints.
142+
* The SVCB is a generic DNS record and can be used to negotiate parameters for a variety of application protocols.
143+
*
144+
* @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#SVCBFormat
145+
*/
146+
SVCB = 'SVCB',
147+
148+
/**
149+
* You use a TLSA record to use DNS-Based Authentication of Named Entities (DANE).
150+
* A TLSA record associates a certificate/public key with a Transport Layer Security (TLS) endpoint, and clients can validate the certificate/public key using a TLSA record signed with DNSSEC.
151+
*
152+
* @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#TLSAFormat
153+
*/
154+
TLSA = 'TLSA',
155+
123156
/**
124157
* A TXT record contains one or more strings that are enclosed in double quotation marks (").
125158
*

0 commit comments

Comments
 (0)