» Resource: aws_route53_resolver_endpoint

Provides a Route 53 Resolver endpoint resource.

» Example Usage

resource "aws_route53_resolver_endpoint" "foo" {
  name      = "foo"
  direction = "INBOUND"

  security_group_ids = [

  ip_address {
    subnet_id = "${aws_subnet.sn1.id}"

  ip_address {
    subnet_id = "${aws_subnet.sn2.id}"
    ip        = ""

  tags {
    Environment = "Prod"

» Argument Reference

The following arguments are supported:

  • direction - (Required) The direction of DNS queries to or from the Route 53 Resolver endpoint. Valid values are INBOUND (resolver forwards DNS queries to the DNS service for a VPC from your network or another VPC) or OUTBOUND (resolver forwards DNS queries from the DNS service for a VPC to your network or another VPC).
  • ip_address - (Required) The subnets and IP addresses in your VPC that you want DNS queries to pass through on the way from your VPCs to your network (for outbound endpoints) or on the way from your network to your VPCs (for inbound endpoints). Described below.
  • security_group_ids - (Required) The ID of one or more security groups that you want to use to control access to this VPC.
  • name - (Optional) The friendly name of the Route 53 Resolver endpoint.
  • tags - (Optional) A map of tags to assign to the resource.

The ip_address object supports the following:

  • subnet_id - (Required) The ID of the subnet that contains the IP address.
  • ip - (Optional) The IP address in the subnet that you want to use for DNS queries.

» Attributes Reference

In addition to all arguments above, the following attributes are exported:

  • id - The ID of the Route 53 Resolver endpoint.
  • arn - The ARN of the Route 53 Resolver endpoint.
  • host_vpc_id - The ID of the VPC that you want to create the resolver endpoint in.

» Timeouts

aws_route53_resolver_endpoint provides the following Timeouts configuration options:

  • create - (Default 10 minutes) Used for creating Route 53 Resolver endpoint
  • update - (Default 10 minutes) Used for updating Route 53 Resolver endpoint
  • delete - (Default 10 minutes) Used for destroying Route 53 Resolver endpoint

» Import

Route 53 Resolver endpoints can be imported using the Route 53 Resolver endpoint ID, e.g.

$ terraform import aws_route53_resolver_endpoint.foo rslvr-in-abcdef01234567890