pdns-dynamodb
PowerDNS backend using DynamoDB
Schema
name - string - hash key
type - string - range key
ttl - number
values - set of strings
Note that in order to simplify the DynamoDB schema MX and SRV records must store the priority field at the beginning of the content, separated by a TAB.
Permissions
It is recommended you create a special IAM users that only has permissions for querying DNS records to be used by this backend. You can use the following IAM policy template (replacing REGION, ACCOUNTID and TABLE with the correct values).
{
"Statement": [
{
"Action": [
"dynamodb:DescribeTable",
"dynamodb:GetItem",
"dynamodb:Query"
],
"Effect": "Allow",
"Resource": [
"arn:aws:dynamodb:REGION:ACCOUNTID:table/TABLE"
]
}
]
}
Usage
Secret key storage
Place the secret key of the IAM account into a file that is only readable by the pdns user.
Executable script
Create an executable script that looks like
#!/bin/sh exec /path/to/pdns-dynamodb -t TABLE -r REGION -I ACCESS_KEY -K /path/to/secret.key
Replacing TABLE, REGION and ACCESS_KEY with the appropriate values and the path to secret key from the previous step.
PowerDNS backend configuration
Configure pdns.conf as follows:
launch=pipe pipe-command=/path/to/executable/script
using the path to the executable script you created above.
Metadata
Release files for pdns-dynamodb 1.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| pdns-dynamodb-1.0.2.tar.gz | 5.2 kB | Without provenance | Details for pdns-dynamodb-1.0.2.tar.gz |
Release files / pdns-dynamodb-1.0.2.tar.gz
| Download URL | pdns-dynamodb-1.0.2.tar.gz |
|---|---|
| Size | 5.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
316239338e24300dcf13ced7f3e45956f9eb0fd64052254ebf2ca7f648a23350
|
|
BLAKE2b-256 checksum How to use checksums |
e0a564f13d1c3b4b9864e1127252522cbe6de522336ed80ac7ab2bf9728207ca
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for pdns-dynamodb 1.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.