cli53 for Mac

cli53 - Command line tool for Amazon Route 53

Introduction

cli53 provides import and export from BIND format and simple command line management of Route 53 domains.

Features: import and export BIND format create, delete and list hosted zones create, delete and update individual records create AWS extensions: failover, geolocation, latency, weighted and ALIAS records create, delete and use reusable delegation sets

Installation

Installation is easy, just download the binary from the github releases page (builds are available for Linux, Mac and Windows): https://github.com/barnybug/cli53/releases/latest

$ sudo mv cli53-my-platform /usr/local/bin/cli53 $ sudo chmod +x /usr/local/bin/cli53

Alternatively, on Mac you can install it using homebrew

$ brew install cli53

To configure your Amazon credentials, either place them in a file ~/.aws/credentials:

[default] aws_access_key_id = AKID1234567890 aws_secret_access_key = MY-SECRET-KEY

Or set the environment variables: AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.

You can switch between different sets in the credentials file by passing --profile to any command, or setting the environment variable AWS_PROFILE. For example:

cli53 list --profile my_profile

You can also assume a specific role by passing --role-arn to any command. For example:

cli53 list --role-arn arn:aws:iam::123456789012:role/myRole

You can combine role with profile. For example:

cli53 list --profile my_profile --role-arn arn:aws:iam::123456789012:role/myRole

For more information, see: http://blogs.aws.amazon.com/security/post/Tx3D6U6WSFGOK2H/A-New-and-Standardized-Way-to-Manage-Credentials-in-the-AWS-SDKs

Note: for Alpine on Docker, the pre-built binaries do not work, so either use Debian, or follow the instructions below for Building from source.

Building from source

To build yourself from source (you will need golang >= 1.21 installed):

$ go install github.com/barnybug/cli53/cmd/cli53@latest

This will produce a binary cli53 in $GOPATH/bin (~/go/bin by default), after this follow the steps as above.

IAM permissions

Attach the following policy to the IAM user or role that cli53 runs as. [!WARNING] Security note: The Cli53ManageZones and Cli53ManageDelegationSets statements use "Resource": "*", which lets cli53 modify and delete any hosted zone or reusable delegation set in the account. These actions should ideally be scoped to the specific ARNs cli53 is allowed to manage, for example:

Getting Started

Create a hosted zone:

$ cli53 create example.com --comment 'my first zone'

Check what we've done:

$ cli53 list

List also supports other output formats (eg. json for scripting using jq):

$ cli53 list -format json | jq .[].Name

Import a BIND zone file:

$ cli53 import --file zonefile.txt example.com

Replace with an imported zone, waiting for completion:

$ cli53 import --file zonefile.txt --replace --wait example.com

Also you can 'dry-run' import, to check what will happen: