Setting TXT records via AWS CLI for ACME DNS-01 challenges
Daniel Nashed – 13 May 2021 06:57:00
Most of the Domino V12 CertMgr integrations for DNS-01 challenges I built so far, leverage REST API interfaces.
This isn't an option for AWS DNS. But we finally found a straightforward way using the AWS CLI.
All the AWS Route 53 implementations I saw for other ACME implementations looked pretty complicated.
We just authorized the machine to modify the DNS sub domain. Requests looks like what you see below. You can just specify a JSON file.
In my final script I am just passing the zone ID and replace variables I added instead of the sample values below.
This might be useful also for others integrating with AWS for TXT record updates -- or even other DNS automation.
You will find the full integration script later in the planned HCL open source GitHub repo for Domino V12 CertMgr along with more DNS-01 API integration configurations.
If you need this for CertMgr today, just ping me.
-- Daniel
Reference: https://aws.amazon.com/premiumsupport/knowledge-center/simple-resource-record-route53-cli/
Example command and JSON file:
aws route53 change-resource-record-sets --hosted-zone-id Z012345671ABCD123L42 --change-batch file://txt_create.json
The inner quotes in the value are important. AWS expects an inner quoted string for TXT records.
txt_create.json
---------------
{
"Changes": [
{
"Action": "CREATE",
"ResourceRecordSet": {
"Name": "_acme-challenge.newton.acme.com",
"Type": "TXT",
"TTL": 30,
"ResourceRecords": [
{
"Value": "\"duakBxodnTeocISUOQr1vnQfQ09Axv0Sihk0GrHSevI\""
}
]
}
}
]
}
- Comments [0]
![[HCL Domino]](../lotus-domino.gif){kind=small}
![[Domino on Linux]](../domino-linux.gif){kind=small}
![[Nash!Com]](../nashcom.gif){kind=small}
![[Daniel Nashed]](../daniel-nsh.gif){kind=small}